Privacy policy.

LAST UPDATED: SEPTEMBER 9, 2026

Introduction

Elev8 AI Solutions & Services ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.elev8ai.org and use our services.

We operate in full compliance with the latest privacy regulations, including GDPR, CCPA, and the new 2025 US state privacy laws (Delaware, Iowa, Tennessee, and others). As an AI-focused company, we are especially committed to transparency about how we handle data in relation to artificial intelligence systems.

Information We Collect

Information You Provide

  • Contact Information: Name, email address, phone number, and company name when you fill out forms or contact us.
  • Assessment Responses: Information you provide through our AI assessment chatbot (Victoria) to help us understand your business needs.
  • Payment Information: Billing details processed securely through Stripe (we never store your full credit card numbers).

    • Information Collected Automatically

  • Device Information: Browser type, operating system, and device identifiers.
  • Usage Data: Pages visited, time spent on site, and interaction patterns (collected via privacy-first analytics).

    • Payment Security & PCI DSS v4.0 Compliance

    We take payment security extremely seriously. Our payment processing is fully compliant with the Payment Card Industry Data Security Standard (PCI DSS) version 4.0, which became mandatory in 2024/2025.

    Our Payment Security Measures

  • Stripe Checkout: We use Stripe's hosted checkout pages, which means your card details are entered directly on Stripe's secure servers—never on our website. This drastically reduces our PCI scope and your risk.
  • Content Security Policy (CSP): We implement strict CSP headers that only allow scripts from trusted domains (js.stripe.com, analytics services), preventing malicious script injection.
  • Stripe Radar: We use Stripe's machine learning-powered fraud detection to block card testing attacks and fraudulent transactions before they occur.
  • 3D Secure 2 (3DS2): Enhanced authentication for card payments, providing an additional layer of security for online transactions.

    • We never store, process, or transmit your full credit card numbers on our servers. All payment data is handled exclusively by Stripe, a PCI Level 1 certified payment processor.

    AI Systems & Data Transparency

    As an AI consulting company, we are committed to full transparency about how your data interacts with artificial intelligence systems.

    Victoria AI Assistant

    Our AI chatbot (Victoria) uses your conversation inputs to provide personalized recommendations. Conversations are processed in real-time and are not used to train AI models. Your assessment responses are stored securely to help us serve you better.

    Voice Synthesis

    Victoria's voice is generated using ElevenLabs AI. Text you receive as voice responses is processed by ElevenLabs solely for audio generation and is not stored or used for training purposes.

    AI Service Development

    When you engage our AI development services, any data used to train custom AI solutions for your business remains your property. We do not use client data to train our own models or share it with third parties.

    Privacy-First Analytics

    We prioritize your privacy in our analytics approach. Unlike traditional analytics platforms that track personal data extensively, we use privacy-centric methods:

  • Minimal Data Collection: We collect only aggregate, anonymized data about site usage—not personal browsing histories.
  • No Cross-Site Tracking: We do not track your activity across other websites.
  • GDPR-Compliant by Design: Our analytics approach is designed to respect privacy regulations without requiring intrusive cookie consent banners for basic analytics.

    • Infrastructure Security

    HTTPS & HSTS

    All connections are encrypted via HTTPS. We implement Strict Transport Security (HSTS) to prevent downgrade attacks.

    Bot Protection

    We use advanced bot protection to prevent AI scrapers, card testing attacks, and malicious automated access.

    Security Headers

    We implement X-Content-Type-Options, X-Frame-Options, and other security headers to protect against common web vulnerabilities.

    Regular Audits

    We conduct regular security audits and maintain an inventory of all scripts on payment pages per PCI DSS v4.0 requirements.

    Your Privacy Rights

    We comply with GDPR, CCPA, and 2025 US state privacy laws. You have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten").
  • Right to Opt-Out: Opt out of the sale or sharing of your personal information.
  • Global Privacy Control (GPC): We automatically respect browser GPC signals. If your browser sends a "Do Not Sell" signal, we honor it without requiring additional action from you.

    • To exercise any of these rights, please contact us at privacy@elev8ai.org or call us at 813-669-0932.

    Data Retention

    We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Assessment data and lead information is retained for up to 2 years unless you request earlier deletion. Payment transaction records are retained as required by law and PCI DSS standards.

    Third-Party Services

    We use the following third-party services that may process your data:

  • Stripe: Payment processing (PCI Level 1 certified)
  • Anthropic (Claude): AI conversation processing
  • ElevenLabs: Voice synthesis
  • Resend: Email delivery
  • Twilio: SMS notifications

    • Each of these providers maintains their own privacy policies and security certifications. We only share the minimum data necessary for each service to function.

    Contact Us

    If you have questions about this Privacy Policy or our data practices, please contact us:

    Elev8 AI Solutions & Services

    Email: privacy@elev8ai.org

    Phone: 813-669-0932

    Hours: Monday - Friday, 8AM - 6PM EST

    Policy Updates

    We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page with a new "Last Updated" date. We encourage you to review this policy periodically.