Privacy Policy

Overview

LEVELD.IO LLC ("leveld," "we," "our," or "us") operates the leveld.io website and the app.leveld.io platform (together, the "Service"). This policy says what we collect, why, who else touches it, how long we keep it, and how you get it back or delete it. It is written in plain language on purpose. The sections below are the whole policy, not a summary of one.

The leveld.io website

The marketing site sets no cookies, loads no third-party scripts, and runs no analytics. Our hosting provider, Cloudflare, keeps standard request logs (IP address, user agent, URL, time) for security and keeps them on its own short schedule. If you email us, we keep the email.

What we collect in the app

Account

Your email address and the name you give us
A password hash if you set a password; passkey public keys if you register passkeys; an authenticator secret and backup codes if you turn on two-factor, stored encrypted
For each active session: a session token, the IP address and the browser user agent, used to secure the account and to rate-limit sign-in

Profile

Your screen name, generated at signup, and the history of names you have used
Whether you display your screen name or your real name
Headline, summary, field, and your profile visibility setting, which starts as private
Your settings: whether Gary signal extraction is paused, and whether you have opted in to usage analytics

Professional DNA

Your assessment answers, stored as signals
Every signal on your profile: its source, value, weight, written reasoning and date. Signals are append-only: we never edit or delete one
The scores, confidence and narrative computed from those signals
Any dispute you file and its outcome

Role path, Gary, and labs

Your current rung, target rung, the gaps between them, your next step, and check-in dates
Your messages to Gary and its replies, and any signals extracted from them unless you pause extraction
Your lab submissions, grades and results

Billing

Your tier, trial and billing period dates, and, for Lifetime members, your seat number
Your Stripe customer and subscription identifiers. Card numbers never reach us; Stripe holds them

Pay submissions

A pay submission holds field, rung, branch, region, base pay, bonus, equity and years of experience, plus a one-way hash of your account ID that is used only to prevent duplicate submissions. It holds no account ID, no name and no email. We cannot link a submission back to you, and neither can anyone else.

Audit log

Every read of your profile, including your own, every export, every account deletion and every action a founder takes on your account is written to an audit log with the account ID, the action and the time. The log never holds your email address or name.

Usage events

Only if you opt in from settings, we record product usage events (which features you use, when) in our own database. We use no third-party analytics service anywhere.

How we use it

To run the Service: your profile, path, coaching, labs and pay data
To secure your account: sign-in, sessions, rate limiting, the audit log
To bill you, through Stripe
To send transactional email: verification links, one-time codes, password resets, receipts, and notices about your account or these policies
To answer you when you write to us

We do not sell, rent or share your personal data for anyone else's marketing. We do not use your data to train AI models, and our AI provider is contractually barred from doing so. We send no marketing email unless you opt in to a list we have not yet created.

AI processing

Gary, assessment narratives, and lab grading run on an AI model provider. To generate a response we send the provider only what the feature needs: the conversation, the relevant parts of your profile and path, or the lab submission being graded. We do not send your email address, real name or billing details. The current provider is Amazon Web Services (Amazon Bedrock), in United States regions, under terms that prohibit using inputs to train models. If the provider changes, this page changes with it.

Who else touches your data

Cloudflare: hosts the Service and the website, pools database connections, provides DNS and DDoS protection. Privacy policy
Neon: the Postgres database where all app data lives, in the AWS us-east-2 region (Ohio, United States). Privacy policy
Amazon Web Services: AI inference, as described above. Privacy notice
Stripe: payments and subscriptions. Stripe sees your email, name, card and billing address. Privacy policy
Postmark: delivers our transactional email. Privacy policy
Proton: our mailboxes. Email you send us is stored there. Privacy policy

That is the whole list. There are no advertising networks, no social media pixels and no analytics vendors.

Cookies

The app sets one session cookie, marked HttpOnly, Secure and SameSite, so that you stay signed in. The website sets none. There are no advertising, tracking or analytics cookies.

How long we keep it

Everything keyed to your account: until you delete the account. Deletion is immediate and removes your profile, signals, scores, narrative, path, Gary history, lab results, sessions, passkeys and subscription record in one operation, and cancels any Stripe subscription
Audit log: kept after deletion, with the account ID (which no longer points to anyone), the action and the time
Pay submissions: kept, because they were never linked to you
Stripe records: kept by Stripe and us for as long as payment and tax rules require
Email you exchanged with us: kept in our mailbox
Database backups: roll off on the provider's schedule and are never used to restore a deleted account
Rate-limit counters: minutes

Your rights and controls

Most of these are buttons in the app. Anything that is not, you can ask for by email and we answer within 30 days.

Export your signals, scores and narrative from settings
Correct your profile from settings
Delete your account from settings, at once, no questions
Pause signal extraction from Gary, while coaching keeps working
Dispute any signal on your profile
Withdraw analytics consent at any time
Change your screen name once every 90 days, and choose whether your real name is shown

If you live in the European Union, the United Kingdom, California or anywhere else with a data protection law, you have the same rights as everyone else here, because everyone gets all of them. We do not sell personal data and we do not treat anyone differently for exercising a right. Write to privacy@leveld.io.

Security

Passkeys, or passwords with an authenticator code, or one-time email codes
HTTPS everywhere with HSTS; a Content Security Policy on every page
Rate limiting per client, not one shared bucket
One account ID across every table, so deletion cannot miss anything
Logs carry IDs, never email addresses
Append-only signals and an audit log, so nothing changes without a record

No system is perfect. If you find a problem, write to security@leveld.io.

Children

The Service is for people 18 and over. We do not knowingly collect data from anyone younger, and we delete it if we learn we have.

Changes

We email members about material changes before they take effect. The date at the top is the date of the current version. Earlier versions: February 8, 2026 and December 17, 2025.

Contact

Privacy: privacy@leveld.io
Security: security@leveld.io
Anything else: tony@leveld.io