Last updated: 6 August 2026.
Elevale uses trusted subprocessors to deliver the platform. {tradingStyleDisclaimer} In this page, "Elevale", "we", "us", and "our" mean that registered company trading as Elevale. We select these subprocessors (including AI providers when we introduce them in the product); customers do not pick individual infrastructure or AI providers. We update this page when subprocessors change. Separate advance notice or individual customer notifications are not required.
Platform subprocessors
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, workspace content, sessions | EU / US |
| Fly.io | Application hosting | Request logs, application data in transit | EU / US |
| Stripe | Payment processing | Billing contacts, payment method metadata, subscription and wallet transactions | EU / US |
| AWS SES | Transactional email | Email addresses, notification content | EU / US |
| Cloudflare | Marketing website delivery, CDN, and security | IP addresses, request metadata | Global |
| CRM & marketing automation provider | Newsletter, enquiry, and marketing contact management | Name, business name, email, phone, marketing engagement | EU / US |
| OpenAI | AI chat, embeddings, insights (when enabled) | Prompts and workspace context you submit to AI features | US |
| Anthropic | AI chat and analysis (when enabled) | Prompts and workspace context you submit to AI features | US |
| Google (Gemini) | AI chat and embeddings (when enabled) | Prompts and workspace context you submit to AI features | US / EU |
| Perplexity | Live web research in AI features (when enabled) | Search queries and context you submit | US |
| ElevenLabs | Voice mode and TTS (when enabled) | Audio, transcripts, voice session data | US / EU |
AI subprocessors are invoked only when you or your workspace use AI features. Usage is metered via the prepaid AI wallet (USD). We configure API usage to minimise training on your content where provider terms allow.
Marketing, analytics, and advertising (marketing website)
On our marketing website, with your consent where required, we use analytics and advertising technologies. These providers act as independent or joint controllers under their own privacy policies:
| Provider | Purpose |
|---|---|
| Google Analytics | Website traffic and usage measurement |
| Google Ads (incl. remarketing/retargeting) | Ad delivery, measurement, and retargeting |
| Meta (Facebook/Instagram) Ads | Ad delivery, measurement, and retargeting |
| LinkedIn Ads | Ad delivery, measurement, and retargeting to business audiences |
You can manage analytics and advertising cookies via our cookie banner. See our Cookie Policy.
Customer-connected integrations
When you connect third-party services via OAuth or API keys, data flows to those providers under your account and their privacy policies. You control which integrations are enabled per workspace. Examples include:
- Google Analytics / Google Ads: advertising and web analytics metrics
- Meta (Facebook / Instagram): social advertising metrics
- Xero: accounting data
- Other integrations as listed in workspace settings
These providers are not Elevale subprocessors for data you choose to connect; you act as controller of that integration data.
International transfers
Where personal data is transferred outside the UK or EEA, we use Standard Contractual Clauses, the UK International Data Transfer Agreement, and supplementary measures where required. See our Data Processing Agreement.
Changes to subprocessors
When we add or replace a subprocessor (for example a new AI provider), we update this page when the change is introduced. That update is notice under the DPA. You may object on reasonable data-protection grounds; if we cannot resolve the objection, your remedy is to terminate affected services. Continued use after the update constitutes acceptance where permitted by law.
Related documents
Contact: contact form