Privacy Policy

This policy explains how LEVAL Operations LLC handles information in LEVAL OS, the software service used by subscribing businesses ("Organizations") to run their operations.

When an Organization enters information about its own customers and employees, the Organization decides what to collect and why; LEVAL processes that information on the Organization's behalf to provide the service. If you are a customer or employee of a business that uses LEVAL OS, contact that business first about its records.

Account information. Name, email address, password credentials handled by our authentication provider, role within an Organization, invitation status and sign-in activity.

Organization information. Business and legal name, address, phone, email, website, license and tax identifiers, service areas, branding and logo, business hours, and operating settings.

Customer information entered by Organizations. Names, phone numbers, email addresses, service and billing addresses, property type, notes, and service history.

Employee and technician information. Names, contact details, role, employment status, hire date, assignments, time entries, and field reports.

Operational records. Jobs, visits, appointments, equipment, checklists, estimates, invoices, payment records, financing requests and status, documents, photos and technician reports.

Payment-related information. Amounts, method, status, receipt numbers, and processor references. Card numbers are entered directly with our payment processor; LEVAL does not store full card numbers.

Event-based location information. When a technician's device allows it, coordinates, accuracy and a timestamp captured at specific work events — starting the workday, arriving at a job, completing a job or visit, ending the workday — along with the related Organization, user, job and visit. If permission is denied or the location is unavailable, we record that status instead of coordinates. We do not track devices continuously or between events.

Device and log information. IP address, browser and device details, and request and error logs generated when the service is used, used for security, troubleshooting and abuse prevention.

Website request submissions. Where an Organization connects its own website request form, the fields that form submits (such as name, phone, email, service address, property type, description and preferred window) are delivered into that Organization's workspace.

Communications. Messages you send us for support, and records of notifications and documents sent from the service.

• Provide, operate and maintain LEVAL OS for each Organization.
• Authenticate users and keep each Organization's data separated from every other Organization's data.
• Process subscription payments and keep accurate billing and consent records.
• Enable the features an Organization turns on, such as customer payments and financing workflows.
• Send service and account notifications.
• Provide support, investigate problems and improve reliability and security.
• Detect, prevent and respond to fraud, abuse and security incidents.
• Meet legal, accounting and record-keeping obligations.

We do not sell personal information, and we do not use Organization customer data to advertise to their customers.

We use strictly necessary browser storage and cookies to keep you signed in, remember your active workspace, and operate the checkout provided by our payment processor. We do not currently run advertising or cross-site tracking cookies on LEVAL OS.

Providing LEVAL OS requires third-party processors. We share only what is needed for them to perform their function:

• Cloud hosting, database, file storage and authentication infrastructure.
• Payment processing for LEVAL subscriptions and for customer payments an Organization collects.
• Email delivery for account, invitation and notification messages.
• Map display when an authorized user opens a captured location; the coordinates being viewed are sent to the map provider to render the view.
• Optional integrations an Organization enables, such as customer financing providers or accounting tools.

We may also disclose information when required by law or valid legal process, to protect rights, safety or the integrity of the service, or in connection with a business transfer, in which case this policy continues to apply to the transferred information.

Each Organization's records are separated at the database level with per-Organization access rules, not only by what the interface displays. A user can only reach data belonging to an Organization they are a member of. Website request submissions are routed by a server-side credential that determines the receiving Organization.

LEVAL platform staff may open a recorded, read-only support view of an Organization's workspace to investigate a problem. Those sessions are logged with the staff member, Organization and time.

We use encryption in transit, managed authentication, per-Organization access rules, private file storage, scoped credentials for website request forms and audit logging of sensitive actions. No service can promise perfect security. We cannot guarantee that information will never be accessed improperly, and you are responsible for protecting your own login credentials.

Operational records are retained while your Organization's subscription is active so your business keeps its history. After cancellation, data is retained for a limited period to allow resubscription or export, then deleted or anonymized in the ordinary course, except where we must keep records for legal, accounting or dispute-resolution purposes. Deactivating a user removes their access but keeps the historical records they created, so job, estimate and invoice history stays accurate.

Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information, to object to certain processing, or to receive a copy of your information. Email levaloperations@gmail.com and we will respond as required by applicable law. If the request concerns data an Organization entered about you, we will forward it to that Organization, which decides the outcome as the controller of those records.

Location is captured only at the work events listed above, only when the device grants permission, and is visible to the Organization's owner and authorized office users. Technicians do not receive company-wide access to other employees' location history, and an Organization's service customers do not see internal employee location records. The Organization is responsible for the notices and permissions its workforce is entitled to receive.

LEVAL OS is a business tool and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child's information has been provided to us, contact us and we will delete it.

LEVAL OS is operated from the United States and information is processed there. If you use the service from another country, you understand information will be transferred to and processed in the United States.

We may update this policy. The current version and effective date appear at the top of this page, and we will provide notice of material changes. Our Terms of Service explain the rest of the subscription relationship.

LEVAL Operations LLC · levaloperations@gmail.com