Elkwai Solutions, LLC

Privacy Policy

Effective and last updated: August 27, 2026 · Policy version 2026.08.27-3

This policy explains how Elkwai Solutions, LLC ("Elkwai Solutions," "Elkwai," "we," "us," or "our") handles personal information across our websites, business services, data products, customer portals, software, mobile applications, games, support channels, and related services that link to this policy.

We do not sell customer account information, website visitor information, support records, app-user information, or confidential project data. We do not use personal information from our current website or applications for targeted or cross-context behavioral advertising. Elkwai Data separately licenses operational datasets derived from public and authorized sources; those products are not consumer profiles. Product-specific privacy notices provide additional details where an application handles information differently, and the product-specific notice controls for that product.

Not every category described below applies to every service or user. A category is handled only when it is relevant to a requested feature, transaction, integration, security control, or legal obligation. This policy does not authorize undisclosed collection by a future product.

1. Company and contact details

Elkwai Solutions, LLC operates Elkwai Solutions and its product lines, including Elkwai Data.

2. Services covered

This policy applies to:

This policy does not govern third-party services that we do not control. Their own terms and privacy notices apply.

3. Information we handle

Website requests and security logs

When a browser or application requests a page, asset, form, or API route, Elkwai and its website infrastructure may automatically process the network address, request date and time, requested hostname, path and query parameters, request method, response status, referring page when supplied, browser and user-agent information, device or operating-system type, language, approximate region derived from the network address, security and bot signals, and diagnostic or performance events. Cloudflare may process the raw network address to deliver and protect the site even when Elkwai retains only a shortened, hashed, aggregated, or otherwise limited form.

These records are used for delivery, authentication, rate limiting, abuse prevention, availability, debugging, and security. The current public website does not use third-party advertising pixels or third-party behavioral analytics SDKs.

Contact and support

When you contact us, we receive the information you submit, such as your name, email address, company or product area, subject, message, attachments or troubleshooting details, and the page from which the request was sent. Our systems may also process submission and form-start times, browser or user-agent information, network address, a one-way hash derived from the network address, delivery status, and anti-abuse results.

Customer accounts, orders, and software delivery

When an account, order, trial, license, download, or recovery service is available, we may process your name, business email, customer and transaction identifiers, purchased product, amount, currency, payment or refund status, entitlement, license and activation status, session records, download history, recovery request, and related audit events. We do not receive or store full payment-card numbers from Stripe, Apple, Google, or other payment platforms.

Elkwai Data and Snowflake

For data-product customers and prospective customers, we may process business contact details, company and Snowflake account identifiers, listing requests, product entitlements, account status, authentication and session records, watchlist names and criteria, API credential metadata, request and download logs, support history, and billing status. Secret API credentials are designed to be shown once and retained as cryptographic hashes where supported.

Elkwai Data products are built primarily from identified public, governmental, regulatory, scientific, and other authorized sources. Current products cover vulnerability, federal regulatory, and weather operations information. They are not designed to contain sensitive personal information or consumer profiles. Source-derived records may occasionally include professional names, titles, or public contact details when those facts appear in an official source. See the Elkwai Data Privacy Notice for details.

Applications and games

Many Elkwai applications process projects, media, gameplay, preferences, and progress locally on the device. App stores and optional platform services may process purchases, entitlements, achievements, or account information under their own policies. Current product notices include:

Feature-dependent and future application data

An updated or future application may need additional information to provide a feature. Depending on the product, that may include app and device version, operating system, language, settings, feature interactions, diagnostics, crash information, purchase and entitlement state, account identifiers, user-created content, files selected by the user, cloud-sync records, or information from a service the user chooses to connect. Device permissions such as camera, microphone, photos, files, local network, contacts, Bluetooth, or location will be requested only when a feature needs them and the operating system provides that choice.

Before a new application or materially changed feature begins handling personal information differently, Elkwai will update the applicable product notice, platform privacy disclosure, or in-context notice. Where law requires consent, permission, or an opt-out, the control will be provided before or when the relevant processing begins. General language about possible future features is not treated as consent.

Business projects and AI-assisted services

If you provide files, records, prompts, requirements, source material, or credentials for a project, we use them only to evaluate, deliver, secure, and support the agreed work. The project agreement and system design determine whether processing occurs locally, in customer-controlled infrastructure, or through an approved service provider. We do not use confidential customer material to train a publicly available foundation model unless that use is expressly agreed in writing.

Sensitive and regulated information

Do not submit Social Security numbers, government identification numbers, full payment-card data, account passwords, medical records, genetic information, biometric identifiers, precise location history, or similarly sensitive information through ordinary website or support forms. If a project legitimately requires regulated or sensitive information, we must approve it in a separate written agreement that defines purpose, authority, access, retention, deletion, security, and incident responsibilities before the information is provided.

4. Sources of information

We obtain information directly from you; automatically from your browser, app, device, and interactions with a service; from your organization or an authorized account administrator; from app stores, payment providers, Snowflake, and other services you choose to connect; from service, diagnostic, and security logs; and from identified public or licensed sources used to produce data products. When a customer provides information about other people, the customer is responsible for having authority to provide it.

5. How we use information

We may combine information from these sources when needed for the listed purposes, such as associating a purchase with an entitlement or a support request with an account. We may create aggregate or de-identified information that is not reasonably linkable to an individual. We do not attempt to re-identify de-identified information except to test whether de-identification remains effective, prevent fraud, or comply with law.

6. Legal bases

Where the GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following bases: performance of a contract or steps requested before entering a contract; legitimate interests in operating, securing, and improving our business; compliance with legal obligations; and consent where required. You may withdraw consent for future processing at any time, but withdrawal does not affect processing already completed lawfully.

When Elkwai processes personal information only on a business customer's documented instructions, that customer generally determines the purpose and means of processing and Elkwai acts as its service provider or processor. The governing agreement controls that work. Requests concerning customer-controlled information should normally be directed to the customer, and we will provide reasonable assistance as required by the agreement and applicable law.

7. When information is disclosed

We disclose information only as needed for the purposes described above, including to:

We do not sell or share customer, visitor, support, app-user, or confidential project personal information for targeted advertising. If a future service would constitute a sale or targeted-advertising disclosure under applicable law, we will update the relevant notice and provide any required choice before that practice begins.

8. Cookies, sessions, and local storage

Our websites may use strictly necessary cookies, local storage, and similar mechanisms for secure sessions, customer access, form protection, and user-requested preferences. Cloudflare and Turnstile may process browser, device, network, and interaction signals and may set security cookies when needed to distinguish legitimate traffic from abuse. Google Fonts receives the request information ordinarily sent by a browser when it retrieves a font stylesheet or font file. Our current public website does not use third-party advertising cookies. You can clear browser storage through your browser settings, although doing so may sign you out or reset preferences.

Because Elkwai does not currently sell or share website personal information for targeted advertising, a browser's Do Not Track or Global Privacy Control signal does not change the site's strictly necessary processing. If Elkwai later introduces processing for which applicable law requires recognition of an opt-out preference signal, we will honor the signal and provide the corresponding notice and controls before that processing begins. Third parties may collect information under their own policies after you leave Elkwai or deliberately use an embedded or connected third-party service.

9. Data-product boundaries

Customer account information, private watchlists, credentials, and delivery records are kept separate from public catalog metadata and from the data-product records supplied to other customers. We do not place one customer's private account or watchlist information into another customer's product. Access to private bundles, APIs, and Snowflake shares is controlled by account, entitlement, role, or product scope.

Data-product content may be governed by separate subscription, listing, license, or service terms. Those terms address permitted use, redistribution, accuracy limitations, and product-specific retention independently of this privacy policy.

Elkwai Data products are not consumer reports and are not offered for determining an individual's eligibility for credit, employment, housing, insurance, government benefits, or another purpose governed by the Fair Credit Reporting Act. Customers may not use the products for those purposes.

10. Retention

We retain personal information only for as long as reasonably necessary for the stated purpose and legitimate legal, security, accounting, and contractual needs. When retention ends, we delete, de-identify, or render the information unreadable and unusable using methods appropriate to the medium, subject to limited backup and legal-hold cycles.

11. Security

We use measures appropriate to the service and sensitivity of the information, including HTTPS encrypted transport, restricted access, least-privilege service accounts, Secure, HttpOnly, and host-scoped session cookies where applicable, one-way credential hashing, rate limits, request validation, audit records, entitlement checks, and separation of public and private data. Service-provider agreements require confidentiality and reasonable security where applicable. We maintain procedures for investigating security incidents, containing harm, preserving necessary evidence, and notifying affected people and authorities when notice is legally required. No storage or transmission method can be guaranteed completely secure.

12. International processing

Our providers and customers may operate in more than one country. Information may therefore be processed outside your state, province, or country. Where required, we use contractual, organizational, or other legally recognized safeguards for international transfers.

13. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, or restriction of personal information; object to certain processing; withdraw consent; or appeal a denied request. You may also have the right to opt out of sale, sharing, targeted advertising, or certain profiling. Our current practices do not sell or share customer, visitor, support, app-user, or confidential project personal information for those purposes.

Send requests to privacy@elkwai.com. We may ask for information reasonably necessary to verify your identity and authority. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

Illinois residents may also contact us about the security, correction, or disposal of personal information. If you are in the EEA, UK, or Switzerland, you may lodge a complaint with the data-protection authority where you live or work.

If information is stored only on your device, use the application's controls or remove the application to manage it. Requests concerning information held by Apple, Google, Stripe, Snowflake, Adobe, Frame.io, or another independent provider must also be directed to that provider when Elkwai does not control the record.

14. Illinois biometric information

Our current public website, customer portals, games, creative applications, and data products do not collect fingerprints, retina or iris scans, voiceprints, face-geometry templates, or similar biometric identifiers for identifying a person. Ordinary photos, video, audio, handwriting, and media-editing files are not converted by Elkwai into identity templates. We will not introduce collection of biometric identifiers for identification without first implementing the separate notice, stated purpose and duration, written consent, retention and destruction schedule, disclosure limits, and safeguards required by applicable law.

15. Children

Our business services and customer portals are intended for adults and authorized business users. Our current games and creative apps are general-audience products and are not designed to collect personal information from children. We do not knowingly collect personal information online from a child under 13 without legally required notice and verifiable parental consent. If we learn that a child under 13 used a general contact channel, we will use the information only as legally permitted to answer a one-time request or will delete it. A parent or guardian may contact privacy@elkwai.com to request review or deletion.

16. AI and automated decisions

AI-assisted features may help summarize, classify, retrieve, draft, route, or prioritize information. Elkwai's current public services do not use personal information to make solely automated decisions that determine an individual's employment, credit, housing, insurance, education, health care, government benefits, or another legal or similarly significant interest.

A customer project involving employment decisions, applicant video analysis, biometrics, or another consequential use requires a separate written scope before deployment. That scope must define lawful authority, notice and consent where required, prohibited discrimination and proxy variables, human review, testing, records, retention, deletion, and responsibility for the final decision. Elkwai does not authorize customers to use a general automation or data product as a substitute for those controls.

17. Email communications

We send replies, security messages, purchase and account notices, support communications, and other transactional messages related to a request or service. If we introduce promotional email, the message will identify Elkwai, use accurate routing information, and provide a working method to stop future promotional messages. Opting out of promotional email does not stop necessary account, security, purchase, or support messages.

18. Third-party services and links

Our services may link to or integrate with third-party platforms. We are not responsible for their independent privacy practices. Review the privacy notice of the relevant app store, payment provider, marketplace, cloud platform, or connected service before using it.

19. Changes to this policy

We may revise this policy as Elkwai adds or changes websites, applications, integrations, data products, providers, security controls, business operations, or legal obligations. The revision will identify its effective date and version. Changes ordinarily apply from the stated effective date forward.

Before a material change begins, we will update this policy or the applicable product notice and provide prominent or in-context notice when appropriate. If a new purpose is materially different from the notice that applied when information was collected, we will not rely solely on a posted revision when applicable law requires consent or another choice. New collection of sensitive information, biometric identifiers, children's information, targeted-advertising data, or information used for a consequential automated decision receives a separate review before launch.

20. Contact us

For privacy questions, requests, or complaints, contact:

Elkwai Solutions, LLC
Email: privacy@elkwai.com
Support: support@elkwai.com
Website: https://elkwai.com