Office Elves
PrivacyTermsCookiesDPAContact
Sign in

Privacy Policy

Last updated: 6 July 2026

1. Who we are

Office Elves is a customer support, CRM, sales and marketing platform operated by the site operator. You can contact us about anything in this policy through our contact page.

For the personal data described in this policy (your account, billing and website data), the site operator is the data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Where our customers use Office Elves to store and manage their own customers' data (contacts, conversations, tickets, deals and campaign lists inside a workspace), the customer is the controller of that data and we act only as a processor on their instructions. That processing is governed by our Data Processing Addendum, not by this policy. If you believe a business is holding your data in Office Elves, please contact that business directly; we will assist them in responding to you.

2. What we collect

  • Account data: your name, email address and password credentials (managed by Google Firebase Authentication; we never see your password in plain text), and the workspaces you belong to.
  • Billing data: your plan, subscription status and payment history. Card details are collected and stored by Stripe, our payment processor; we never store full card numbers.
  • Usage data: actions taken in the product (for example replies used against your plan allowance), device and log information such as IP address and browser type, used for security and to run the service.
  • Support communications: messages you send us by email or through the product.

3. Why we use it (lawful bases)

  • To provide the service (performance of a contract): creating your account, running your workspaces, billing you, providing support.
  • To secure and improve the service (legitimate interests): fraud and abuse prevention, debugging, capacity planning, aggregate product analytics.
  • To meet legal obligations: tax, accounting and responding to lawful requests.
  • With your consent, where we ask for it (for example optional product update emails). You can withdraw consent at any time.

4. Who we share it with

We do not sell personal data. We share it only with the service providers we need to run Office Elves:

  • Google (Firebase / Google Cloud): hosting, authentication and database.
  • Stripe: subscription billing and payments.
  • Anthropic: generation of automated replies. Content is sent for processing only; we do not permit our providers to train models on your data.
  • Amazon Web Services (SES): email delivery for campaigns and transactional email.

We may also disclose data where required by law, or as part of a business sale or reorganisation (in which case this policy would continue to apply).

5. International transfers

Some of our providers process data outside the UK, including in the United States and the European Economic Area. Where that happens we rely on UK adequacy regulations (including, where applicable, the UK Extension to the EU-US Data Privacy Framework) or appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.

6. Retention

We keep account data for as long as your account is active. If you close your account or a workspace is deleted, we delete or anonymise the associated personal data within 90 days, except where we must keep records longer for legal, tax or accounting reasons (typically 6 years for billing records).

7. Security

Data is encrypted in transit (TLS) and at rest on Google Cloud infrastructure. Access to production data is restricted, workspace data is isolated per tenant, and sensitive server credentials are held in a managed secret store.

8. Your rights

Under UK GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased ("right to be forgotten");
  • restrict or object to processing;
  • data portability;
  • withdraw consent where processing is based on consent.

To exercise any of these rights, use our contact page (or email hello@officeelves.com). We will respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

See our separate Cookie Policy.

10. Changes

We will post any changes to this policy on this page and update the date at the top. If a change is material, we will notify account holders by email.

Office Elves
PrivacyTermsCookiesDPAContact
Reach the Office Elves team through our contact page.