Privacy notice
Alevated Business Intelligence · Updated October 20, 2026
Alevated operates Alevated Business Intelligence, including business-branded deployments such as Business Bible. This notice describes how the platform handles information when a business authorizes a connection or uses its private workspace.
Information we process
We process workspace member email addresses, roles and account identifiers; authorized source account and property identifiers; connection credentials; imported business records and reporting aggregates; reports; and operational records such as sync status, administration activity and AI usage counts. Workbook imports contain the information the business chooses to upload.
Our Google Analytics integration requests read-only Analytics access. It reads available property names, identifiers and timezones, then retrieves aggregate daily website page-view data for the selected property. It does not request Gmail, contacts or Google Drive access and does not change your Analytics settings.
Our Google Ads integration requests the Google Ads authorization scope (adwords). Google does not offer a separate read-only scope for this API. Although Google's consent screen describes campaign-management permissions, our integration only reads account metadata and advertising reports; it does not create, edit or delete campaigns, ads or budgets. Workspace owners select the reporting account. Credentials remain encrypted on the server.
Our Google Sheets integration requests read-only spreadsheet access (spreadsheets.readonly). Google grants this scope for spreadsheets your account can access; the application reads only the workbook link you provide and its supported reporting tabs. We read the workbook title, tab names and reporting cells to validate and preview an import, then save the reviewed reporting snapshot when a workspace owner confirms. We never edit your spreadsheet or request Google Drive access. Your encrypted authorization is stored for later owner-initiated refreshes until disconnected or revoked. Each business uses its own authorization and isolated workspace database.
How we use information
We use information to authenticate members, maintain authorized connections, refresh and reconcile reporting data, display dashboards, create reports, support the business, and protect and operate the service. Workspace roles control access. Investors can see only the reporting content made available to their role.
AI analysis and service providers
When AI processing is configured for the deployment, enabled by the workspace owner, and requested by a user, the application sends the user's question, reporting summaries and coverage, the imported workbook's KPI sheet and import warnings to Anthropic to generate an answer. This evidence can include metrics derived from connected Google Analytics, Google Ads and Google Sheets data and text entered in the workbook. Avoid including personal details that you do not want processed by Anthropic. Connection credentials are not included. The application does not store raw analyst questions or answers as a conversation history; a user may save generated content in a report.
Vercel provides application hosting, Supabase provides database and authentication services, and Resend delivers sign-in emails. These providers process information needed to perform their services. Anthropic API retention is governed by the applicable commercial account agreement; use of the service does not imply zero data retention.
We do not sell Google user data, use it for advertising, or use it to train general-purpose AI or machine-learning models. Alevated Business Intelligence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Security and separation
Provider credentials are encrypted before storage and are used on the server. Business deployments use separate data stores and source authorization tokens, even when they share an Alevated OAuth application. Workspace access is invitation-only and enforced with role-based database access controls. Except for Google API data, which is limited as described below, authorized Alevated personnel may access information as necessary to provide support, maintain the service, address security incidents or meet legal obligations.
Human access to Google API data is limited to situations where you affirmatively agree to access specific data, security investigations, applicable legal requirements, or internal operations using aggregated and anonymized data. Connected reporting data is shared with authorized workspace members according to their roles.
Session cookies keep users signed in. Hosting providers process technical request information to deliver and secure the service. Information is processed using US-hosted infrastructure and the service providers' processing locations.
Retention, disconnection and deletion
Disconnecting a source removes its stored connection credentials and stops future authorized syncs. It does not automatically delete previously imported observations or reports, or revoke the grant at Google. To revoke that grant, remove the app's Google access in your Google account's third-party connections settings.
Reporting information is retained for the workspace's reporting history unless deletion is requested or a customer retention arrangement applies. Administration records may retain member email addresses and actor identifiers after an account is removed. There is currently no automatic workspace-wide retention purge.
Individuals can request access, correction or deletion of their personal information. Authorized business representatives can request changes to workspace data or a retention arrangement. Contact andrew@alevated.com. We verify the requester's authority before acting. Some information may need to remain for legal or security purposes; backup removal follows the hosting providers' applicable retention processes.
Updates and contact
We update this notice when data handling changes and identify the revision date above. Contact andrew@alevated.com with privacy or connection questions.