Privacy Policy

1. Introduction

Levely Inc. ("we," "us," or "our") operates the Levely platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using Levely, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through Stripe (we do not store credit card numbers directly).

Content & Data You Provide

This includes funnel content, product information, business details, brand assets, email templates, automation rules, and any other content you create within the platform.

Contact Data (Your Leads)

When your contacts submit forms, complete quizzes, or make purchases on your funnels, we store their information (name, email, phone, custom fields, quiz responses, purchase history) on your behalf. You are the data controller for your contacts' data; we act as a data processor.

Usage & Analytics Data

We collect page views, funnel analytics, attribution data (UTM parameters, referral sources), email engagement metrics (opens, clicks, bounces), and general usage patterns to improve the Service.

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (account verification, password resets, billing receipts)
• Send email and SMS communications on your behalf to your contacts
• Generate AI-powered content (funnel pages, emails, ad copy) using the business context you provide
• Track email delivery, opens, clicks, bounces, and complaints for your analytics
• Monitor and enforce acceptable use policies (spam prevention, bounce/complaint rate monitoring)
• Provide customer support

4. Third-Party Services

We use the following third-party services to operate the platform:

• Supabase — Database, authentication, and file storage
• Stripe — Payment processing for subscriptions and connected account transactions
• Amazon SES — Email delivery on your behalf
• Twilio — SMS delivery on your behalf
• Vercel — Application hosting
• Google (Gemini), Anthropic (Claude), OpenAI — AI content generation (your business context is sent to these providers to generate content; no contact personal data is sent to AI providers)

Each provider processes data according to their own privacy policies. We only share the minimum data necessary for each service to function.

5. Email & SMS Communications

When you send emails or SMS messages through Levely to your contacts:

• Messages are sent from your verified sending domain (email) or assigned phone number (SMS)
• We track delivery, opens, clicks, bounces, and complaints for your analytics dashboard
• Recipients can unsubscribe via the mandatory unsubscribe link in every email
• We automatically suppress sending to addresses that have permanently bounced or filed spam complaints
• You are responsible for ensuring you have proper consent from your contacts before sending

6. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records). Your contacts' data is deleted when you delete the associated funnel or account.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-level security (RLS) policies ensuring workspace-level data isolation
• Authentication via Supabase Auth with JWT-based sessions
• DKIM email authentication for all sending domains
• No storage of raw credit card numbers (handled by Stripe)

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@levely.ai.

9. Cookies

We use essential cookies for authentication and session management. We use a workspace selection cookie to maintain your active workspace. We do not use third-party advertising cookies. Attribution tracking on your published funnels uses first-party data collection (UTM parameters, referral sources) stored in our database, not third-party cookies.

10. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notification. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For privacy-related questions or requests, contact us at:

Levely Inc.
Email: privacy@levely.ai