Privacy Policy

1. What we collect

We collect the following categories of information:

• Account data. Email address, name, firm, and authentication metadata provided by our identity provider when you create or update your account.
• Certificate drafts. Section-by-section input you enter in the wizard (Section A flood-zone data, Section B/C/D building data, Section G photographs, Section H certification block) and the rendered outputs.
• Payment data. Records of purchases, plan changes, and per-certificate credits. Card details are handled directly by our payments processor; we never see or store full card numbers.
• Technical data. IP address, user agent, timestamps, and aggregate usage telemetry needed to operate, secure, and improve the service.

2. What we do not collect

We do not sell survey data, certificate drafts, or any customer content to third parties. We do not use your drafts to train third-party AI models or to advertise to you.

3. How we use your information

• Operate, secure, and debug the service.
• Render certificates, generate PDFs, and respond to your requests.
• Process payments and keep the billing records required by tax and accounting law.
• Notify you of material changes (terms, security incidents affecting your account).
• Comply with legal obligations.

4. Retention

Account data is retained while your account is active. Certificate drafts are retained while your account is active and for a reasonable backup window afterward. Payment records are retained for the period required by applicable tax and accounting obligations (typically several years). You can request earlier deletion of drafts and account data; see “Your rights” below.

5. Third-party processors

We rely on a small set of vendors to operate the service. Each receives only the data needed to perform its role:

• Payments. Stripe processes charges for paid plans and per-certificate exports.
• Hosting. Application data is hosted on managed cloud infrastructure provided by our platform operator.
• Email. Transactional email (receipts, security alerts) is routed through our email provider.
• Authentication. Identity, sessions, and credential storage are handled by our authentication provider.

6. Cookies and sessions

We use first-party cookies and sessions strictly to keep you signed in and to prevent abuse. We do not place third-party advertising or tracking cookies.

7. Security

We use industry-standard safeguards — TLS in transit, encrypted storage at rest, principle-of-least-privilege access controls, and routine backups — to protect your data. No system is perfectly secure; if we discover a breach that affects your data, we will notify you without undue delay.

8. Your rights

• Access. Your drafts and account data are accessible through the app while your account is active.
• Correction. Update account and draft data in-product; for changes we cannot make on your behalf, email us.
• Deletion. You can request deletion of your account and associated drafts at any time through in-product settings or by emailing us.
• Export. On request we will provide a copy of your drafts and account data in a portable format.

To exercise any of these rights, use the in-product controls or email elevcert@polsia.app.

9. Children

ElevCert is a professional tool for licensed land surveyors and is not directed to children. We do not knowingly collect personal information from anyone under 18.

10. Changes to this policy

When we change this policy we will update the “Effective” date at the top of this page. For material changes we will give reasonable advance notice through the service or by email.

11. Contact

Privacy questions or requests can be sent to elevcert@polsia.app. We will acknowledge substantive inquiries within a reasonable time.