Privacy Policy

1. Introduction

Elevation ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the Elevation platform — whether as a student seeking work experience or as a business posting tasks and opportunities.

By creating an account or using our services, you agree to the practices described in this policy. If you do not agree, please do not use Elevation.

2. Information We Collect

We collect information you provide directly, including:

• Account details: name, email address, password (stored as a secure hash), and role (student or business).
• Profile information: profile photo, contact details, education, skills, and work history.
• Business information: company name, industry, location, and verification documents.
• Identity verification: government-issued ID documents uploaded during onboarding.
• Payment information: billing details processed securely by Stripe — we do not store card numbers.
• Communications: messages sent through our platform between students and businesses.
• Consent records: timestamps for Terms & Conditions and Privacy Policy acceptance.

We also collect data automatically when you use our platform:

• Usage data: pages viewed, features used, and session duration.
• Device information: browser type, operating system, and IP address.
• Cookies and similar technologies to maintain your session and remember preferences.

3. How We Use Your Information

We use your personal data to:

• Create and manage your account.
• Match students with relevant tasks and businesses with suitable candidates.
• Process subscription payments and issue invoices via Stripe.
• Verify your identity and prevent fraud.
• Send transactional emails (account confirmation, payment receipts, application updates).
• Improve our platform through aggregated, anonymised analytics.
• Comply with legal obligations applicable in the UAE and internationally.

4. Sharing Your Information

We do not sell your personal data. We share it only in the following circumstances:

• Between platform users: Student profiles are visible to businesses and vice versa as part of the matching service.
• Service providers: We use trusted third-party services including Stripe (payments), Vercel (hosting), and cloud storage providers, each bound by data processing agreements.
• Legal requirements: We may disclose data to comply with applicable law, court orders, or government requests.
• Business transfers: If Elevation is acquired or merges with another entity, your data may be transferred as part of that transaction.

5. Data Retention

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal, tax, or accounting purposes.

Identity verification documents are retained for the period required by applicable law and then securely deleted.

6. Security

We implement industry-standard security measures, including TLS encryption in transit, bcrypt password hashing, and role-based access controls. However, no system is completely secure. Please use a strong, unique password and notify us immediately if you suspect unauthorised access to your account.

7. Your Rights

Depending on your location, you may have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and personal data.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at privacy@elevationhq.com.

8. Cookies

Elevation uses a session cookie (elevation_token) to keep you logged in. This cookie is essential for the platform to function. We do not use third-party advertising or tracking cookies.

9. Children's Privacy

Elevation is intended for users who are 16 years of age or older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we make material changes, we will notify you by email or by displaying a notice on the platform. Continued use of Elevation after the effective date constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

• Email: privacy@elevationhq.com
• Address: Elevation Platform, Dubai, United Arab Emirates