Privacy Policy
Effective Date: May 25, 2026
Last Updated: May 25, 2026
JoinElevator LLC ("Elevator," "we," "us," or "our") operates the Elevator platform at joinelevator.io (the "Platform"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By creating an account or using the Platform, you agree to the practices described in this policy. If you do not agree, please do not use Elevator.
1. Information We Collect
Information You Provide
- Account information. When you create an account, we collect your name, email address, password, and whether you are joining as a candidate or an employer.
- Candidate profile information. If you join as a candidate, you may provide your job title, skills, years of experience, role type preferences (full-time, part-time, contract, remote, hybrid, on-site), salary expectations, current employer, location, a profile picture, and a resume. Your salary expectations are used solely for private alignment matching and are never displayed to employers.
- Employer and organization information. If you join as an employer, you may provide your company name, website, company size, industry, and information about your hiring team members and their roles within the Platform.
- Job postings. Employers provide job titles, descriptions, skill requirements, salary ranges, role types, and Live Round interview questions.
- Video recordings. Candidates record short video pitches directly within the Platform. During Live Round interviews, candidates record video responses to employer-provided questions. All videos are recorded live in-app — we do not accept pre-recorded uploads for pitches or Live Round responses, and AI-generated avatars are not permitted.
- Messages. Candidates and employers may exchange messages through the Platform's messaging system.
- Reports and feedback. If you report content or a user, we collect the category of the report, any description you provide, and the content or user being reported.
Information We Collect Automatically
- Usage data. We log activity such as page views, feature usage, and session timing to understand how the Platform is used and to calculate engagement metrics.
- Device and browser information. We collect standard technical information including your browser type, operating system, and device type.
- Analytics data. If you consent to non-essential cookies, we use Vercel Analytics to collect aggregated visitor and page view data. See our Cookie Policy for details.
Information Generated by the Platform
- AI-derived data. We use artificial intelligence to generate vector embeddings from candidate profiles and job postings for the purpose of matching candidates to relevant roles. We also use AI to parse job descriptions submitted by employers. These embeddings and parsed data are used internally for matching and are not shared externally.
- Match scores. The Platform calculates compatibility scores between candidate profiles and job postings based on skills, role type, and other profile attributes.
- Salary alignment indicators. We generate alignment categories (such as "aligned," "partially aligned," or "not disclosed") by comparing candidate salary expectations to job posting salary ranges. The underlying salary figures are never revealed to either party.
2. How We Use Your Information
We use the information we collect to:
- Operate and maintain the Platform, including account creation, authentication, and profile management.
- Match candidates to relevant job postings using AI-powered embeddings and compatibility scoring.
- Facilitate the hiring process, including expressions of interest, pipeline management, Live Round interviews, and messaging between candidates and employers.
- Enforce platform rules, including rate limits on expressions of interest (10 per day), pitch recordings, and content reports.
- Process and display video pitches and Live Round responses to relevant employers within the hiring pipeline.
- Generate and host shareable public profile pages for candidates who enable this feature.
- Send transactional emails, including welcome messages, Live Round invitations, pipeline updates, new messages, and account status notifications.
- Monitor platform health through aggregated metrics on our internal admin dashboard.
- Investigate and act on content reports, including reviewing reported content and taking moderation actions such as warnings, suspensions, or bans.
- Improve the Platform's features, performance, and reliability.
3. How We Share Your Information
- With employers (if you are a candidate). When you express interest in a job, the employer can view your profile information, pitch video, skills, role type preferences, and salary alignment indicator. Your exact salary expectation is never shared — only the alignment category. If you progress through a hiring pipeline, the employer can also view your Live Round responses and exchange messages with you.
- With candidates (if you are an employer). Candidates can view your company name, job postings, and job details. Messaging content is visible to both parties in a conversation.
- On your public profile page. If you enable public sharing, a profile page is created at a public URL containing your first name and last initial, job title, skills, role type, pitch video (subject to your Pitch Blur setting), and a link to express interest. Your full name, email address, and salary expectations are never displayed on your public profile.
- With service providers. We use third-party services to operate the Platform. These providers process data on our behalf and are contractually required to use it only for the services they provide to us:
| Provider | Service | Data processed |
|---|---|---|
| Supabase | Database, authentication, file storage | Processes account data, profiles, and all platform data |
| Mux | Video infrastructure | Processes pitch videos and Live Round recordings |
| Vercel | Hosting and deployment | Processes web traffic and server-side data |
| OpenAI | AI matching and job description parsing | Processes profile text and job descriptions for embedding generation and parsing only |
| Resend | Transactional email | Processes email addresses, names, and email content |
| Upstash | Rate limiting | Processes IP addresses and request metadata |
| Vercel Analytics | Website analytics (consent-gated) | Processes aggregated page views and visitor data |
- With your organization's team. If you are part of an employer organization, other team members with appropriate roles (admin, recruiter, hiring manager, or reviewer) may view candidate information within your shared hiring pipelines, including profile data, pitch videos, Live Round responses, and collaborative notes.
- For legal reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, safety, or property of Elevator, our users, or the public.
- In a business transfer. If Elevator is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
We do not sell your personal information. We do not share your information with advertisers. We do not use your data to train AI models — the embeddings we generate are used solely for matching within the Platform.
4. Your Privacy Controls
Elevator provides several built-in privacy features:
- Stealth Mode. Hides your profile from anyone at your current employer, matched by company name and associated domains. When enabled, your profile does not appear in searches or pipelines for users affiliated with that employer.
- Ghost Mode. Makes your profile visible only to employers you have expressed interest in. Employers cannot discover you through browsing or AI matching — they can only see your profile if you initiate contact.
- Pitch Blur. Applies a full visual blur over your pitch video, obscuring your appearance and surroundings for any employer viewing it. The blur remains active as long as you have the setting enabled — you control when to turn it off. This feature applies to pitch videos only and does not affect Live Round recordings.
- Public Sharing Toggle. Controls whether your shareable profile page is active. When disabled, your public profile URL returns no content.
- Actively Looking Toggle. Controls whether employers see a signal that you are actively seeking new opportunities.
You can adjust all of these settings at any time from your profile's privacy settings.
5. Data Retention
- Account data. We retain your account information and profile data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.
- Video recordings. Pitch videos and Live Round responses are stored for as long as your account is active. Pitch recordings are subject to a 30-day lock period after recording, during which they cannot be re-recorded. Videos are deleted when you delete your account.
- Resumes. Uploaded resumes are stored for as long as your account is active and are subject to a 30-day lock period after upload.
- Messages. Messages are retained for as long as both parties' accounts are active. Messages from suspended or banned users may be hidden from view but retained for moderation purposes.
- Reports and moderation records. Reports and moderation actions are retained for platform safety purposes and may be kept after account deletion to enforce bans and prevent abuse.
- Usage and analytics data. Aggregated usage data is retained indefinitely for platform improvement. Individual activity logs are retained for 12 months.
6. Data Security
We implement technical and organizational measures to protect your information, including:
- Encryption of data in transit using TLS.
- Secure authentication through Supabase Auth with hashed passwords.
- Input validation and sanitization on all data submissions.
- Rate limiting on API endpoints to prevent abuse.
- Webhook signature verification for third-party integrations.
- Role-based access controls limiting which team members can view candidate data.
- Prompt injection protections on AI-powered features.
No method of transmission or storage is completely secure. If you become aware of a security issue, please contact us at security@joinelevator.io.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access. You can request a copy of the personal data we hold about you.
- Correction. You can update your profile information at any time through the Platform. You can also request that we correct inaccurate data.
- Deletion. You can request deletion of your account and personal data. Certain data may be retained as described in Section 5.
- Portability. You can request your data in a portable format.
- Opt out of AI processing. The AI matching system is a core function of the Platform. If you do not wish your profile data to be processed for matching, you may enable Ghost Mode (which limits your visibility to only employers you choose) or delete your account.
- Withdraw consent. Where processing is based on your consent (such as analytics cookies), you can withdraw consent at any time through your browser settings or the cookie consent banner.
To exercise any of these rights, contact us at privacy@joinelevator.io. We will respond within 30 days.
8. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- The right to know what personal information we collect, use, and disclose.
- The right to delete your personal information.
- The right to opt out of the sale of personal information. We do not sell personal information.
- The right to non-discrimination for exercising your privacy rights.
To exercise these rights, contact us at privacy@joinelevator.io or use the in-app account deletion feature.
9. International Users
Elevator is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. By using the Platform, you consent to this transfer.
If you are located in the European Economic Area, United Kingdom, or another jurisdiction with data protection laws, you may have additional rights. Contact us at privacy@joinelevator.io to exercise them.
10. Children's Privacy
Elevator is not intended for anyone under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected information from a child under 16, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on the Platform. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
JoinElevator LLC
Email: privacy@joinelevator.io
State of Incorporation: Tennessee, United States
This Privacy Policy was last updated on May 25, 2026.
