Privacy Policy

Elefanty is operated by:

This entity is responsible for the processing of personal data described in this Privacy Policy, subject to applicable law.

This Privacy Policy covers the Elefanty website and application, user accounts, the Elefanty Vault, Creation submissions, AI enrichment, attachments, voice recordings, payments, newsletter, and contact/support interactions.

We process data to:

• operate Elefanty and authenticate accounts
• save and display Creations and maintain version history
• create timestamp and UID records
• process private files and transcribe audio
• generate requested AI enrichment
• fulfill paid purchases
• provide support and send requested newsletters or product updates
• prevent abuse, fraud, and security incidents
• debug and maintain the Platform
• comply with legal obligations and enforce the Terms

Processing may be based on:

• performance of the service or contract with you
• your consent where required
• legitimate interests such as security and service improvement
• compliance with legal obligations

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

When you request AI functionality, relevant Idea content may be submitted to AI and model service providers to generate the requested result. This may include the title, description, category, and related content required for generation. Where image generation or transcription is requested, relevant content may also be processed.

Users should avoid including unnecessary personal or sensitive third-party data in prompts or Ideas. Processing by AI providers is subject to provider arrangements and applicable privacy safeguards.

Private Creations and attachments are intended to be accessible only according to Elefanty's access controls. New private file uploads use private storage and temporary signed URLs for authorised access.

Elefanty is not end-to-end encrypted. Authorised infrastructure and service-provider processing may still occur as technically necessary to operate and secure the Platform.

Elefanty may share or process data through providers necessary to operate the Platform, including categories such as:

• Base44 (application infrastructure)
• hosting, cloud, and storage providers
• Stripe (payment processing)
• AI and model providers
• transcription and image generation services
• email and communication providers
• analytics and security providers where used

These providers process information for operational purposes under their respective arrangements. Elefanty does not sell personal data to advertisers.

Some service providers may process or store data outside Switzerland. Where required, Elefanty will rely on appropriate legal safeguards for international transfers. We do not claim that all data stays in Switzerland unless verified.

Data is retained only as long as reasonably necessary for:

• account and service operation
• user-requested Creation storage
• transaction records
• legal obligations
• dispute and security purposes

Creations generally remain until deleted or requested for deletion, subject to technical and legal retention requirements. Payment records may need longer retention for legal and accounting purposes. Backups and logs may persist temporarily after deletion.

You may delete Creations where functionality is available on the Platform. You may request account deletion through Platform mechanisms or by contacting hello@elefanty.com.

Deletion requests may be subject to identity verification, legal retention requirements, fraud and security records, and backup deletion cycles. We do not promise immediate universal deletion from all systems.

The Platform offers a data-export feature where currently available. You may contact Elefanty regarding access, correction, deletion, a copy or export of your data, objection or restriction where applicable, and consent withdrawal where processing is based on consent.

Responses may require identity verification.

Users who opt in to the newsletter may receive an innovation digest, product and platform updates, and promotional communications where applicable. You may unsubscribe at any time through your Profile settings (Notification Preferences) or by contacting us.

When you unsubscribe, we will update your subscription status and stop sending newsletter communications accordingly.

Stripe acts as the payment processor for Elefanty. Elefanty does not need to receive full payment card numbers. Payment processing is also subject to Stripe's privacy practices, which are available on Stripe's website.

Elefanty applies reasonable organisational and technical measures designed to protect information, which may include encrypted transmission, encrypted storage, authentication, access controls, private file storage, and signed temporary URLs.

No online service or electronic storage system can guarantee absolute security.

Elefanty is not intended for children under 16.

Elefanty uses browser local storage for functionality such as temporary draft state and pending checkout or submission state. Essential storage may be used to operate application functionality.

We do not use advertising or tracking cookies unless explicitly introduced. If analytics cookies are introduced later, we will update this Policy and implement appropriate consent as required.

This Privacy Policy may be updated from time to time. Material changes may be communicated through the Platform or by email where appropriate. The "Last updated" date displayed above reflects the current version.

Privacy requests can be submitted through email or through our Contact page.