Elves BuilderPrivacy Policy
The short version
- We keep a small record per connected site: its address, a random ID, its plan, and a few usage counters.
- Your page content passes through our relay so your AI assistant can build it. We don’t save it.
- We don’t collect names, passwords, payment details or your site’s visitor data. If you email us, we keep that email so we can reply.
- This website has no analytics, no ads and no third-party scripts.
- To have a site’s record deleted, email support@elvesbuilder.com.
1. Who we are
Elves Builder is a WordPress plugin and a hosted relay service at elvesbuilder.com that lets your AI assistant (such as Claude Code, VS Code or Cursor) build pages in the Elementor editor on your site. It is operated by ElvesBuilder, the trading name of Abhinav Krishna, a sole proprietorship in Delhi, India (see Contact us). In this policy, “we” and “us” mean ElvesBuilder. You can reach us at support@elvesbuilder.com.
This policy covers the hosted relay, the plugin’s connection to it, and this website. It does not cover the AI assistant you choose to use (see section 5).
2. What we store
When you click Connect this site in the plugin, the relay creates a record for your site. Here is everything it keeps:
| What | Why we need it | How long |
|---|---|---|
Site address (for example https://example.com) | To know which site a connection belongs to, and to make sure a token is only used from that site. | Until the record is deleted. |
| Random site ID | To tie your plan and counters to your site. | Until the record is deleted. |
| Plan (free, pro or agency) | To apply the right limits. | Until the record is deleted. |
| Site token, stored only as a one-way hash | To recognise your site without keeping the token itself. The token lives in your WordPress database, not ours. | Until it is replaced or the record is deleted. |
| Date the site was first connected | Our own record keeping. | Until the record is deleted. |
| Number of new elements added this calendar month | To apply the free plan’s monthly allowance and to show your usage in the plugin. | Kept per month, until the record is deleted. |
| Time of the last assistant action, and the date of last activity | To show connection status in the plugin and to see how many sites are in use. | The “active” flag expires after 30 days without activity. |
That is the full list for a connected site. There are no user accounts, so the site record holds no names, email addresses or passwords.
Emails you send us. If you write to support@elvesbuilder.com (including to join a waitlist for paid plans), we keep your message and your email address so we can reply and, if you asked, tell you when paid plans launch. Mail sent to that address is forwarded to our inbox by Cloudflare Email Routing. We do not add you to any other mailing list.
3. What passes through but is not stored
While an Elementor editor tab is open, the relay carries messages between your AI assistant and your editor: the commands the assistant sends (for example “add a heading”) and the editor’s replies (for example the page’s element structure and settings). This is held in memory only for as long as it takes to complete the request. We do not write it to our database, and the relay does not log it.
Nothing about your site’s visitors is sent to us. The plugin does not read or transmit visitor data, passwords, or content outside the page you are editing.
4. Connecting your site
When you click Connect this site, your site sends its address to the relay, which replies with a one-time code and a secret. The relay then makes a single request to your site (/wp-json/elves-builder/v1/verify) to check that the site returns that code, which proves you control it. The code is valid for a few minutes and works once. Nothing is sent until you click.
5. Your AI assistant
You bring your own AI assistant and subscription. What the assistant sees and sends to its provider (for example Anthropic, Microsoft or Cursor) is governed by that provider’s terms and privacy policy, not ours. We are not a party to that. If you ask your assistant to work with page content, that content goes to your assistant’s provider as you have set it up.
6. Hosting and logs
The relay and this website run on Cloudflare (Workers, Durable Objects and KV), on Cloudflare’s global network. Your data may therefore be processed in countries other than your own. Like any host, Cloudflare keeps standard request logs for operating and securing its network, and we have Cloudflare’s request logging enabled for the relay. These logs may include the time, path, status and network address of a request. We use network addresses only for short-lived rate limiting, and we do not store them in our own database.
7. This website
This website sets no cookies of its own, runs no analytics or advertising, and loads no third-party scripts, fonts or images. To show prices in rupees or dollars, the page asks our server which country your request comes from (Cloudflare supplies this with every request). We use it only to choose the currency and do not store it. Cloudflare, which serves the site, may run security and bot-protection checks that can set a security cookie in your browser. See Cloudflare’s privacy policy.
8. Payments
Paid plans are not available yet, and we collect no payment information today. When they launch, payments from customers in India will be handled by Razorpay, and payments from other countries by a payment provider we will name here before launch. These providers process card, UPI and bank details under their own privacy policies. We expect to receive only the status of a payment, the plan bought, and the billing email address, and we will not see or store full card numbers.
9. Keeping and deleting data
We keep a site’s record until you ask us to delete it or we retire the service. Deleting the plugin from your WordPress Plugins screen removes its saved settings from your site (the site token and relay address), but it does not currently delete the record at the relay. To have that record deleted, email support@elvesbuilder.com with the site address. We may ask you to confirm that you control the site before we delete the record, and we will tell you when it is done.
10. Your rights
Depending on where you live, you may have rights to see, correct, delete or export data about you, or to object to how it is used. Because the only data we hold is a record about a website, the simplest route is the one above: email us and tell us the site address. We will respond within a reasonable time. You can also complain to your local data protection authority.
11. Security
Connections to the relay use HTTPS/WSS. Tokens are stored only as hashes. The relay accepts an editor connection only from the site its token was issued to, and the assistant can only run a fixed set of page-building commands; it cannot run code on your server. No system is perfectly secure, so please keep your site token private and treat it like a password.
12. Children
Elves Builder is a tool for people who build websites. It is not directed at children, and we do not knowingly collect data from them.
13. Changes
If this policy changes in a way that matters, we will update the date at the top and, for significant changes, say so in the plugin’s changelog or on the website.
14. Contact
Questions, deletion requests or concerns: support@elvesbuilder.com.