Privacy policy
Last updated 29 October 2026
Elevy Analytics ("Elevy", "we", "us") is a product of Akshita Creations Private Limited, India. Elevy helps online brands reconcile marketplace and Shopify sales, fees, payments, GST and inventory. This policy explains what we collect through our website, the Elevy app and the Elevy Shopify app, why, how we protect it and how you can have it deleted. We process personal data in line with India's Digital Personal Data Protection Act, 2023.
What we collect
| Where | What |
|---|---|
| Website demo form | Brand and company name, your name, mobile number, work email, city, the platforms you sell on, order and SKU range, your message, and the network address the form was sent from (to stop spam). |
| Elevy accounts | Name and email of each login, its role and page access, and a one-way hash of the password (we never see or keep the password itself). A log of changes made to a brand's data (who, what, when) for its history and undo. |
| Reports a brand uploads | Marketplace, OMS, courier, payment gateway, warehouse and ads reports, and fee invoices: order and invoice numbers, AWB numbers, SKUs, quantities, prices, fees, taxes, settlement amounts and dates, and the shipping state and PIN code used for GST place of supply. |
| Shopify app | Store name and domain, the store owner's email, orders (numbers, dates, line items, SKUs, quantities, prices, discounts, taxes, prepaid or COD, fulfilment and refund status, shipping state and PIN code), and products (SKUs, prices, cost per item, stock). |
| Meta Ads and Google Analytics (only if the brand connects them) | Ad account names and daily ad performance (spend, impressions, clicks, add to carts, purchases, purchase value by campaign and product); website sessions and conversions. Read-only. |
We do not collect end-customer names, email addresses, phone numbers or street addresses. Where a brand's own report contains such columns, Elevy reads only the order, product, amount, date, state and PIN code fields it needs.
How we use it
- To provide Elevy to the brand: its P&L, payment reconciliation, GST data, ads, stock and warehouse checks, and dashboards.
- To answer demo requests and support emails, and to send service messages about the brand's account.
- To keep Elevy secure: stopping repeated wrong passwords, spam and misuse.
We do not sell data, use it for advertising, train AI models on it, or share one brand's data with another brand.
Cookies
Elevy sets one cookie, elevy_session, which keeps you logged in and protects forms against forgery. It is signed, sent only over HTTPS on our live servers, not readable by scripts on the page, and expires after 12 hours. We use no advertising or tracking cookies. The website loads fonts from Google Fonts.
How we protect it
- All traffic is encrypted in transit (HTTPS, with browsers told to use HTTPS only).
- Passwords are stored as salted PBKDF2-SHA256 hashes. Repeated wrong passwords pause further attempts.
- Access tokens for Shopify, Meta and Google are stored encrypted. Every message from Shopify is checked against its signature, and Shopify launch links work once.
- Each brand's data is kept separately and is visible only to the logins that brand authorises, with view-only and per-page access available.
- Pages carry browser protections against framing (clickjacking), content sniffing and cross-site scripts; uploads are checked for size and unsafe archives.
- Servers are reachable only through a firewall and web proxy; backups are taken daily.
No system is perfectly secure. If we learn of a breach affecting your data we will inform the affected brands and the Data Protection Board of India as the law requires.
Who we share it with
Only service providers we need to run Elevy, under confidentiality: our hosting provider, and the services a brand chooses to connect (Shopify, Meta, Google). Shopify handles billing for Shopify app plans; Razorpay processes payments for plans bought on our website (Elevy never receives or stores card, UPI or bank account details, only the payment and subscription IDs and status). We disclose data to authorities only when Indian law requires it.
Retention and deletion
- Brand data is kept while the brand uses Elevy and deleted within 30 days of the brand closing its account or asking us to, apart from records we must keep by law (for example our own invoices).
- Shopify app: on uninstall we stop collecting data and delete the store's access token. When Shopify sends its store deletion request (48 hours after uninstall) we delete the store's data. Customer data and erasure requests from Shopify are acknowledged; we hold no customer personal data to return or delete.
- Demo requests are kept for up to 24 months, or deleted sooner on request.
- Meta and Google data can be removed by disconnecting them in Settings > Integrations; see also data deletion.
Your rights
You can ask us to tell you what personal data we hold about you, correct or update it, delete it, or withdraw consent for its use, and you can nominate someone to exercise these rights for you. Write to the address below; we reply within 30 days. If you are not satisfied with our reply you may complain to the Data Protection Board of India.
Contact and grievance officer
Grievance officer, Akshita Creations Private Limited (Elevy Analytics)
Email: care@elevyanalytics.com (privacy and data requests, support)
Business: info@elevyanalytics.com
We may update this policy; the date at the top shows the latest version, and we will tell brands by email about material changes. Terms · Data deletion · Home