Privacy Policy

1. Who we are

Elvatu Private Limited ("Elvatu", "we", "us") operates https://elvatu.com (the "Platform"). This Privacy Policy explains what personal data we collect, why we collect it, and who we share it with.

Privacy questions or data requests: support@elvatu.com.

2. Data we collect

Depending on how you use the Platform, we may collect:

• Account data: name, email address, phone number, password hash, role (learner/mentor/admin)
• Profile data: bio, photo, resume files, skills, work history, and booking preferences
• Mentor verification data: LinkedIn URL, PAN details and document, company email, and verification status
• Transaction data: service orders, wallet balances, payment status, and payout records (payment card details are handled by our payment gateway, not stored by us)
• Session data: scheduled times, meeting links, attendance flags, notes, and related support or dispute records
• Communications: in-app chat messages, support tickets, and emails we send or receive with you
• Community data: posts, replies, hashtags, uploads, upvotes, saves, and reports you submit
• AI usage data: prompts, resume text, and generated outputs linked to your account when you use AI features
• Technical data: IP address, browser/device information, and usage events needed to secure and operate the Platform

3. How we use data

We use personal data to:

• Create and manage your account
• Match learners with mentors and process bookings
• Run escrow profile reviews, wallet movements, and mentor payouts
• Provide AI Career Companion features
• Send transactional emails and in-app notifications
• Operate Community, chat, and support/dispute workflows
• Verify mentor identity and prevent fraud or abuse
• Measure product usage through first-party analytics and, where enabled, Google Analytics

4. Who we share data with

We do not sell your personal data.

We share data only when needed to operate the Platform:

• Other users: when you book a service, relevant contact and order details are shared between the learner and mentor involved
• Payment processors: PayU or Razorpay (whichever is configured in production) to process payments
• Google services: sign-in (if you use Google OAuth), Google Meet for sessions, Google Gemini for AI features, and Google Analytics for website analytics when enabled
• Email delivery: our SMTP email provider to send account, session, and support emails
• Infrastructure providers: hosting and database services used to run the Platform
• Legal requirements: if required by law, court order, or to protect rights, safety, and Platform integrity

5. Cookies and analytics

We use cookies and similar technologies needed for login sessions and Platform functionality.

Where enabled, we use Google Analytics (Google Tag / gtag) to understand traffic and feature usage. You can limit analytics through your browser settings or applicable Google opt-out tools.

We also record first-party product analytics events tied to your account when you are signed in.

6. Data retention

We keep account and transaction records while your account is active and for as long as needed to provide the Platform, resolve disputes, meet legal obligations, and maintain financial records.

If you request account deletion, we will delete or anonymize personal data where we are not required to retain it for legal, tax, or fraud-prevention reasons.

7. Security

We use HTTPS in production and apply access controls, authentication, and other measures appropriate to the nature of the data we hold.

Payment card data is processed by our payment gateway providers under their security standards; we do not store full card numbers on our servers.

No online service can guarantee absolute security. Please use a strong password and contact us if you suspect unauthorized access.

8. Your choices and rights

You can update much of your profile data in the Platform. You may request access, correction, or deletion of personal data by emailing support@elvatu.com.

We may need to verify your identity before processing a request. Some data may be retained where we have a lawful reason to keep it.

9. Changes

We may update this Privacy Policy when our product or legal obligations change. The "Last updated" date at the top will change when we do. Continued use of the Platform after an update means you accept the revised policy.