Developers
Data & privacy
What is stored, who can read it, what leaves the account, how AI features handle your data, and how to export or delete everything.
Export, without asking
Every record and file in the account exports on demand: clients, properties, jobs, quotes, invoices, payments, time entries, photos and attachments. CSV for records, original files for attachments.
There is no export fee, no waiting period and no support ticket. An account you cannot leave is not an account you should join.
Who can read what
Access is by role, and roles are enforced server-side, not by hiding buttons.
- Access notes, meaning gate codes, alarm codes and key locations, are visible only to people assigned to that property, and every read is recorded.
- Leave reasons can be medical, and are visible only to the roles that administer leave. Scheduling sees unavailable, not why.
- Cost figures are separable from prices, so a tech can quote without seeing your margin.
What AI features see
Two different things, with different rules.
The in-app assistant runs as the signed-in person and can read what that person can read. It cannot act on anything that reaches a customer or moves money without that person confirming it.
An MCP key is a machine credential. It reaches a narrower set of tools: no sends, no money, nothing destructive, and no access notes or leave reasons at all. The reasoning is in the MCP page.
In both cases the account's data is used to answer the account's questions. It is not used to train models.
Retention and deletion
Records you delete are soft-deleted first, recoverable for 30 days, then removed. Deleting a client removes their properties, jobs and notes on the same schedule; invoices and payments are retained where financial record-keeping law requires it, and the retention period is shown before you confirm.
Closing an account removes everything within 30 days. Export first: after deletion there is nothing to recover, by design.
Audit log
Every API key use, every MCP tool call, every access-note read and every permission change is recorded with who, what, when and from where. The log exports like everything else.
Sub-processors
Payments are processed by Stripe, on your own connected account. Elevate Team never holds your money and takes no cut. Email delivery, file storage and AI inference each have a named provider, listed in the account's compliance settings with the region they run in.