Privacy Policy

Eleva SpA ("Eleva", "we" or "our"), based in Santiago, Chile, is the data controller for personal data collected through this website and the Eleva platform. For any privacy-related inquiries, contact us at: privacy@eleva.cl

We collect the following types of information: **Data you provide directly:** • Full name and job title • Corporate email address • Company or organisation name • Contact phone (optional) • Messages and inquiries **Website usage data:** • IP address and approximate location • Browser type and device • Pages visited and time spent • Referral source **Platform data (for registered users):** • Performance evaluation information • Uploaded documents and evidence • Activity and audit logs

We use your data to: • Respond to demo requests and commercial inquiries • Provide platform access and support • Send service update communications • Improve user experience and features • Generate aggregate, anonymous statistics • Fulfill legal and contractual obligations • Prevent fraud and ensure security We do not use your data for third-party advertising nor sell it under any circumstances.

Data processing is based on: • **Consent:** When submitting forms or accepting cookies • **Contract performance:** To provide contracted services • **Legitimate interest:** To improve our services and security • **Legal obligation:** To comply with applicable regulations In Chile, processing is governed by Law 19.628 on Protection of Private Life.

We use cookies for: **Essential cookies:** • Language and theme preferences (light/dark) • Session state for authenticated users • Cookie consent configuration **Analytics cookies (optional):** • Website usage analysis • Performance metrics You can manage your cookie preferences from the consent banner or by configuring your browser. Some features may be affected if you reject essential cookies.

We may share data with: • **Service providers:** Hosting, email, analytics (under confidentiality agreements) • **Client companies:** Evaluation data per service agreement • **Authorities:** When required by law or legal process We do not sell, rent, or trade personal data to third parties.

We implement security measures including: • Data encryption in transit (HTTPS/TLS) • Encryption of sensitive data at rest • Role-based access control • Activity monitoring and logging • Periodic backups and recovery plan • Security training for our team No system is 100% secure. In case of a security breach, we will notify affected parties as required by law.

We retain data for the time necessary for: • **Contact data:** While commercial relationship exists or until deletion request • **Platform data:** Per agreement with the company, typically during service plus 5 years • **Security logs:** 2 years • **Billing data:** 6 years (legal requirement) Evaluation data belongs to the client company and is managed according to its policies.

You have the right to: • **Access:** Request a copy of your personal data • **Rectification:** Correct inaccurate or incomplete data • **Deletion:** Request deletion of your data • **Objection:** Object to certain processing • **Portability:** Receive your data in structured format To exercise these rights, contact privacy@eleva.cl with your request. We will respond within 30 days maximum. For evaluation data, contact the Eleva administrator at your company.

Our servers are located in the United States (AWS). By using our services, you consent to data transfer to servers outside Chile. We ensure providers meet equivalent security standards through contractual clauses and certifications (SOC 2, ISO 27001).

Eleva is designed for use by companies and their employees in a workplace context. We do not intentionally collect data from minors under 18 through this website. If the platform ever holds data about employees under 18, the client company manages it according to its own policies and applicable labour law.

We may update this policy periodically. We will notify significant changes through: • Notice on the website • Email to registered users (for material changes) We recommend reviewing this page regularly.

For privacy inquiries: **Email:** privacy@eleva.cl **Address:** Santiago, Chile For general inquiries: contact@eleva.cl