Privacy
Policy.

Introduction

Elephaant ("we," "our," or "us") is a product-based startup that builds and operates software products including mobile applications, web applications, SaaS platforms, and other software-related products. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use any of our products and services (collectively, the "Services"). Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. This Privacy Policy should be read in conjunction with our Terms & Conditions.

1. Information We Collect

We may collect the following types of information when you use our Services:

a) Information You Provide Directly

• Account registration information such as your name, email address, and password.
• Profile information you choose to provide, such as a profile picture, bio, or preferences.
• Payment and billing information when you make a purchase or subscribe to a paid plan (processed securely through third-party payment processors — we do not store your full payment card details on our servers).
• Content you create, upload, or share within our products, such as text, files, images, or other user-generated content.
• Communications you send to us, including support requests, feedback, and survey responses.

b) Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, browser type, and version.
• Log Data: IP address, access times, pages or screens viewed, app crashes, and other system activity.
• Usage Data: How you interact with our Services, including features used, actions taken, time spent, and navigation patterns.
• Cookies & Similar Technologies: We use cookies, local storage, and similar technologies to maintain your session, remember your preferences, and understand how our Services are used.
• Location Data: We may collect approximate location information based on your IP address. We do not collect precise GPS location data unless you explicitly grant permission within a specific product.

c) Information from Third Parties

• If you sign in using a third-party service (e.g., Google, Apple, GitHub), we may receive your name, email address, and profile picture from that service.
• Analytics and attribution data from third-party tools we use to improve our Services.

2. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations under our agreement with you, including providing and maintaining the Services you have subscribed to or purchased.
• Consent: Where you have given us explicit consent to process your data for specific purposes, such as marketing communications or optional data collection.
• Legitimate Interests: To operate, improve, and secure our Services, provided that our interests do not override your fundamental rights and freedoms.
• Legal Obligations: To comply with applicable laws, regulations, and legal processes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain our Services and deliver the features and functionality you expect.
• To create and manage your account, authenticate your identity, and provide customer support.
• To process transactions and send you related information such as purchase confirmations, invoices, and subscription updates.
• To send you technical notices, security alerts, and administrative messages about your account or the Services.
• To analyze usage patterns and improve our products, develop new features, and enhance user experience.
• To communicate with you about product updates, new products, offers, and promotions (you can opt out at any time).
• To detect, prevent, and address fraud, abuse, security issues, and technical problems.
• To comply with legal obligations and enforce our terms of service.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party vendors who help us operate our Services (e.g., cloud hosting, payment processing, analytics, email delivery). These providers are contractually bound to use your data only for the purposes we specify and in accordance with this Privacy Policy.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Elephaant, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Aggregated or Anonymized Data: We may share aggregated or de-identified data that cannot reasonably be used to identify you, for purposes such as analytics, research, or industry benchmarking.
• With Your Consent: We may share your information when you give us explicit consent to do so.

5. Third-Party Services

Our Services may integrate with or contain links to third-party services, tools, or platforms (such as analytics providers, payment gateways, authentication services, and cloud infrastructure providers). These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third-party services. When you interact with third-party features integrated into our products (such as social login, in-app purchases via app stores, or embedded content), the relevant third party's privacy policy will also apply.

6. Data Storage & Security

We implement industry-standard technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure access controls and authentication mechanisms.
• Regular security assessments and monitoring.
• Limited access to personal information on a need-to-know basis.
• Secure cloud infrastructure from reputable providers with industry certifications.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When your data is no longer needed, we will securely delete or anonymize it. If you delete your account, we will remove your personal data within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes (such as resolving disputes or enforcing our agreements).

8. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to certain legal exceptions.
• Data Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
• Restriction: Request that we restrict the processing of your personal data under certain circumstances.
• Objection: Object to the processing of your personal data where we are relying on legitimate interests as our legal basis.
• Opt-Out: Unsubscribe from marketing communications at any time by using the unsubscribe link in our emails or contacting us directly.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@elephaant.com. We will respond to your request within a reasonable timeframe as required by applicable law. We will not discriminate against you for exercising any of these rights.

9. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete such information promptly. If you believe that a child has provided us with personal information, please contact us at hello@elephaant.com.

10. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. The types of cookies we use include:

• Essential Cookies: Necessary for the basic functionality of our Services, such as maintaining your session and security.
• Analytics Cookies: Help us understand how users interact with our Services so we can improve them.
• Preference Cookies: Remember your settings and preferences for a better experience.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Services.

11. Mobile Applications & Permissions

When you use our mobile applications, we may request access to certain device features and permissions, such as:

• Push Notifications: To send you important updates, reminders, and alerts. You can manage notification preferences in your device settings at any time.
• Camera & Photos: Only when required for specific features such as profile picture upload or document scanning.
• Storage: To save files, cache data for offline use, or enable file upload features.
• Network Access: To sync your data and provide real-time functionality.

You can revoke any of these permissions at any time through your device settings. Revoking certain permissions may limit the functionality of our apps.

12. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals. As there is currently no industry standard for recognizing or honoring DNT signals, our Services do not currently respond to DNT signals. However, you can manage your privacy preferences through your browser settings and the options described in this Privacy Policy.

13. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, regardless of where it is processed.

14. Automated Decision-Making & Profiling

Some of our Services may use automated processes or algorithms to personalize your experience, recommend content, or improve product features. We do not use automated decision-making that produces legal effects or similarly significant effects on you without human oversight. If any of our products introduce such features in the future, we will provide clear notice and, where required by law, obtain your consent and offer the right to request human review of the decision.

15. Product-Specific Privacy Notices

Individual Elephaant products may have additional privacy disclosures or settings specific to that product. These product-specific notices supplement this Privacy Policy and provide additional details about data practices particular to that product. In the event of a conflict between this Privacy Policy and a product-specific notice, the product-specific notice shall prevail for that product.

16. Grievance & Complaints

If you have a grievance or complaint regarding how we handle your personal data, please contact us at hello@elephaant.com. We will investigate and attempt to resolve your complaint promptly. If you are not satisfied with our response, you have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, provide additional notice through our Services or via email. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Please also review our Terms & Conditions and Refund & Cancellation Policy for additional information about our Services.