Privacy Policy
Elanvo is a software product operated by Aervio.
1. Who we are and what this policy covers
This policy describes how Elanvo handles personal information on elanvo.app, panel.elanvo.app, api.elanvo.app, and sites published on Elanvo Website Edge. It covers people who create an Elanvo account and, separately, people whose information a business stores in its workspace. Contact hello@aervio.io for privacy questions. A separate privacy-officer title is not published.
2. Two different relationships
If you create an Elanvo account, we handle your account information in order to provide the software to you or to your employer. If you are a customer, lead, or website visitor of a business that uses Elanvo, that business decides why your information is collected. Elanvo processes it to provide the software that business has chosen. Elanvo is not the owner of that business’s customer list, and it is not automatically the sole organization responsible for every CRM record.
A business using Elanvo is responsible for the notices it gives its own customers, including on websites and forms it publishes. Those sites do not all use the same cookies or the same notices.
3. Information we handle
Account information can include your name, email address, phone number, password credential, language, and the workspace you belong to. Workspace information can include the business name, site content, form submissions, contacts, leads, invoices, and messages the business enters or collects.
Technical information can include IP address, browser and device data, timestamps, pages requested, and security logs. We use that information to operate, secure, and diagnose the service. The public marketing site does not run a third-party analytics or advertising script. Analytics that a business connects to its own workspace, such as a measurement or search tool the business chooses, are that business’s integration. They are separate from Elanvo’s own operation of the service.
Elanvo subscription billing can include the plan, amount, currency, payment status, invoice details, and the payment-provider identifiers needed to manage the subscription. Customer billing records that a business keeps in Elanvo can include invoice amounts, taxes the business configured, payment status, and a manual payment the business recorded. Recording a manual payment does not mean Elanvo received the money.
4. Stripe and payment data
Card details entered on a Stripe-hosted page are collected by Stripe. Elanvo does not store the full card number, the card security code, bank login credentials, or government identity documents that Stripe collects during account verification. Elanvo does receive and store information it needs to run the product. That can include a connected-account identifier, account and capability status, the count and status of verification requirements, payment identifiers, a safe display label for a payment method, amount, currency, and refund status.
Stripe-hosted onboarding can ask a business for sensitive verification information. Elanvo’s design is to keep that verification material at Stripe and to store the status needed to show whether payments can be used. Elanvo can still receive limited account information from Stripe, such as a business name or email Stripe associates with the account. That is not the same as storing identity documents.
Online charges to a business’s own customers are not available in every workspace. This policy describes the data that the product is built to handle when that function is enabled. It does not mean every workspace is processing card payments today.
5. Cookies
elanvo.app does not set a cookie to read this site. The panel uses a host-only session cookie and a security cookie so that a signed-in person stays signed in and forms can be checked. Those cookies are limited to the panel host. They are not sent to customer sites on sites.elanvo.app. The public site does not use advertising or analytics cookies. A consent banner is not shown because this site does not set non-essential tracking cookies.
6. How information is used and shared
We use information to provide the workspace, authenticate users, host published sites, deliver invoices the business asks us to send, keep financial and security records, and respond to support mail. Depending on where you live, the legal basis may be a contract, a legitimate interest in running and securing the service, consent where it is required, or a legal duty. This policy does not claim that one statute applies identically to every person.
We share information with service providers that host, email, or process payments for the product, including Stripe when a payment or connected account is involved. We share it if the law, a court, or the security of the service reasonably requires it. If the business that operates Elanvo is sold or reorganized, information can transfer with the product under the same duties. We do not sell personal information as a product. A public list of every subprocessor is not published on this page.
Processing can occur in more than one country because infrastructure and providers are not limited to a single region. This policy does not promise that all data remains in Canada.
7. Retention, security, and children
We keep information for as long as the workspace needs it, and longer where accounting, fraud prevention, security, backups, or the law requires it. Deleting a contact or closing an account does not promise immediate removal from every backup or of records that must be kept. No fixed number of days is published here. Financial records are not deleted merely because a privacy request asks for deletion.
We use access controls, encryption in transit, and separation between the public site and the signed-in panel. This policy does not claim a SOC 2, ISO 27001, or PCI DSS certification. Stripe’s handling of card data does not transfer a certification to Elanvo.
Elanvo is not directed to children. Do not send us personal information about a child, and do not create an account if you cannot form a business agreement under the law that applies to you.
8. Rights, choices, and changes
Depending on where you live, you may have the right to ask for access, correction, deletion, a copy, or a limit on certain uses, and to appeal a refusal. We will apply the rights that actually apply to you. A request about a customer, lead, or invoice stored by a business should go to that business first. Elanvo can help that business locate its workspace records. We will not delete financial records where they still have to be kept.
Support and product mail can be declined when it is optional. Transactional mail about an account, an invoice, or security is part of the service. The public site does not offer a cookie settings panel because it does not set non-essential cookies.
Links from a published site or from Elanvo can lead to other organizations. Their privacy practices are their own. We will update the date on this page when this policy changes. The French text is at Politique de confidentialité.
Privacy contact: hello@aervio.io.