Privacy Policy

You submit Personal Data through forms, email, phone, meetings, demos, surveys, events, or account setup.

Your browser and device send technical and usage information when you use the Website.

We receive and process Customer Data through the Services as configured by the Customer, including through integrations.

We receive Customer Data through third-party services connected by Customers, including through APIs and similar integration methods.

We collect Personal Data you share with us through social media interactions, and receive Personal Data from business partners, resellers, referral partners, data providers, and marketing partners.

Name, business email, phone number, company name, job title, department, and business address.

Usernames, passwords, authentication factors, role and permission settings, and profile details.

User activity logs, feature usage, actions taken, timestamps, configuration settings, and workflow history.

IP address, browser type, device type, operating system, language settings, and approximate location.

Billing contact details, invoice references, subscription plan details, payment status, and transaction metadata. Payment card and bank details are processed by payment providers. We do not store full payment card numbers.

Depending on Customer configuration, Customer Data can include financial and accounting records, vendor and client records, invoice and receipt data, transaction histories, ledger details, approvals, notes, and supporting documents.

Support tickets, emails, chat messages, call notes, recordings where notice is given, and feedback.

CV or resume data, work history, education, qualifications, languages, interview notes, assessment results, references where provided, and right-to-work information as required by law.

Account creation, authentication, access management, features, support, service delivery, and product operations.

Customer onboarding, account management, support services, troubleshooting, training, notices, and updates.

Respond to inquiries, send operational messages, and deliver service notices.

Subscriptions, invoicing, billing administration, payment processing, and collections for overdue amounts.

Prevent unauthorised access, monitor for fraud and misuse, investigate incidents, and protect systems and users.

Service analytics, quality assurance, debugging, research, and development of new features.

Where Services include AI functionality, we process Customer Data submitted to AI features to generate outputs and improve performance of those features. We treat AI inputs and outputs as Customer Data.

Comply with legal obligations, respond to lawful requests, enforce agreements, and protect rights and safety.

Send product updates, event invitations, and promotional communications in line with your preferences and applicable law.

We create aggregated or de-identified datasets from Personal Data and service usage data for analytics, benchmarking, security analysis, and business planning. De-identified data does not identify you.

We share Personal Data with our affiliates for operations, support, security, and internal administration.

We share Personal Data with providers who perform services for us, such as:

• Customer support and ticketing
• Cloud hosting and infrastructure
• Security monitoring and fraud prevention
• Email and communication tools
• Analytics providers
• Marketing and event platforms
• Payment processing providers

These providers process Personal Data under contractual restrictions.

Customers control which third-party services connect to the Services. When Customers enable integrations, we transmit Customer Data as instructed.

If we enter a merger, acquisition, financing, reorganisation, or sale of assets, we share Personal Data as part of due diligence and transfer it as part of the transaction, where allowed by law.

We disclose Personal Data to comply with law, respond to lawful requests, protect rights and safety, prevent fraud, and enforce agreements.

Depending on where you live, you can request:

• Access to your Personal Data
• Correction of inaccurate Personal Data
• Deletion in certain cases
• Restriction of processing in certain cases
• Objection to processing in certain cases
• A portable copy of your Personal Data in certain cases
• Withdrawal of consent where processing relies on consent

We verify identity before responding. If your request relates to Personal Data processed on behalf of a Customer, submit your request to the Customer directly.

You can opt out of promotional emails through the unsubscribe link, or by emailing us. Service and security notices continue regardless.

For Website interactions and recruiting, Elements acts as a controller. For Customer Data processed through the Services, Elements acts as a processor and processes data on Customer instructions, under the Services Agreement and any data processing terms.

EU and UK individuals have rights described in Section 11, including the right to lodge a complaint with a supervisory authority. UK residents can also complain to the Information Commissioner's Office.

Where California law applies, you have rights including:

• Right to know categories of Personal Data collected, used, and disclosed
• Right to access specific pieces of Personal Data
• Right to delete Personal Data in certain cases
• Right to correct inaccurate Personal Data
• Right to opt out of sale or sharing where applicable
• Right to non-discrimination for exercising privacy rights

We do not sell Personal Data in exchange for money.

Where Virginia law applies, you have rights including access, correction, deletion, portability, opt out of targeted advertising, and right to appeal a denial of your request.