Data Statement

1. Data storage

All data you upload to or generate within Elephate.ai is securely stored on servers within the European Union. We use secured cloud infrastructure with redundant storage to ensure the availability and integrity of your data.

Your documents, estimates and project data are stored separately per company account. Other users or companies have no access to your data.

2. Encryption

Elephate.ai applies encryption at multiple levels:

• In transit: All communication between your browser and our servers is via SSL/TLS encryption (HTTPS).
• At rest: Stored data is encrypted with AES-256, the industry standard for data encryption.
• Passwords: Passwords are stored hashed and are never available in readable form, not even to us.

3. GDPR compliance

Elephate.ai complies with the General Data Protection Regulation (GDPR). This includes:

• We only process personal data for the purposes for which it was collected.
• You have the right to access, correct and delete your data.
• We maintain a register of processing activities.
• In the event of a data breach, we report it within 72 hours to the Dutch Data Protection Authority and to affected users.
• We conclude data processing agreements with all service providers who process personal data on our behalf.

4. Sharing with third parties

Elephate.ai never sells or shares your data with third parties for commercial purposes. Your data is only shared with:

• Processors: Service providers necessary for the functioning of the platform (hosting, authentication, payments). We have concluded data processing agreements with all of these parties.
• Legal obligations: If we are legally required to do so by a competent authority.

Your documents and estimates are not used to train AI models for other customers. Your company data always remains yours.

5. Data retention and deletion

We retain your data as long as your account is active. After cancellation of your account:

• Your data will be deleted within 30 days after confirmation of cancellation.
• You can request an export of all your data before cancellation.
• Financial data is retained for 7 years in compliance with legal retention obligations.

6. Contact

Do you have questions about how we handle your data? Contact us at contact@elephate.ai or see our privacy policy for more information.