Privacy Policy
Last updated: October 4, 2026
1. Who We Are
Elevoi ("we", "us", or "our") is a software service operated as a sole proprietorship in Canada. We provide AI-powered business tools — including an AI receptionist, AI marketing automation, and reputation management — to small businesses, primarily in the beauty, wellness, and personal services sectors.
This Privacy Policy explains how we collect, use, and protect personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
For questions about this policy, contact us at: privacy@elevoi.ca
2. Information We Collect
About you (our customer)
- Name, email address, and password when you create an account
- Business name, address, phone number, and industry
- Business hours and service offerings
- Payment information (processed by Stripe — we never store raw card numbers)
- OAuth tokens for third-party integrations you choose to connect (e.g., Google Calendar and Google Business Profile)
About your customers (end users)
When you use Elevoi to manage your customer relationships, we process data on your behalf as a data processor. This may include your customers':
- Name and phone number
- Appointment and calendar event details, such as date, time, service, staff member, and booking status
- SMS consent status and history
- Call transcripts (from the AI Receptionist)
You, as the business owner, are responsible for having appropriate consent to collect and share this information with us.
Usage data
- Log data (IP addresses, browser type, pages visited)
- Feature usage and product analytics
3. How We Use Your Information
- To provide, maintain, and improve the Elevoi platform
- To process payments and manage your subscription
- To send transactional emails (account verification, password reset, billing receipts)
- To provide customer support
- To power AI features such as call handling, campaign generation, and review responses
- To read availability and create, update, or remove appointment events on calendars you connect
- To comply with legal obligations
We do not sell your personal information to third parties. We do not use your data or your customers' data to train AI models for other customers.
Elevoi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the calendar and business-profile features that you request. It is not used for advertising, sold, or accessed by people except when necessary to provide support with your permission, protect the service, or comply with applicable law.
4. SMS Messaging & CASL Compliance
Elevoi sends SMS messages on behalf of our business customers to their clients. We are committed to compliance with Canada's Anti-Spam Legislation (CASL).
- SMS messages are only sent to end users who have given express or implied consent to the business.
- Every SMS sent includes identification of the sending business and a clear opt-out mechanism.
- End users can unsubscribe at any time by replying STOP, or via the unsubscribe link in messages.
- Unsubscribe requests are processed immediately and no further messages will be sent.
- Consent records are maintained with timestamps and method of consent.
5. Third-Party Services
We use the following third-party services to operate the platform. Each has its own privacy policy.
| Service | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Billing info, email |
| Twilio | SMS & phone calls | Phone numbers, message content |
| OpenAI / Google Gemini | AI features (call handling, campaign writing) | Call transcripts, campaign context |
| Deepgram | Voice transcription & synthesis | Call audio |
| Supabase | Database hosting | All platform data (hosted in Canada/US) |
| Resend | Transactional email | Email address, name |
| Google Business Profile | Review management (when connected) | Business profile data |
| Google Calendar | Availability and two-way appointment synchronization (when connected) | Calendar event and availability data |
| Yelp | Review management (when connected) | Business profile data |
6. Data Retention
- Account data is retained for as long as your account is active.
- Google Calendar event data is retained only while needed to synchronize appointments; OAuth tokens are retained while the integration remains connected.
- Disconnecting Google Calendar stops future access and deletes the stored Google OAuth tokens and synchronization connection.
- Upon account deletion, your data is removed within 30 days, except where required by law.
- Call transcripts are retained for 90 days.
- SMS consent records and unsubscribe logs are retained for 3 years as required by CASL.
- Billing records are retained for 7 years as required by Canadian tax law.
7. Your Rights
Under PIPEDA, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Withdraw consent (subject to legal or contractual restrictions)
- File a complaint with the Office of the Privacy Commissioner of Canada
To exercise any of these rights, email us at privacy@elevoi.ca. We will respond within 30 days.
8. Security
We protect your information using industry-standard security measures including AES-256 encryption at rest, TLS in transit, and access controls. No method of transmission over the internet is 100% secure, but we take commercially reasonable steps to protect your data.
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes by email or by posting a notice in the application. Continued use of Elevoi after changes constitutes acceptance of the updated policy.
10. Contact
For privacy-related questions or requests, contact us at: