Legal
Privacy Policy
Last updated: September 12, 2026
This Privacy Policy explains how Elara Digital Corp. ("Elara," "we," "us") collects, uses, and shares information when you visit getelara.io, use the Elara application at app.getelara.io, or otherwise interact with our services (together, the "Services"). This policy describes our practices; any consent required for a particular use is requested separately.
Information we collect
- Account information. Your name, email address, and password (stored as a salted hash) when you create an account.
- Billing information. Payments are handled by third-party payment processors. We receive limited transaction details — such as the amount, date, and the last digits of a card — but never your full card number.
- Campaign data. Information you provide to run campaigns, such as target URLs, keywords, anchor text, and content preferences.
- Client and website data. Business details, service areas, contacts, website pages, uploaded media, SEO research, reports and website enquiries that you or your clients provide or manage through Elara.
- Connected account data. Depending on the integration and permissions you grant, this may include CRM contacts and leads, connected account identifiers and credentials, social posts and media, comments, messages and performance metrics. We use this information to deliver the connected features you enable.
- Communications. Messages you send us, including through the contact form (name, email, agency or website, topic, and message).
- Usage data. Pages visited, referring URLs, browser and device information, IP address, and similar data collected automatically through cookies and similar technologies.
Google user data
Signing in with Google. If you choose to sign in to the Elara application with your Google account, we receive basic profile information from Google — such as your name, email address, and profile picture — which we use to create and secure your account.
Connecting a Google Business Profile. If you connect a Google Business Profile to a client in Elara, you grant us access to the Business Profiles you choose. We access business information (such as the business name, categories, services, hours, photos, and reviews) and profile performance data (such as views, calls, and direction requests). Elara uses this data only to provide features you request — planning and generating website content grounded in the business's real information, managing the client's web presence, and reporting on profile performance.
How Google user data is protected. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to third parties except as needed to provide the features above, for security, or to comply with law. Humans do not read this data except with your permission, for security purposes, or where required by law. You can disconnect a Business Profile at any time from the client's settings in Elara, or revoke Elara's access entirely from your Google Account security settings. Disconnecting or revoking access stops future connected access; it does not necessarily remove information already stored in your workspace. Contact us to request deletion, subject to the retention needs described below. Elara's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How we use information
- Provide, operate, and improve the Services
- Generate website and marketing content from the business context you supply, publish or schedule content you authorize, route website enquiries, and deliver connected reporting and workflows
- Process orders and payments
- Respond to inquiries and provide support
- Send service-related communications, such as receipts, account notices, and changes to the Services
- Monitor for fraud, abuse, and security issues
- Comply with legal obligations
We do not sell your personal information.
How we share information
- Service providers. Companies that help us run the Services — hosting and content delivery (such as Cloudflare), analytics (such as Google Analytics), payment processing, email delivery, and AI content-generation providers — under terms that limit how they may use your information.
- Legal and safety. When required by law, regulation, or legal process, or to protect the rights, safety, and integrity of Elara, our users, or the Services.
- Business transfers. In connection with a merger, acquisition, or sale of assets, in which case we will provide notice of any change in how your information is handled.
AI and connected workflows
When you use an AI feature, the instructions, relevant business context and content needed for that request may be processed by an AI service provider. Depending on the feature, this can include information from connected business accounts. Avoid adding sensitive personal information that is unnecessary for the task. Automated publishing and social replies operate according to the settings you enable.
When an agency manages information for a client, the agency determines the purposes of that work and is responsible for the permissions and notices it provides. If your information was submitted to an agency or one of its clients through a website powered by Elara, contact that business about its use of your information. We assist our customers with applicable data requests.
Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used. Analytics providers such as Google Analytics may set their own cookies to help us measure traffic and usage. Bot-protection services (such as Cloudflare Turnstile) may also set cookies to distinguish people from automated traffic. You can control cookies through your browser settings; disabling them may affect how the Services work.
Data retention
We keep personal information while your account is active and as long as needed for the purposes described above. We may retain certain records afterward to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify them.
Security
We use reasonable administrative and technical safeguards to protect your information, including encryption in transit, hashed credentials, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, or to object to or restrict certain processing. To make a request, contact us at mark@getelara.io and we will respond as required by applicable law.
International transfers
Your information may be processed and stored where we or our service providers operate, which may be outside your own jurisdiction. Where that happens, we take steps intended to ensure your information receives appropriate protection.
Children
The Services are intended for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.
Third-party sites
The Services may link to third-party websites. Those sites are governed by their own privacy policies, which we encourage you to review.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date, and for material changes we will provide reasonable additional notice.
Contact
Questions about this policy or your information? Contact Elara Digital Corp. (Orlando, Florida, United States) at mark@getelara.io. You can also review our Terms of Service.