Back to icockpit.ai

Privacy Policy

iCockpit is operated by Elevate AI Technologies ("we", "us"). This policy explains what we collect when you use iCockpit at icockpit.ai, why we collect it, and the choices you have. Last updated: 5 September 2026.

What we collect

  • Account data — your name, email address, and a salted hash of your password. If you enable two-factor authentication or passkeys we store the TOTP secret, hashed backup codes, and passkey public keys (never your biometrics — those stay on your device).
  • Workspace content — organizations, teams, tasks, comments, attachments, and reporting data that you and your colleagues create. Your organization controls this content; we process it only to run the service.
  • Operational data — session records, sign-in timestamps, and server logs kept for security and troubleshooting. We do not run third-party analytics or advertising trackers, and the only cookies we set are the ones that keep you signed in.

How your data is protected

  • Every organization's data is isolated at the database layer. Access inside an organization follows its own chain of command — hierarchical access control is enforced on the server and mirrored in the database.
  • Confidential tasks are visible only to their creator and assignee; even notification emails about them are redacted before they are written.
  • Traffic is encrypted in transit (TLS). Attachments are served only through access-checked routes — there are no public file URLs.

Who we share it with

We sell nothing to anyone. Data is shared only with the infrastructure providers needed to run the service: our hosting provider (Railway, servers in the EU) and our transactional email provider (Resend), each processing data solely on our instructions. We disclose data to authorities only where the law requires it.

Retention & deletion

Workspace content is retained while your organization's subscription or trial is active. Encrypted backups are kept for approximately 14 days on a rolling window. If you delete your account or organization — or ask us to — we remove the associated data from the live system promptly and it ages out of backups on the same rolling window.

Your rights

You may request a copy, correction, or deletion of your personal data at any time by contacting [email protected]. If your data is managed by an organization you belong to, we may route the request through that organization's administrator.

Changes

If we make material changes to this policy we will notify account owners by email before the changes take effect.