Privacy Policy

When a firm uses Elevana to evaluate an investment, that firm decides what information to collect and why. They are the data controller; we operate the platform on their behalf as a processor. If you are a respondent and want to know why you were asked for something, or you want your responses removed, the firm that sent you the link is the right first contact. We will help them action it.

Account data for platform users: name, email address, hashed password (we never store the password itself), the firm and role you belong to, and a record of your activity in the product.

Questionnaire content for respondents: the answers you submit, the files you upload, and the email address the invitation was sent to. This is business information about a fund or company, but it can include personal details where you choose to provide them — for example the biography of a team member.

Technical data: basic server logs and error reports generated when something goes wrong.

We use essential cookies only. A session cookie keeps you signed in; a small preference stored in your browser remembers your cookie choice and interface settings such as the view you last used. Declining the banner keeps the form working — it only records the choice.

We do not use advertising cookies, and we do not run third-party analytics or cross-site tracking on this service.

We use a small number of service providers to run the platform: cloud hosting and object storage for files, an email delivery provider for invitations and notifications, an error monitoring service, and AI providers that power the assistant and document-analysis features. Content you submit may be sent to those AI providers to generate summaries and analysis for the firm evaluating you. We do not sell personal data, and we do not share it for advertising.

Firms set their own retention rules in the platform, so the period depends on the firm that collected your information. Records are deleted or anonymised when a rule applies, or sooner on request. Anonymisation replaces identifying details while keeping the non-personal investment record intact.

You can ask for a copy of your personal data, ask us to correct it, or ask for it to be deleted or anonymised. The platform supports each of these directly — a data export produces a machine-readable copy, and anonymisation is logged when it runs. Depending on where you live you may also have the right to object to certain processing or to complain to your data protection regulator.

To exercise any of these, contact the firm that invited you, or write to us at fahad@mihwar.com.

Access is restricted to the firm that owns the record — every request is checked against your account's team and role, and revoking access takes effect immediately. Passwords are stored hashed, traffic is encrypted in transit, and uploaded files are served through expiring links rather than public URLs.

If this policy changes we will update the date at the top of this page. Material changes affecting respondents will be reflected on the forms themselves.

Questions about this policy: fahad@mihwar.com