Elevatry App Privacy Policy

1. At a glance

• • Elevatry is an application for businesses. You receive your account through your organization, for example by invitation.
• • The app processes data only to provide its features.
• • No tracking, no advertising, no third-party analytics SDKs, no sale of data.
• • The app accesses the microphone, camera, photos, calendar and notifications only with your permission. You can revoke it at any time in iOS Settings.

2. Controller

The controller for the app’s account and operational data is:

Elevatry GmbH
Alte Poststraße 10
85598 Vaterstetten-Baldham
Germany
Email: hello@elevatry.ai

3. Who is responsible for which data

Elevatry is a business application. Accounts are created by organizations – our customers – or issued by invitation. This results in two roles:

• Your organization’s content – Your organization is responsible for the content you process within it – chats, files and meetings. Elevatry processes this content as a processor on behalf of and on the instructions of your organization (Art. 28 GDPR).
• Account and operational data – Elevatry itself is the controller for the data needed for your account and for running the app – such as sign-in, the device token for notifications, and security.

Please direct questions about your organization’s content – such as who can access it, how long it is kept, or how to exercise your rights regarding it – to your organization. If you contact us with such a request, we will forward it to your organization or support it in responding.

4. Sign-in

The app opens the regular Elevatry sign-in in a secure Apple system browser window. Access tokens are stored encrypted in your device’s Keychain. The app does not store passwords.

5. Data the app processes

All of the following data is linked to your account and is processed only to provide the app’s features to you.

• Account data – Name, email address, user ID, organization membership and – if you add one – profile picture.
• Chats – Your conversations with the AI assistant, including attachments: photos, camera captures, scanned documents and files.
• Files – Files in workspaces. Optionally, files from connected sources such as SharePoint or OneDrive – only if your organization has enabled this and you connect your account. Elevatry has read-only access.
• Audio – Dictation and voice conversations with the assistant on iPhone and Apple Watch. Audio is transmitted to our servers for processing. Recordings remain stored for as long as you wish and are deleted within our standard deletion periods.
• Meetings – When you send the Elevatry meeting bot to an online meeting, the meeting link, title, recording, transcript and summary are processed. This also captures contributions from other participants. Whether and how participants are informed is governed by your organization.
• Push notifications – A device token for the Apple Push Notification service. We use it to let you know about long AI responses, completed workflows and finished meeting transcripts. You can turn notifications off in the app under Profile → Notifications and in iOS Settings.

6. Permissions on your device

The app accesses the following only after you have agreed in the system dialog. You can revoke any permission at any time in iOS Settings.

• Microphone – for dictation and voice conversations.
• Camera – for photos and document scans as chat attachments.
• Photos – only the images you select yourself.
• Calendar – Events are read only on your device to suggest upcoming online meetings. Only the link and title of a meeting you actively send the bot to are transmitted to Elevatry.
• Notifications – for push notifications (see section 5).

7. Apple system features

The app supports the following Apple features:

• Handoff – Continue a chat – including text you have not sent yet – on your own devices signed in to the same Apple Account.
• Widgets – Elevatry on the Home Screen and Lock Screen.
• Control Center – quick access to Elevatry features.
• Siri and Shortcuts – start Elevatry features by voice or shortcut.
• Live Activities – follow ongoing tasks on the Lock Screen.

These features use Apple services. Apple’s privacy policy applies in addition: https://www.apple.com/legal/privacy/

8. What the app does not do

• • No tracking – neither within the app nor across other apps and websites.
• • No advertising.
• • No third-party analytics or crash-reporting SDKs.
• • No sale of data.

We receive crash reports only if you have agreed in iOS Settings to share them with app developers. Apple provides these reports to us.

9. What is stored on your device

• • Sign-in tokens, encrypted in the Keychain.
• • App settings, for example the selected microphone.
• • Cached content, so the app displays faster.

When you sign out or delete the app, this data is removed.

10. AI processing and hosting

So the assistant can respond, chat, file and audio content is sent to AI models. We will add the model providers and sub-processors we use for this here shortly.

Your organization can specify the data zone or the providers through which requests are processed.

Elevatry’s servers are operated by Amazon Web Services (AWS) in Frankfurt am Main, Germany (region eu-central-1).

Where data is processed outside the EU or EEA, we safeguard the transfer with the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

11. Recipients

Apart from Elevatry, data from the app is received only by:

• • our hosting provider (see section 10),
• • the providers of the AI models (see section 10),
• • Apple, for push notifications, the system features in section 7 and – with your consent – crash reports,
• • Microsoft, if you connect SharePoint or OneDrive.

We will add a complete list of our service providers here shortly.

12. Retention and deletion

Content remains stored for as long as your account or your organization keeps it. Deleted content first goes to the trash, where it can be restored yourself for the period set by your organization – 30 days by default. In addition, we keep backups for 180 days. After that, the data is irreversibly deleted.

Account deletion: ideally contact your Elevatry contact person, or send an email to hello@elevatry.ai.

13. Legal bases

• Art. 6(1)(b) GDPR – providing the app and its features.
• Art. 6(1)(a) GDPR – your consent, for example to permissions such as microphone or camera, and to push notifications.
• Art. 6(1)(f) GDPR – our legitimate interest in security and preventing misuse.
• Art. 28 GDPR – processing of your organization’s content (chats, files, meetings) on its behalf; your organization determines the legal basis for it.

14. Your rights

You have the right to:

• Access – to your stored data (Art. 15 GDPR)
• Rectification – of inaccurate data (Art. 16 GDPR)
• Erasure – of your data (Art. 17 GDPR)
• Restriction – of processing (Art. 18 GDPR)
• Data portability – (Art. 20 GDPR)
• Objection – to processing (Art. 21 GDPR)

You can withdraw consent at any time with effect for the future – for permissions and notifications most easily in iOS Settings. This does not affect the lawfulness of processing carried out before the withdrawal.

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation.

For account and operational data, contact hello@elevatry.ai. If your request concerns your organization’s content, your organization is your first point of contact (see section 3).

15. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or place of work. The authority responsible for Elevatry is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

16. Contact and changes

We answer questions about privacy in the app at hello@elevatry.ai.

If the app or the legal situation changes, we will update this privacy policy. The version published on this page applies.