Privacy Policy

1. Introduction

Elate Technologies ("Elate Books," "we," "us," or "our") operates the Elate Books platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Personal Information

When you create an account, we collect:

• Name, email address, and phone number
• Company name and business information
• Job title and professional role
• Billing and payment information (processed securely by Stripe)

Financial Data

Through integrations, we access:

• Bank account information and transactions (via Plaid)
• Accounting data including invoices, payments, and chart of accounts (via QuickBooks/Intuit)
• Reconciliation records and matching history

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, and session duration.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Power AI-assisted reconciliation and matching
• Send transactional emails (account, billing, trial notifications)
• Respond to customer support requests
• Detect and prevent fraud or security issues

4. Third-Party Services and Data Subprocessors

We rely on the following subprocessors to operate the Service. Each has its own privacy policy and data protection commitments:

• Plaid — Bank account connection and transaction history. We access only transaction data on the accounts you explicitly link via Plaid Link. We never see or store your bank login credentials. We do not use Plaid data for any purpose other than reconciling your bank transactions against your accounting records. Plaid processes your data in accordance with the Plaid End User Privacy Policy. You can disconnect a linked bank account at any time — see “Managing and Revoking Bank Connections” below.
• Intuit / QuickBooks Online — Accounting data synchronization. We push confirmed reconciliation entries into your QuickBooks ledger and pull invoices, bills, payments, and chart-of-accounts for matching. OAuth-scoped to your account.
• Stripe — Payment processing. Card data is captured by Stripe's hosted Checkout and stored on Stripe's PCI-DSS Level 1 infrastructure. Elate Technologies never sees full card numbers or CVC.
• Supabase — Database hosting (Postgres) and authentication. US-East region. Encrypted at rest and in transit.
• Railway — Application hosting infrastructure.
• Resend — Transactional email (welcome, billing notifications, dunning). We never share marketing lists; only transactional sends.

We do not sell or share your data with any third party for advertising or marketing purposes. We do not use your financial data to train machine-learning models.

5. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest
• Row-level security for multi-tenant data isolation
• Secure authentication with session management
• Regular security audits and monitoring

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

7. Managing and Revoking Bank Connections

You control the bank connections you make through Plaid. You can disconnect any linked bank account at any time from Integrations → Bank Connections within Elate Books. Disconnecting an account immediately stops Elate Books from retrieving any further data from that account through Plaid; we call Plaid’s /item/remove endpoint to revoke the access token on Plaid’s side as part of the disconnect flow.

You can also review and revoke the connections you’ve made with Plaid directly through Plaid Portal at https://my.plaid.com.

When you disconnect an account, we retain the transaction and reconciliation history already imported so your prior reconciliations remain accurate and auditable, unless you also request deletion of that data (see “Your Rights”). For security and regulatory reasons, bank connections must be re-authorized periodically — generally every 12 months — to remain active.

8. Your Rights

Depending on your location, you may have the right to:

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your data
• Portability — Receive your data in a machine-readable format
• Opt-out — Opt out of certain data processing activities

To exercise these rights, contact us at privacy@elatebooks.com.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to request deletion. We do not sell personal information.

10. Data Breach Notification

In the event of a confirmed data breach affecting your personal information, we will:

• Notify affected users by email within 72 hours of confirming the breach
• Notify our subprocessors (including Plaid) within the time required by our agreements with them
• Make any further disclosures required by applicable law
• Cooperate with law enforcement and regulators as required by applicable law

11. Data Location and Cross-Border Access

The Service is offered to customers in the United States, and all personal data is stored in the United States (US-East region). Personnel who operate and support the Service may access your data from outside the United States. Where that occurs, we apply the same security and confidentiality protections described in this Policy and rely on appropriate safeguards for any such access. We do not store your personal data outside the United States, and we do not transfer it to third parties for processing outside the United States except as described in Section 4.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:

Elate Technologies
6824 Crescendo Ct
Atlanta, GA 30328
United States
Email: privacy@elatebooks.com
Support: support@elatebooks.com