Privacy Policy

1. Who is responsible for your data

Elevate Ads is the data controller for personal data processed through the Service. Contact us at info@elevateads.com.mt for any privacy-related question or request.

2. Data we collect

• Account data: name, email address, and authentication identifiers, collected via our authentication provider (Clerk) when you sign up or log in, including via Google/Apple sign-in if you choose that option.
• Content you upload: the video files you upload, and data derived from them (transcripts, detected clips, captions, thumbnails).
• Billing data: handled directly by our payment processor, Stripe. We do not store your full card number; we receive subscription status and limited billing metadata from Stripe.
• Usage data: device/ browser information, IP address, pages visited, and similar analytics data, collected to keep the Service secure and improve it.
• Cookies: strictly necessary cookies (e.g. session/authentication) and, where you consent, analytics cookies. See Section 8.

3. How we use your data

We process personal data to:

• Provide, operate, and maintain the Service (uploading, transcribing, clip detection, rendering, and delivering your clips);
• Create and manage your account, and authenticate you;
• Process payments and manage subscriptions;
• Respond to support requests and communicate service-related updates;
• Detect, prevent, and address technical issues, fraud, and abuse;
• Comply with legal obligations.

4. Legal basis for processing

We process personal data on the following legal bases: performance of a contract (providing the Service you signed up for), legitimate interests (securing and improving the Service, preventing abuse), consent (for optional analytics/marketing cookies, and for third-party sign-in you choose to use), and compliance with legal obligations (e.g. tax and accounting records).

5. Who we share data with

We share personal data only with service providers who process it on our behalf to run the Service, under data processing agreements:

• Cloudflare: hosting, storage, and infrastructure;
• OpenAI and Anthropic: transcription and AI-assisted clip detection/editing of the video content you upload;
• Clerk: authentication and account management;
• Stripe: payment processing and subscription billing.

We do not sell your personal data. We may disclose data if required by law, or to protect our rights, users, or the public.

6. International transfers

Some of our service providers process data outside the European Economic Area (e.g. in the United States). Where this happens, we rely on appropriate safeguards recognised under the GDPR, such as Standard Contractual Clauses or the provider's adherence to an approved data-transfer framework.

7. Data retention

We retain account data for as long as your account is active. Uploaded video content, transcripts, and generated clips are retained for as long as needed to provide the Service, or until you delete them or close your account, after which they are deleted from active storage within a reasonable period (typically 30 days), subject to backups and legal retention requirements.

8. Cookies

We use strictly necessary cookies to keep you signed in and to operate core functionality, and these do not require consent. Where we use any analytics or preference cookies beyond what is strictly necessary, we will ask for your consent and let you withdraw it at any time.

9. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”), subject to legal exceptions;
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with your local data protection supervisory authority (in Malta, the Information and Data Protection Commissioner, idpc.org.mt).

To exercise any of these rights, contact us at info@elevateads.com.mt. We will respond within one month as required by the GDPR.

10. Security

We use industry-standard technical and organisational measures (encryption in transit, access controls, and reputable infrastructure providers) to protect your data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Children

The Service is not directed at children under 16, and we do not knowingly collect personal data from them.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you (e.g. by email or in-app notice) before they take effect.

13. Contact

For any question about this Privacy Policy or your data, contact us at info@elevateads.com.mt.