Privacy Policy

Altivum Inc. ("Altivum," "we," "us," or "our") operates the Elo platform (the "Service"), an AI-powered coaching platform for articulation and communication practice. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using Elo, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account Information

When you create an account, we collect your name and email address through our authentication provider (Amazon Cognito). If you sign in through a federated identity provider (e.g., Google), we receive your name and email from that provider.

Profile Information

You may optionally provide additional profile details such as a display name, professional background, or avatar image.

Session Data

When you use Elo for voice practice, we process and store:

• Session transcripts — text records of your conversations with the AI
• Performance analysis — scores and feedback generated from your sessions across dimensions such as clarity, coherence, vocabulary, and engagement
• Session metadata — timestamps, duration, topic, and practice mode

Voice Audio

We do not store your voice audio. Audio is streamed in real time between your device and our voice server for the purpose of conducting the practice session. Once the session ends, no audio recordings are retained. Only the text transcript is stored.

Organization Data

If you join an organization on Elo, your organization administrator may have access to your session reports and performance data within that organization's context. Organization administrators may also provide shared topics and documents that are used to augment your practice sessions.

Payment Information

If you subscribe to a paid plan, your payment information is collected and processed by Stripe, our third-party payment processor. We do not store your credit card number or bank account details on our servers. We receive only a transaction identifier and subscription status from Stripe.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, session frequency, and device information (browser type, operating system).

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Conduct AI-powered voice practice sessions and generate performance analysis
• Track your progress and provide personalized feedback over time
• Process payments and manage your subscription
• Send service-related communications (e.g., session summaries, account notifications)
• Respond to your support requests
• Ensure the security and integrity of the Service
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

• Service providers — We use third-party services to operate the platform (see our Subprocessors page for a complete list). These providers process data on our behalf and are bound by contractual obligations to protect your information.
• Organization administrators — If you are a member of an organization on Elo, your administrator may view session reports and performance data associated with that organization.
• Legal compliance — We may disclose information if required by law, regulation, legal process, or governmental request.
• Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Storage and Security

Your data is stored on Amazon Web Services (AWS) infrastructure in the United States (US East - Ohio region). We implement the following security measures:

• Encryption at rest for all stored data (S3, DynamoDB)
• Encryption in transit using TLS for all network communications
• Per-user data isolation — each user's data is stored in isolated paths and accessible only through authenticated, user-scoped queries
• Authentication via Amazon Cognito with JWT-based session management
• Server-side authorization checks on all API operations

For more details, please see our Security page.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data — retained until you delete your account
• Session transcripts and reports — retained until you delete your account
• Voice audio — not retained; processed in real time and discarded
• Payment records — retained as required by applicable tax and financial regulations

When you delete your account, we delete your personal data from our active systems. Some data may persist in backups for a limited period before being permanently removed.

Demo Funnel Email Addresses

When you provide your email address to receive a demo report on our Try It Now page, we retain that address internally for product analytics and account-linking — specifically: to understand which demo sessions led to account sign-ups, to prevent abuse of the demo feature, and to inform future product decisions. We do not use these addresses for marketing communications or share them with third parties. If you create an account and later delete it, your associated lead record is deleted alongside your account data.

6. Your Rights

General Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Object to or restrict certain processing of your data
• Withdraw consent where processing is based on consent

GDPR (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local supervisory authority. Our legal basis for processing your data is the performance of our contract with you (providing the Service), our legitimate interests (improving the Service, ensuring security), and your consent where applicable.

For organizations subject to GDPR, we offer a Data Processing Agreement.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your personal information. We do not sell personal information.

7. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16, we will take steps to delete it.

8. International Data Transfers

Your information is processed and stored in the United States. If you are accessing the Service from outside the United States, your information will be transferred to, stored, and processed in the United States. We take steps to ensure that your data receives an adequate level of protection in the jurisdictions in which we process it.

9. Cookies

We use essential cookies and local storage for authentication and session management. For details, see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Altivum Inc.
Email: privacy@altivum.ai