验证
注册后需要进行多重身份验证（电子邮件或身份验证器应用程序）。
- 拥有特权的平台角色（超级管理员、代理管理员）必须使用多因素身份验证 (MFA)。
- 通过 Supabase Auth 进行密码重置和会话管理
您可以从Elevale获得什么
我们的平台文档以通俗易懂的语言阐述了加密、访问控制、审计日志、数据权限和保留等概念，避免使用晦涩难懂的实现术语。
加密
传输中：所有连接均采用 TLS 1.2+
- 静态存储：Supabase 加密存储；OAuth 令牌服务器端加密
- 密钥：API 以哈希形式存储；无客户端令牌加密
访问控制
所有租户数据均采用行级安全性 (RLS)
- 基于角色的访问权限：系统、组织和工作区级别
- 具有精细权限的自定义工作区角色
您的数据权利
根据 GDPR、英国 GDPR 和许多美国州法律，您对您的个人数据享有权利。
- 访问权限：了解我们掌握的关于您的数据。
- 可移植性：下载您的数据（JSON 导出）
- 更正：更正个人资料设置中的不准确数据
- 删除：删除您的帐户或申请删除
审计日志
Elevale 维护不可篡改的审计跟踪，以实现合规性和安全问责。
- 工作区数据变更（OKRs、KPIs、任务、wiki、业务简报、流程图）
- 用户和角色变更
- 权限和自定义角色修改
- 管理员操作（用户删除、工作区管理）
保留和删除
计费、自动化作业和本文档中的保留期限保持一致。
- 宽限期：至当前计费周期结束；完全访问权限继续有效。
- 访问权限终止：宽限期结束时；账户关闭；删除计划开始执行。
- 访问权限终止后 60 天：个人数据匿名化（软删除）
- 访问权限终止后 90 天：永久删除（彻底删除）
明确删除时间表
计费、自动化作业和平台文档的保留期限保持一致。
查看保留政策 →已取消的工作区
- 1 宽限期
直至当前计费周期结束；完全访问权限仍然有效。
- 2 访问结束
宽限期结束；账户关闭；删除计划开始实施
- 3 访问权限终止后 60 天
个人数据已匿名化（软删除）
- 4 访问权限终止后90天
永久删除（彻底删除）
其他数据类别
- 审计日志 保留 2 年，然后自动清除。
- Cookie 同意记录 1年
- 隐私请求 竣工后 3 年（合规性证明）
- 账单记录 根据税法规定保留（通常为 6-7 年）
- 备份 Supabase 加密 PITR；滚动调度独立于应用程序生命周期
- Marketing contact data Until you unsubscribe or request deletion, plus a short suppression record
- Backups Supabase encrypted point-in-time recovery; rolling schedule independent of application lifecycle
评论
帮助其他导演找到Elevale
如果 Elevale 对您的领导团队有效，那么在 G2 或 Capterra 上发表评论可以帮助其他业务总监发现适合中小企业和成长型团队的战略执行软件。
平台背后的值得信赖的合作伙伴
Elevale 使用受信任的子处理商来提供平台服务。权威的子处理商列表发布在 elevale.app/legal/subprocessors。我们会在添加处理个人数据的子处理商之前提前 30 天通知您。
| 提供者 | 目的 |
|---|---|
| Supabase | 数据库、身份验证、存储（欧盟/美国地区） |
| Fly.io | 应用程序托管 |
| Stripe | 支付处理 |
| OpenAI / Google Gemini | AI聊天和嵌入式功能（启用后） |
| ElevenLabs | 语音模式（启用时） |
| AWS SES | 交易邮件 |
法律与合规库
所有内容均发布自 Supabase 中的 Elevale 平台文档。
法律文件
合法的
Privacy Policy
agreed at signup
打开文档 → 合法的Terms of Service
agreed at signup
打开文档 → 合法的Cookie Policy
branded for Elevale; explains essential and analytics cookies
打开文档 → 合法的Acceptable Use Policy
View the acceptable use policy.
打开文档 → 合法的Data Processing Agreement (DPA)
View the data processing agreement (dpa).
打开文档 → 合法的Subprocessor list
View the subprocessor list.
打开文档 →合规指南
Data Processing Agreement
Last updated: 6 August 2026.
阅读指南 →Privacy Policy
This Privacy Policy explains how Elevale ("we", "us", "our") collects, uses, stores, shares, and protects personal data when you use our platform, marketing website, and related services. It also describes your privacy rights and how to contact us.
阅读指南 →Acceptable Use Policy
This Acceptable Use Policy ("AUP") applies to all users of Elevale . It is incorporated into our Terms of Service . Violations may result in suspension, account disabling, or termination.
阅读指南 →Cookie Policy
Last updated: 6 August 2026
阅读指南 →Data retention and deletion
Retention timelines are consistent across billing, automated deletion jobs, backups, and this documentation. This page explains what we keep, for how long, and how you can delete data yourself.
阅读指南 →Terms of Service
These Terms of Service ("Terms") govern your access to and use of Elevale . By creating an account, clicking to accept these Terms at signup, or using Elevale, you agree to these Terms, our Privacy Policy , our Cookie Policy , our Acceptable Use Policy , and our Data Processing Agreement (each incorporated by reference). The DPA applies automatically as the processing terms where we (or our infrastructure providers under our instructions) process personal data as processor or sub-processor for your organisation; no separate wet-ink signature is required for the standard online DPA. If you do not agree, do not use the service.
阅读指南 →Subprocessors and integrations
Last updated: 6 August 2026.
阅读指南 →Security and data protection
Elevale protects your data with layered authentication, encryption, access controls, and operational safeguards. This page summarises the technical and organisational measures we apply across the platform.
阅读指南 →Audit logging
Elevale maintains an immutable audit trail for compliance, accountability, and security investigations. This page describes what we log, who can see it, and how long records are kept.
阅读指南 →Agency and partner data responsibilities
Partners and agencies using Elevale white-label branding have specific data protection responsibilities.
阅读指南 →Accessibility commitment
Last updated: 20 July 2026. Saint Financial Group Limited is committed to making Elevale accessible to people with disabilities. This page explains our approach, the standards we meet, and how to report barriers you encounter.
阅读指南 →Incident response and data breaches
Elevale maintains an incident response process to contain threats, protect users, and meet regulatory notification obligations. This page describes our commitments and your role.
阅读指南 →Referral Agreement
Last updated: 6 August 2026. This Referral Agreement (the "Agreement") governs your participation in the Elevale Referral programme (the "Programme"). Elevale is a trading name of Saint Financial Group Limited. In this Agreement, "Elevale", "we", "us", and "our" mean that registered company trading as Elevale. By enrolling in the Programme and accepting this Agreement (acceptance is recorded with a termsAcceptedAt timestamp and a terms_version ), you agree to be bound by it. If you do not agree, do not enrol or continue in the Programme.
阅读指南 →