Privacy Policy

1. Introduction & Who We Are

This Privacy Policy describes how JCHB Digital LLC d/b/a ElevateVN (“ElevateVN,” “we,” “us,” or “our”) collects, uses, shares, and protects your personal information when you use the Elevate online dating platform at elevatevn.com (the “Service”). We are a Texas limited liability company. For all privacy-related inquiries, contact us at [email protected].

By creating an account or using the Service, you acknowledge that you have read and agree to this Privacy Policy. This policy is incorporated by reference into our Terms of Use.

2. Data We Collect

2.1 Information You Provide Directly

  • Identity and contact — your display name and email address
  • Birthdate — used for server-side 18+ age verification and to display your age on your profile
  • Gender and matching preferences — gender identity and the genders you are interested in meeting, used for discovery matching
  • Profile content — bio text, profile answers, and relationship intent, displayed to other members
  • Profile photos — photos you upload, displayed after moderation review
  • Location — city, region, or country. If you use “Use current location,” your precise GPS coordinates may be collected; you may also type a city manually for a less precise result
  • Messages — content of messages you send through the Service
  • Payment selections — your subscription tier; card details are processed by Stripe and never stored on our servers
  • Support communications — emails or messages you send to [email protected]

2.2 Information We Collect Automatically

  • Usage data — pages visited, features used, likes, matches, and swipes
  • Device and session data — IP address, browser type, operating system, and session timestamps
  • Log files — server access logs and error logs, retained 90 days
  • Authentication events — login timestamps and login method

2.3 Information from Third Parties

We receive subscription status and payment events from Stripe for billing purposes. If Google Authentication is used, we receive a verified email address and account identifier.

3. How We Use Your Data

We use your personal information to: operate the Service (accounts, discovery, messaging); verify your age at registration and before payment; process subscription payments; review profile photos before display; detect and prevent fraud, fake accounts, and prohibited conduct; respond to support requests; understand how the Service is used and measure the effectiveness of our marketing; comply with applicable law; send transactional emails (billing, renewals, security); and enforce our Terms of Use.

We do not sell your personal information or serve behavioral advertising to you.

4. Legal Bases for Processing

We process your personal information only where we have a lawful reason to do so — including to perform our contract with you, to comply with legal obligations, to pursue our legitimate interests in operating a safe and functional Service, and with your consent where required. If you are located in the EU, EEA, or UK, additional detail on the specific GDPR legal bases that apply to each activity is provided in §15.4.

5. Who We Share Your Data With

We do not sell your personal information.

5.1 Other Elevate Users

Your profile content — display name, bio, photos, profile answers, and general location — is visible to other registered users. Messages you send are visible to recipients.

5.2 Service Providers

We work with trusted service providers to operate the Service. These providers are subject to contractual obligations to protect your information:

  • Stripe (United States) — payment processing. Processes transaction data, billing contact, and subscription status. See Stripe’s Privacy Policy.
  • Google Cloud Platform — infrastructure hosting, primarily in Singapore (asia-southeast1). Your data may also be processed in the United States and in other locations where our service providers operate.
  • Google Authentication (if used) — account login. Receives email address and account identifier.
  • Analytics and marketing service providers — we use third-party tools to understand how users find and use the Service and to measure the effectiveness of our advertising. These providers may collect usage data and conversion events and process it under their own privacy policies.

5.3 Legal Compliance & Safety

We may disclose your information to law enforcement or government authorities when required by valid legal process; to the National Center for Missing and Exploited Children (NCMEC) when required by law upon detecting child sexual abuse material; and to protect the safety of our users when we have a good-faith belief of imminent threat.

5.4 Business Transfers

If ElevateVN is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice to you as required by applicable law.

6. Data Retention

We retain your information for as long as your account is active and as required by applicable law.

Data Retention
Profile, photos, messages, activity dataUntil account deletion (deleted as soon as reasonably practicable)
Billing transaction records7 years (accounting/tax law)
Payment card dataNot stored on our servers — held by Stripe
Server log files90 days
Legal hold dataDuration of hold

When you delete your account, your messages are removed from both your inbox and your conversation partners’ inboxes.

7. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, disclosure, or loss. Payment data is handled by Stripe under their security and compliance standards. No method of transmission or storage is 100% secure. If you discover a security concern, please contact us at [email protected].

In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities as required by applicable law.

8. International Data Transfers

ElevateVN is based in Texas, USA. The Service is hosted primarily on Google Cloud Platform in Singapore. Payment data is processed by Stripe in the United States. We also use third-party service providers that may process data in various locations. If you use the Service from outside the US or Singapore, your data will be transferred to and processed in those locations.

Where applicable law requires that international transfers be made under specific safeguards (such as for users in the EU, EEA, or UK), we rely on recognized transfer mechanisms to protect your data. You may contact us at [email protected] for more information.

9. Your Rights

9.1 Rights Available to All Users

You have the right to access, correct, delete, and receive a copy of your personal data. You may also object to or restrict certain processing. The fastest way to exercise most of these rights is directly through the Service: edit your profile, update your settings, or delete your account from Account Settings. For formal requests, email [email protected] with subject “Data Request.” We will respond within 30 days for EU/EEA/UK users, or within 45 days for all other users.

9.2 Account Deletion

Deleting your account removes your profile, photos, messages, and activity data as soon as reasonably practicable. Billing records are retained as described in §6. See elevatevn.com/support#delete-account.

9.3 Vietnamese Users (PDPL)

Vietnamese users have specific rights under the Law on Personal Data Protection (PDPL), Law No. 91/2025/QH15 (effective January 1, 2026), including the right to know, consent, access, correct, delete, restrict, object, and receive compensation for violations. Email [email protected] with “PDPL Data Request” to exercise these rights. You also have the right to file complaints with the relevant Vietnamese regulatory authorities.

9.4 EU / EEA / UK Users (GDPR)

You have rights under GDPR / UK GDPR including access, rectification, erasure, restriction of processing, data portability, the right to object, and the right to lodge a complaint with your local data protection supervisory authority. Response time: 30 days (extendable with notice).

10. Children & Minors

The Service is for adults aged 18 and over. We do not knowingly collect personal information from persons under 18.

We block registration and payment for users under 18. If we discover an under-18 user, we delete their data and terminate the account immediately. If you believe a minor is using the Service, contact us at [email protected]. We do not knowingly collect data from children under 13.

11. Marketing Communications

We send transactional emails (billing confirmations, renewal notices, security alerts) that are necessary to service your account. We may also send promotional emails about features or updates. You may opt out at any time through Notification Preferences in your account, or by clicking the Unsubscribe link in any promotional email.

12. Cookies & Tracking

We currently use only the following types of cookies:

  • Essential cookies — session management, authentication, and CSRF protection. Required for the Service to function; these cannot be disabled without breaking sign-in and account features.
  • Preference cookies — remember your settings.

We do not currently use third-party analytics, advertising, or conversion-tracking cookies, and we do not use cookies for cross-site or behavioral advertising. If we introduce analytics or advertising cookies in the future, we will update this Privacy Policy first and, where required by law (for example for EU/EEA/UK visitors under the ePrivacy Directive), we will request your consent through an on-site cookie banner before any non-essential cookie is set.

You may disable cookies in your browser settings, though essential cookies are required for the Service to function.

13. Sensitive Personal Information

Some information you provide as part of your profile — including gender preferences and matching interests, health information you choose to share, and location data — may constitute sensitive personal information under applicable law. This information is used to provide and personalize the Service. You may update your preferences at any time in your profile settings, or delete your account to end all processing of your sensitive information. We do not sell sensitive personal information or use it for advertising.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the Effective Date above. Your continued use of the Service after the updated Effective Date constitutes acceptance of the revised policy. If you do not agree with a change, you may stop using the Service and request deletion of your data as described in §9.2.

15. Regional Supplements

15.1 California

We do not sell your personal information. California residents may have rights under applicable state law to know what personal information we collect, delete it, correct it, receive a portable copy, and not be discriminated against for exercising these rights. To submit a request, email [email protected] with “Privacy Request” in the subject.

The personal information we collect includes identifiers, demographic information, commercial information, internet activity data, visual data (photos), and account credentials. We also collect matching preference information that may be sensitive in some contexts. All such information is used solely to provide the Service.

15.2 Texas

Texas residents may submit data rights requests to [email protected]. If we deny a request, you may appeal by responding to our denial. Unresolved appeals may be directed to the Texas Attorney General.

15.3 Vietnam (PDPL)

ElevateVN (JCHB Digital LLC, Texas, USA) is the data controller for Vietnamese users’ data. Personal data is transferred to Singapore for hosting and to the US for payment processing. We are not currently subject to data localization requirements under Vietnamese cybersecurity regulations, as those are triggered only by a formal government request we have not received. The startup/small enterprise exemption under Decree 356/2025 currently applies to our scale. Vietnamese-language summaries are available upon request.

15.4 EU / EEA / UK (GDPR)

For EU, EEA, and UK users, the following GDPR legal bases apply to our processing activities: we process account data and payments on the basis of performance of the contract with you; we process age verification data on the basis of legal obligation; we process safety, fraud prevention, and product analytics data on the basis of legitimate interests (we have considered the impact on your rights and expect it to be minimal); and we process sensitive personal data you disclose and promotional email communications on the basis of consent. You may withdraw consent at any time and object to processing based on legitimate interests by contacting us at [email protected].

We retain data as described in §6. The right to erasure may be exercised by deleting your account (§9.2).

16. Contact Us & Data Requests

For all privacy inquiries or data requests, email us at [email protected] or visit elevatevn.com/support. Our mailing address is 17823 Benchmark Dr, Dallas, TX 75252. We respond to all data requests within 45 days (or as required by applicable law). We may ask you to verify your identity before fulfilling your request.