Privacy Policy

Introduction

Elevatebits ("we," "us," or "our") operates the Inventory mobile application (the "App"), available on Apple iOS and Android. This Privacy Policy describes how we collect, use, store, and disclose information about you when you use the App. By using the App, you agree to the collection and use of information in accordance with this Privacy Policy.

If you do not agree with this Privacy Policy, please do not use the App.

Who We Are

Data Controller: Elevatebits
Contact: info@elevatebits.com

For users located in the European Economic Area (EEA), United Kingdom, or Switzerland, Elevatebits acts as the data controller within the meaning of the General Data Protection Regulation (GDPR) and applicable national data protection laws.

Information We Collect

Information You Provide Directly

• Login credentials (email address and password) used to authenticate your account.
• Session names, notes, and other text you enter while creating or managing inventory sessions.
• Asset names, descriptions, and other asset metadata you record during a scanning session.

Information Collected Automatically

• Authentication tokens (JWT) stored securely on your device to maintain your session.
• Inventory asset data stored locally in a database on your device to enable offline functionality.
• Images you capture or select from your device gallery when documenting new assets. Images are compressed on-device before transmission to our servers.
• Internet connectivity status, used solely to determine whether to perform operations online or queue them for later synchronisation.

Information We Do Not Collect

• Precise GPS or geolocation data. The location feature in the App refers to organisational or business locations (for example, warehouse names) entered by users — not your physical device location.
• Contact lists, microphone data, or other device sensors beyond the camera.
• Advertising identifiers or browsing history.

How We Use Your Information

We use the information we collect for the following purposes:

• To authenticate you and maintain your session securely.
• To provide the core inventory management functionality of the App.
• To enable offline operation by caching data locally and synchronising it when connectivity is restored.
• To process and upload images you attach to new assets.
• To send you service-related communications, including security notices.
• To comply with applicable legal obligations.
• To monitor and improve App performance and stability through analytics and crash reports (see Analytics and Crash Reporting section).

We do not use your information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects on you.

Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or Switzerland, our legal bases for processing your personal data are:

• Contract performance: processing necessary to provide the App's services to you.
• Legitimate interests: processing necessary for our legitimate interests in operating, securing, and improving the App, provided those interests are not overridden by your rights and freedoms.
• Legal obligation: processing required to comply with applicable law.
• Consent: where we rely on analytics or tracking tools, we will request your consent where required by applicable law.

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it only in the following circumstances:

• Service providers: we may engage trusted third-party companies to assist in operating our backend infrastructure, subject to confidentiality obligations and data processing agreements.
• Legal requirements: we may disclose information when required by law, court order, or governmental authority.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent: for any other purpose, with your explicit consent.

Analytics and Crash Reporting

The App uses third-party analytics and crash reporting services to help us identify technical issues and understand general usage patterns. These tools may collect:

• Device information (model, operating system version, unique device identifiers)
• App usage data (screens visited, features used, session duration)
• Crash logs and error reports
• Performance metrics

Services currently in use may include Firebase Crashlytics and Firebase Analytics, provided by Google LLC. Data collected by these services is subject to Google's Privacy Policy. You may contact us at info@elevatebits.com to opt out of analytics collection.

Data Storage and Security

We implement the following technical and organisational measures to protect your information:

• Authentication tokens are stored using platform-grade secure storage (iOS Keychain and Android Keystore).
• Local asset data is stored in a database on your device and is not accessible to other applications.
• Data transmitted to our servers is sent over HTTPS using TLS encryption.
• Images are compressed before upload to minimise data exposure.

No method of electronic transmission or storage is completely secure. While we implement commercially reasonable measures to protect your information, we cannot guarantee absolute security.

Data Retention

• Account and session data is retained for as long as your account is active.
• Local device data is deleted automatically when you complete or abandon an inventory session.
• You may request deletion of your account and associated data at any time by contacting us at info@elevatebits.com.

Your Rights

EEA, United Kingdom, and Switzerland (GDPR)

• Right of access — to obtain a copy of your personal data.
• Right to rectification — to correct inaccurate or incomplete data.
• Right to erasure — to request deletion of your personal data.
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time, where processing is based on consent.
• Right to lodge a complaint with your local supervisory authority.

California Residents (CCPA / CPRA)

• Right to know what personal information we collect, use, or disclose.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell personal information.
• Right to non-discrimination for exercising your privacy rights.

Canada (PIPEDA)

If you are located in Canada, you have the right to access your personal information and to challenge its accuracy, and the right to withdraw consent for collection, use, or disclosure of your personal information, subject to legal restrictions.

To exercise any of the rights described above, please contact us at info@elevatebits.com. We will respond within 30 days, or within the timeframe required by applicable law.

International Data Transfers

Your personal data may be transferred to and processed in countries other than your country of residence. Where we transfer personal data from the EEA, UK, or Switzerland to a country that does not provide an equivalent level of data protection, we will rely on appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

The App is intended for use by business professionals and is not directed at children under the age of 16 (or under 13 in the United States). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at info@elevatebits.com and we will take steps to delete such information.

Third-Party Services

The App communicates with backend APIs that may be hosted by third-party service providers. These providers operate under their own privacy policies, and we are not responsible for their data practices. We encourage you to review the privacy policies of any third-party services you interact with through the App.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the document and provide notice through the App or by email. Your continued use of the App after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.