Privacy Policy

Elevate is an online service for interview training, feedback and evaluation. This privacy policy explains what data we process when you use the service and how we handle it.

Elevate is not an employer or recruiting system. Its evaluations support your personal training and do not make binding decisions about hiring, suitability, health, personality, origin or similar characteristics.

The data involved depends on the features you use.

• Account and contact data, such as your name, email address, sign-in, language and session data.
• Purchase and payment data, such as the package, credits, price, currency, order status and internal checkout, wallet and booking references.
• Interview and coaching data, such as answers, audio recordings, transcripts, feedback, evaluations and technical session metadata.
• Support data, such as contact requests, messages, processing status and related references.
• Technical operations, security and non-content quality telemetry, such as timestamps, request IDs, playback phases, latency, message lengths, error codes, provider or voice identifiers, rate-limit and abuse-prevention signals. This quality telemetry does not contain raw answers, transcript text, prompts, raw model output or raw audio.

We only process personal data where there is a legal basis for doing so.

• Contract performance under GDPR Article 6(1)(b): for accounts, sign-in, interview training, feedback, evaluations, credits and payments.
• Legal obligations under GDPR Article 6(1)(c): particularly for tax, accounting and required evidence.
• Legitimate interests under GDPR Article 6(1)(f): particularly for security, abuse prevention, error analysis, support traceability, payment recovery and legal defence.
• Consent under GDPR Article 6(1)(a) and section 25 TDDDG: for optional analytics and non-essential storage on your device.

We only keep data for as long as it is needed for the relevant purpose or required by law.

• Raw interview messages are deleted 48 hours after a session is completed or cancelled.
• Raw coaching messages are deleted 15 minutes after a coaching block ends.
• Recorded input audio and temporary transcription files are deleted after transcription. A technical safety net removes any remaining files after one day at the latest.
• Non-content interaction data and derived audio summaries of evaluations are deleted after 90 days.
• Financial, tax, purchase, payment and accounting evidence is kept for the applicable statutory periods, generally until the end of the eighth calendar year and, for certain records, until the end of the tenth calendar year.

To exercise your rights, contact datenschutz@langvis.ai.

• Access to your personal data.
• Correction of inaccurate data.
• Erasure, unless statutory retention duties or other overriding reasons apply.
• Restriction of processing.
• Data portability.
• Objection to processing based on legitimate interests.
• Withdrawal of consent with effect for the future.
• A complaint to a data-protection supervisory authority, in particular Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany; mailbox@datenschutz-berlin.de.

Elevate uses AWS in the eu-central-1 region for hosting, databases, object storage, logs and email delivery. Where a relevant feature is used, AWS also processes data through Bedrock for language models, Transcribe for speech-to-text and Polly for speech output.

OpenAI may receive text to generate speech output when you use an OpenAI voice.

Stripe processes checkout, payment, tax and payment-method data. PayPal may be offered as a payment method within Stripe Checkout. In that case, payment handling still runs through Stripe and PayPal receives the data required for the selected payment method.

Elevate does not use customer interview content for model training, fine-tuning or general product improvement. We do not perform emotion recognition, biometric identification or inferences about health, origin, accent, personality or suitability for employment.

Essential cookies and storage technologies secure your sign-in, store your language and privacy choice, and support checkout, product state, error handling and the prevention of duplicate telemetry events.

Optional product and web analytics remains disabled until you explicitly consent. After consent, Elevate loads Cloudflare Web Analytics from static.cloudflareinsights.com to measure page views, referrers, approximate country and browser information, and page performance. Beacon data is sent to cloudflareinsights.com.

Cloudflare states that Web Analytics uses no cookies, does not collect or use visitors’ personal data, does not track individual users across customer sites and does not log query strings. It retains unsampled beacon data for seven days and provides dashboard access for the previous six months using aggregated and sampled data after the initial period. Elevate does not use advertising pixels or tools that record complete sessions.

Data may be processed outside the EU and the European Economic Area where providers, their subprocessors, support access or processing through Cloudflare, Stripe, PayPal or OpenAI require it.

Elevate relies on the applicable contracts, data-protection terms, transfer clauses and supplementary safeguards for such transfers.

Without an email address and authentication data, we cannot provide an account. For a purchase, Stripe and, where applicable, the selected payment method require the necessary payment data.

We only need interview answers, audio and transcripts when you use the relevant interview, speech-input, feedback or coaching features. Please do not provide unnecessary personal data about third parties or particularly sensitive data.

Elevate is intended exclusively for people aged 18 or older. Minors are not permitted to use the service.

We use technical and organisational measures to protect personal data against unauthorised access, loss, misuse and unauthorised alteration.

Elevate creates automated training evaluations and feedback. These results are for your personal preparation and have no legal effect. Elevate does not make automated decisions about hiring, rejection, creditworthiness, health or similarly significant consequences.

You may request closure and erasure of your account. Once confirmed, product access is blocked immediately; a self-initiated closure may be withdrawn within 30 days after re-authentication.

After finalization, direct account data and ordinary product data are erased or anonymized. Financial or evidentiary records required by law may remain purpose-limited, access-restricted and pseudonymized until their deadline under GDPR Article 17(3) and, in particular, German Commercial Code section 257. If you cannot access your account, contact datenschutz@langvis.ai.