1. Introduction
Elvix AI, LLC ("Company," "we," "our," or "us") is a Delaware limited liability company with its principal place of business at 131 Continental Dr, Suite 305, Newark, DE 19713, United States. We operate the Elvix AI Sales Agent platform (the "Service").
This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you access or use our website (elvix.ai) and the Elvix Service. It also explains your rights under applicable US privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), the Delaware Personal Data Privacy Act (DPDPA), and other state privacy statutes.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide Directly
When you register for an account, contact us, or use the Service, you may provide:
- Account Information: full name, email address, company name, phone number, billing address, and payment information (processed by our third-party payment processor — we do not store full payment card data).
- Business Data: documents, PDFs, website URLs, pricing sheets, product catalogues, sales scripts, and other materials uploaded to train your AI Sales Agent.
- Agent Configuration: custom instructions, tone-of-voice settings, integration preferences, and sales workflow definitions.
- Communications: messages you send to us via support chat, email, or otherwise.
2.2 Information Collected Automatically
When you visit our website or use the Service, we may automatically collect:
- Usage Data: pages visited, features used, time spent, interaction patterns, and referring URLs.
- Device & Browser Data: IP address, browser type and version, operating system, device type, and language preferences.
- Conversation Data: messages exchanged between your website visitors and the AI Sales Agent, including metadata (timestamps, visitor IP, session duration).
- Cookies & Tracking Technologies: see Section 5 below.
2.3 Information from Third Parties
We may receive information from:
- Integrated Services: Stripe (payment data), HubSpot / Pipedrive (CRM data), WhatsApp / Messenger (message routing), and Make.com (workflow automation) — subject to their respective privacy policies and your authorisation.
- Your End Customers: when your website visitors interact with the AI Sales Agent, their messages and provided contact details are collected on your behalf. You are responsible for obtaining any required consent from your end users.
3. How We Use Your Information
We use the collected information for the following purposes:
- To Provide and Operate the Service: configure AI agents, process conversations, manage subscriptions, and deliver the core platform functionality.
- To Train and Improve AI Agents: your business data is used exclusively to power your AI Sales Agent(s) within your isolated namespace. We do not use your business data to train or improve models shared with other customers.
- To Process Payments: manage billing, invoices, and subscription lifecycle via Stripe.
- To Communicate With You: send service announcements, account notifications, technical updates, and customer support responses.
- To Ensure Security & Compliance: detect and prevent fraud, abuse, unauthorized access, and violations of our Terms of Service.
- To Improve the Service: analyze aggregated, anonymized usage patterns to enhance performance, features, and user experience.
We do not sell your personal information. We do not use your business documents or conversation data to train general-purpose AI models accessible to other customers.
4. Data Sharing and Disclosure
We may share your information with the following categories of third parties:
- Service Providers: cloud hosting (AWS / Pinecone for vector storage), payment processing (Stripe), AI infrastructure providers, email delivery services (Sender), and analytics platforms who process data on our behalf under written data processing agreements.
- Integrated Platforms: with your authorisation, we share relevant data with third-party platforms you connect (HubSpot, Pipedrive, WhatsApp, Calendly, Make.com) to enable the Service functionality.
- Legal Compliance: when required by law, court order, or governmental regulation, or to enforce our Terms of Service, protect our rights, or respond to lawful requests from public authorities.
- Business Transfers: in connection with a merger, acquisition, sale of assets, or bankruptcy proceeding, your information may be transferred as a business asset.
We require all third-party service providers to maintain confidentiality, implement appropriate security measures, and process data only for the purposes specified by us.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and analyze usage.
5.1 Types of Cookies We Use
- Essential/Strictly Necessary Cookies: required for authentication, session management, and platform functionality. These cannot be disabled.
- Functional Cookies: remember your preferences, consent choices, and settings.
- Analytics Cookies: collect anonymized data about how you interact with our website. These are only set with your explicit consent.
5.2 Cookie Consent
Upon your first visit, we display a cookie consent banner. By clicking "Accept All," you consent to the use of all cookies. By clicking "Reject All," only strictly necessary cookies will be used. Your choice is stored for 12 months. You can change your preferences at any time by clearing your browser cookies.
5.3 Third-Party Cookies
We do not currently use third-party advertising or tracking cookies. If we integrate analytics services (e.g., Microsoft Clarity) in the future, we will update this policy and seek appropriate consent.
5.4 Do Not Track
Our Service does not currently respond to "Do Not Track" (DNT) signals. We will update this policy if industry standards evolve.
6. Data Security
We implement industry-standard technical and organisational security measures, including:
- We use infrastructure that provides encryption at rest and in transit, implement role-based access controls for administrative access, and maintain logical tenant isolation for each customer's data.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we commit to promptly notifying you of any data breach affecting your information as required by applicable law.
7. Data Retention
We retain your personal information and business data for as long as your account is active or as needed to provide the Service. Upon account termination or cancellation:
- Your business documents, knowledge base, and agent configuration are deleted or anonymized within 90 days.
- Conversation data may be retained in aggregated, anonymized form for analytics purposes.
- Billing records are retained as required by tax and financial regulations (typically 7 years).
You may request earlier deletion of your data by contacting us — see Section 12.
8. Your Privacy Rights (US State Laws)
Depending on your state of residence, you may have the following rights under applicable US privacy laws (including the CCPA, DPDPA, and similar state statutes):
- Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to Access: request a copy of the personal information we hold about you.
- Right to Correct: request correction of inaccurate or incomplete personal information.
- Right to Delete: request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).
- Right to Opt Out of Sale: we do not sell personal information. However, you have the right to opt out of any future sale or sharing for cross-context behavioral advertising.
- Right to Non-Discrimination: we will not discriminate against you for exercising any of your privacy rights.
- Right to Appeal: if we decline to take action on your request, you may appeal our decision within a reasonable period.
To exercise your rights, please submit a verifiable request to [email protected]. We will respond within 45 days (or as required by applicable law). We may need to verify your identity before processing your request.
California Residents (CCPA)
If you are a California resident, the CCPA grants you the additional right to request that we disclose the categories of personal information collected, the sources from which it was collected, the business purpose for collection, and the categories of third parties with whom we share it. You may also request the specific pieces of personal information we have collected about you.
Delaware Residents (DPDPA)
If you are a Delaware resident, the Delaware Personal Data Privacy Act grants you the rights listed above.Elvix AI, LLC is a Delaware limited liability company and fully complies with the DPDPA's requirements for data controllers.
9. Artificial Intelligence & Your Data
Elvix uses AI models (including third-party large language models) to power the AI Sales Agent. Important notes regarding AI and your data:
- Training Isolation: your business documents and conversation data are processed in an isolated namespace. They are not used to train general-purpose AI models.
- Third-Party AI Providers: we may route data through third-party AI inference providers (e.g., OpenAI, Anthropic). These providers are contractually bound not to retain or use your data for their own purposes.
- AI Outputs: AI-generated responses may not always be accurate, complete, or appropriate. You are responsible for monitoring and reviewing your AI Sales Agent's behavior.
- Opt-Out: if you wish to opt out of AI-powered features, please contact us. Some functionality may be limited as a result.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete it. If you believe a minor has submitted data to us, please contact us.
11. International Data Transfers
Elvix primarily stores and processes data in the United States. If you are located outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to such transfer. We take appropriate safeguards (Standard Contractual Clauses where applicable) to ensure adequate protection of your data.
12. Contact Information
For privacy-related inquiries, data subject requests, or questions about this policy, please contact:
Elvix AI, LLC (Data Controller)
Email: [email protected]
Address: 131 Continental Dr, Suite 305, Newark, DE 19713, United States
For the purposes of US state privacy laws, Elvix is the "data controller" or "business" that determines the purposes and means of processing your personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the Service. Material changes will be communicated via email (to the primary email on your account) or through a prominent notice on the platform. Your continued use of the Service after such changes constitutes acceptance of the updated policy.
14. Governing Law
This Privacy Policy and any disputes arising under it shall be governed by the laws of the State of Delaware, United States, without regard to conflict of law principles.