Privacy Policy

Elemus LLC is a United States–based company providing AI-native revenue infrastructure: educational content, diagnostic tools, subscriptions, and fixed-scope implementation engagements (“sprints”). Elemus is the controller responsible for the personal information described in this policy.

For any privacy question or request, contact us at ops@el-em.us.

We collect the following categories of personal information:

• Identifiers and contact data — email address, name, company name, and job role that you provide when you unlock gated content, subscribe to updates, submit the contact or booking forms, apply to our partner program, or create an account.
• Inquiry and intake content — the descriptions, answers, pain points, current tools, and other details you submit through our booking form, sprint intake engine, assessments, and messaging widget.
• Account and membership data — authentication identifiers, subscription tier (Free, Pro, or Enterprise), course and template purchases, lesson progress, bookmarks, comments, and portal settings.
• Payment data — when you purchase a subscription, course, template pack, or report, our payment processor (Stripe) collects and processes your card and billing information. We do not store full payment card numbers on our systems; we retain limited transaction records (such as amount, status, and the last four digits) provided by Stripe.
• Connected-system data (CRM scanners) — if you connect HubSpot or Salesforce through our scanners, we access, via OAuth, configuration and metadata such as properties, pipelines, workflows, objects, fields, and validation rules to produce a diagnostic. Access tokens are encrypted at rest (AES-256-GCM). You can disconnect at any time.
• Uploaded files — CRM exports or other files you upload for analysis as part of a tool, assessment, or sprint.
• Usage and device data — behavioral events such as page views, scroll depth, time on page, tool completions, CTA clicks, and form submissions, together with approximate location, browser, and device information. We may associate these events with your email address to measure engagement and improve our services.
• Cookies and similar technologies — see the Cookies section below.

To better understand and serve business inquiries, we may supplement the information you provide with data from third-party enrichment and verification providers (which may include Apollo, Proxycurl, ZeroBounce, and WarpOps). This can include company details, publicly available professional information, and email validation results. We use enrichment solely to qualify inquiries, personalize content, and improve outreach relevance. If you would prefer we not enrich your record, contact ops@el-em.us.

We use personal information to:

• provide, operate, and secure the Site, tools, courses, portal, and sprint services;
• respond to your inquiries and deliver the services you request;
• process payments, manage subscriptions, and grant or revoke access;
• generate diagnostics, assessments, and recommendations, including through automated and AI-assisted analysis;
• send transactional messages and, where permitted, educational and marketing emails (you can unsubscribe at any time);
• measure engagement, analyze usage, and improve our content and product;
• detect, prevent, and address fraud, abuse, and security issues; and
• comply with legal obligations and enforce our agreements.

Some features use artificial intelligence to analyze the information you submit — for example, our sprint intake engine, CRM diagnostics, and assessment reports. Content you submit for these features may be sent to our AI sub-processors (which may include OpenAI and xAI) to generate results. These outputs are decision-support tools; they do not produce legal or similarly significant effects without human involvement. Do not submit information you are not authorized to share.

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to deliver services you request); our legitimate interests (to operate, secure, analyze, and market our services in a proportionate way); your consent (for certain marketing and cookies, which you may withdraw at any time); and compliance with legal obligations.

We do not sell your personal information. We share it only as follows:

• Service providers / sub-processors that operate our platform on our behalf, including Vercel (hosting, storage, and analytics), Turso (database), Clerk (authentication), Stripe (payments), Resend (email delivery), OpenAI and xAI (AI processing), and the enrichment providers listed above.
• At your direction — for example, the CRM platforms (HubSpot, Salesforce) you choose to connect.
• Legal and safety — when required by law, to respond to lawful requests, or to protect the rights, property, or safety of Elemus, our users, or others.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

We may also share aggregated or de-identified information (such as anonymized industry benchmarks) that cannot reasonably be used to identify you.

We use cookies and similar technologies to keep you signed in, remember your preferences (such as dark mode), operate the email gate, and measure usage. Essential cookies are required for the Site to function; analytics cookies help us understand engagement. You can control cookies through your browser settings, though disabling some may affect functionality.

We retain personal information for as long as needed to provide our services, maintain records of transactions and inquiries, comply with legal obligations, resolve disputes, and enforce our agreements. When information is no longer required, we delete or de-identify it. You may request deletion as described below.

Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; to withdraw consent; and to opt out of marketing. Residents of California and other U.S. states may have the right to know what we collect, to request deletion or correction, and to opt out of “sale” or “sharing” of personal information — and, as noted, we do not sell personal information. We will not discriminate against you for exercising these rights.

To exercise any right, submit our contact form or email ops@el-em.us. We may need to verify your identity before acting on a request.

We are based in the United States and process information there and in other countries where our sub-processors operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal information.

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted connections, access controls, and encryption of sensitive credentials at rest. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.

Questions about this policy or our data practices? Email ops@el-em.us or use our contact form.