Privacy Policy

Elaria ("we," "our," or "us") operates the Elaria platform accessible at helloelaria.com and related mobile applications. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services. By using Elaria, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of our services.

We collect the following types of information: Account Information: When you register, we collect your name, email address, business name, industry, location, and password. Business Information: Information you provide about your business including services, pricing, staff, operating hours, client visit records, invoices, and inventory. Content Data: Posts, captions, images, and other content you create or upload through the platform. Social Media Data: If you connect your Facebook or Instagram accounts, we collect access tokens and may access your Page insights, post performance data, and publish content on your behalf with your explicit authorization. Usage Data: Information about how you use Elaria including pages visited, features used, and actions taken within the platform. Payment Information: Payment is processed through Stripe. We do not store your full credit card number. Stripe's privacy policy governs payment data.

We use your information to: — Provide, operate, and improve the Elaria platform — Generate AI-powered content, recommendations, and business insights — Publish content to your connected social media accounts on your behalf — Process payments and manage your subscription — Send transactional communications related to your account — Build your Business Memory profile to provide personalized intelligence — Detect slow days, generate rescue offers, and surface business opportunities — Respond to your support requests — Comply with legal obligations

When you connect your Facebook or Instagram accounts to Elaria: We request the following permissions: pages_manage_posts, instagram_content_publish, pages_read_engagement, instagram_basic. These permissions allow Elaria to publish posts to your Facebook Page and Instagram Business account, and read engagement data from your posts to improve our recommendations. We do not sell your social media data to third parties. We do not use your social media data for advertising purposes unrelated to your Elaria account. You may disconnect your social media accounts at any time from your Settings page. Our use of Facebook and Instagram data is governed by Meta's Platform Terms at developers.facebook.com/terms.

We do not sell your personal information. We share information only in the following circumstances: Service Providers: We share data with trusted third-party providers who help us operate our platform including Supabase (database), Stripe (payments), Resend (email), Twilio (SMS), Vercel (hosting), and Anthropic (AI processing). Each provider is bound by their own privacy policies and data processing agreements. Legal Requirements: We may disclose information if required by law, legal process, or government authority. Business Transfers: If Elaria is acquired or merges with another company, your information may be transferred as part of that transaction. With Your Consent: We may share information with your explicit consent.

We retain your account information and business data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance reasons. Social media tokens and data obtained through Facebook and Instagram integrations are retained only as long as needed to provide the service and are deleted when you disconnect your accounts.

We implement industry-standard security measures to protect your information including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data. We use Supabase for database management, which implements row-level security and enterprise-grade encryption.

Depending on your location, you may have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you. Correction: Request correction of inaccurate data. Deletion: Request deletion of your personal data. You can delete your account at any time from your Settings page. Portability: Request a copy of your data in a portable format. Withdrawal of Consent: Withdraw consent for data processing at any time, including disconnecting social media accounts. To exercise these rights, contact us at privacy@helloelaria.com.

Elaria is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it immediately.

Elaria uses cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze platform usage. You can control cookie settings through your browser settings. Disabling cookies may affect the functionality of some parts of the platform.

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the platform. Your continued use of Elaria after changes are posted constitutes your acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us: Elaria Email: privacy@helloelaria.com Website: helloelaria.com