Privacy policy.

Contact and account information you give us — name, business or workspace name, email, phone, and address. A complete address is required to finish setting up an ELMNT ONE account. You may use your home or business address.

Payment information collected by our PCI-compliant payment processor (Stripe). Elmnt does not store full card numbers; we store a tokenized reference for billing purposes.

Client portal data — change requests, support tickets, messages, and uploaded documents — created by you while using your dashboard.

Safety records needed to investigate a specific report or held submission: the relevant original content and limited context, source and revision, verified author and recipient where established, server timestamps, evidence hash, numbered rule version, notices, restriction or decision history, and appeals. Claimed identities and client-supplied timestamps are distinguished from verified facts.

IP addresses, browser information, and timestamps used for security, uptime monitoring, and first-party journey analytics. IP-based location is approximate; it is different from the address you provide and does not establish your identity or exact physical location.

To deliver the services you signed up for: hosting, support, change requests, billing, reporting, and communication.

To send transactional emails — booking confirmations, billing receipts, support replies, and announcements relevant to your account.

To improve our services. We do not sell your data, and we do not use it to train external AI systems.

To protect people, investigate reported abuse and platform misuse, review context and attribution, give reasons for restrictions, handle appeals, reverse errors and reconcile eligible unused paid time. Phrase detection can hold a submission for review; it does not itself confirm misconduct. Significant account sanctions use the safety approval controls described in our Terms and Acceptable Use Policy.

Our infrastructure providers — Supabase (database and auth), Resend (email delivery), Stripe (payments), Google (calendar and meeting links). Each provider is bound by their own privacy and security commitments.

Authorized Elmnt staff who need access to support your account. Each staff member's access is scoped by role (Owner, Admin, Client Care, Sales Rep, Developer) and audited via our activity log.

Specifically authorized safety reviewers can access limited incident evidence and their access is recorded. A safety report does not grant general access to private mailboxes or unrelated tenant conversations. Routine alerts do not repeat the original abusive text. Decision emails contain the reason and review route; especially sensitive material has restricted handling.

Law enforcement, only if compelled by valid legal process and only the specific data demanded.

We use cookies to keep you signed in and, when enabled, to connect visits within our own website and ELMNT ONE. We do not use these analytics for cross-site advertising.

Our first-party analytics record page paths, marked product actions, session times, and approximate IP-based location. When you sign in, eligible journeys can be associated with your ELMNT account and viewed by authorized staff. Page tracking removes query strings and replaces identifiers and tokens in paths.

Analytics honor the supported Do Not Track and Global Privacy Control signals. Providing an account address does not override a denied device-location permission or a tracking opt-out. Device location is optional and requires a separate browser permission. If you choose to share it, coordinates are rounded on your device to roughly one kilometre and kept with their reported uncertainty. Location preferences lets you remove that estimate from the current visit. Where prior consent is required, journey storage waits for your analytics choice. You can allow or decline analytics and change that choice through the control below; the signed preference receipt lasts up to 180 days.

Journey history and restricted IP records follow a documented retention policy reviewed for continuing necessity. Where automatic expiry is disabled, records remain until an approved removal or policy change; this does not override your privacy rights. You can request removal using the form linked below. Approved analytics removals leave active use immediately; a restricted recovery copy is permanently removed after up to 30 days, subject to applicable legal deadlines. Minimal records needed to honor your request and any legally required records may remain.

Access — use your account settings or contact us to request a copy of your personal information.

Correction — update your details any time from Settings.

Deletion — request removal of specified information through the form below or email support@elmntone.com. We verify your identity before acting, explain any service-closure requirements and tell you about records we must retain by law. An IP address alone is not proof of account ownership.

Port-out — your data, your code, your domain. We package and transfer it on request (see Terms § Port-Out).

All data is transmitted over HTTPS. Database encryption at rest is provided by Supabase. Backups run daily; storage is encrypted.

Staff access is role-based with full audit logging. We rotate access on personnel changes and review permissions quarterly.

Elmnt services are intended for businesses. We do not knowingly collect data from anyone under 16.

Material changes to this policy are announced via the client dashboard and email at least 30 days before they take effect.

Safety evidence has a documented expiry and access purpose. Dismissed raw evidence is scheduled for removal after 30 days; resolved substantiated raw evidence is ordinarily retained for up to 12 months. An unresolved case or a specifically recorded legal hold may require continued restricted retention and review. A purge removes the original body and context from the active evidence record while minimal justified decision, financial and integrity records may remain. Copies, exports and backups follow their applicable retention and legal requirements.

You can review your notices and appeal at /safety while suspended, and may use our verified privacy-request process. We assess access, correction, erasure and other applicable rights while protecting other people's information and legally necessary records. Free or unpaid status does not remove privacy rights. We do not automatically record private calls or collect entire desktops for safety keyword detection.