Privacy and Cookie Policy

Last updated: February 2024

Introduction

Who are we?

We are Levellr Ltd, a company incorporated and registered in England and Wales with address 2, Television Centre Soho Works, Wood Lane, London, England, W12 7FR and company number 12909887. Where we decide the means or purpose of processing your personal data, we are the data "controller."

What’s this policy about?

This policy explains how we process your personal data as a data controller. We update this policy from time to time so please check back in.

The policy applies to your use of our website levellr.com and messaging groups on platforms like Telegram and Discord that you access via that website (together the “Services”).

Please note that other websites/services not mentioned here are not operated by us, and you should refer to the privacy policies on those sites to understand how your data is used.

How do you contact us? (if you have questions about this policy or to exercise your rights)

Write to us: [email protected].

If we can’t resolve your issue, you can also get in touch with the Information Commissioner’s Office in the UK at: https://ico.org.uk/concerns.

(or if you live outside the UK in a European country, you can submit a complaint to the supervisory authority in your country).

What are your rights?

You have the following rights, although these rights may be limited in some circumstances:

  • Ask us to send a copy of data to you or someone else
  • Ask us to restrict, stop processing, or delete your data
  • Object to our processing of your data
  • Object to use of your personal data for direct marketing
  • Ask us to correct inaccuracies

If we rely on consent to process data, or send direct marketing, you can withdraw consent by contacting us via the email address above.


Your personal data and how we use it

1) Enquiry data

This is information we receive when you get in touch with questions or instructions including:

  • Name
  • Contact details
  • Other personal data you send to us as part of enquiries or instructions.

How long we keep it

6 years from when our relationship with you ends.

How we use it

We process this information to respond to your enquiries, for example by email or via our live chat support.

Legal basis

We process this information in accordance with the terms of our contract with you (where we need this information to provide our Services to you) or to take steps at your request prior to entering into a contract.

We also use this to pursue our legitimate interests in responding to enquiries, and in order to understand our customers and improve our Services.

You may be required to provide us with certain information in order for us to respond to your enquiries.

Sources

We collect this information from you.

Recipients

We may share aspects of your queries with Customers (i.e. third-party high-profile individuals or entities who typically host communities using Levellr technology) where necessary for us to action your enquiry.

2) Platform data

This is information we receive when you register for, or use, our web-based platform and the communities to which you are granted access, including:

  • Name
  • User IDs (e.g. your Telegram or Discord user ID)
  • Usernames (e.g. your Telegram or Discord usernames)
  • Your order and transaction history
  • Communications through our Services or the communities to which you are granted access
  • Usage data and telemetry based on your use of our Services or the communities to which you are granted access
  • Your feedback and survey responses

How long we keep it

Up to 6 years from when our relationship with you ends.

How we use it

We share platform data relating to a specific community with the Customer that operates the communiy. The Customer uses this data to operate and manage their community. They can also access this data via the platform hosting the community (such as Discord or Telegram).

Legal basis

We process this information in accordance with the terms of our contract with you in order to enable you to login to and use our web-based platform and access our Services.

We also use this to pursue our legitimate interests in obtaining feedback and survey responses from you to understand market trends, our customers, how they use our Services, and to improve our Services, and to monitor compliance with our terms of service.

You may be required to provide us with certain information in order for us to provide our Services.

Sources

We collect this information from you and from the third-party platforms you use to access messaging groups (e.g. Telegram or Discord).

If someone is purchasing something for you through our platform, for example a subscription as a gift, we may collect this from the purchaser. If you provide any information relating to a third party when using the Service, please ensure that you share a copy of this privacy notice with them and that they are happy for their details to be shared.

Recipients

Where necessary for us to provide our Services we may share certain information (such as details of your orders) with relevant Customers.

Where necessary for us to provide our Services (e.g. where we need to grant you access to a Telegram or Discord community) we may share the access levels to be granted for your username or roles to be granted to your user account with the relevant third party platform.

We may share this data with the Customer who hosts the community using our Services. These organizations may access your data from international locations including the USA.

We may process this information using Render (our cloud provider) or Stripe (our payment processor). These organizations may access your data from international locations including the USA.

For communities created before September 2021, we may process this information using Shopify (our previous e-commerce platform) or InviteMember (our previous Telegram service provider). These organizations may access your data from international locations including the USA.

3) Mailing list opt-ins

This information includes:

  • Name
  • Email address
  • User IDs (e.g. your Telegram or Discord user ID)
  • Usernames (e.g. your Telegram or Discord usernames)
  • Country of residence

How long we keep it

Until you indicate that you no longer wish to receive marketing messages from us or our Customers.

How we use it

Where we have your consent and/or you have opted-in to receive marketing messages from us, we will send you emails and/or direct messages via Telegram or Discord with news about our company and services.

Where we have your explicit consent or you have opted-in to receive marketing messages from one or more of our Customers, we will share this information with those Customers. (Customers are third parties who operate the messaging groups and are, typically, the company who operates the Levellr community to which you have either registered or subscribed.)

Legal Basis

  • Consent; or
  • “Soft opt-in” or B2B: In some instances (such as with existing customers, or if you are a corporate subscriber) the law may permit us to process your personal data to send you marketing by email or Telegram/Discord direct message that we think is of interest on the basis of our legitimate interests, being our legitimate interest to promote our business, or process your personal data to share with third parties “Soft opt-in” or B2B: In some instances (such as with existing customers, or if you are a corporate subscriber) the law may permit us to process your personal data to share with third parties so that they can send you marketing by email or Telegram direct message that they think is of interest on the basis of our legitimate interests, being their legitimate interest to promote their business..

Opting out

If you would like to be removed from marketing lists please let us know by clicking unsubscribe at the bottom of any marketing email you receive.

Sources

We collect this data from you if you decide to sign-up.

Recipients

We use Mailchimp, Postmark, Telegram, and Discord to help manage our email lists and send marketing messages.

Analytics (information about how users interact with our Services which might be associated with a unique identifier)

This information includes:

  • browser type and version, IP address (which is swiftly processed and anonymized), approximate location and time zone, access logs, device type and settings, operating system, and other information provided by browser or device;
  • use you make of our Services, including the content you visit, links you click, terms you search for, websites you have come from, how long you spend on our Service and how you interact with it.

How long we keep it

After 26 months underlying data is deleted, but we may retain some anonymous, aggregated statistics generated from that data.

How we use it

We use third party services like Fathom and Mouseflow to collect anonymous information about visitors to our website and/or users of our platform, to understand how many people visit, where they come from, and how they interact with our Services, and to help us improve and maintain our Services and address bugs. We use Crisp to enable live-chat on our website.

Legal basis

To the extent that our analytics involve storing or accessing information on your device other than as strictly necessary for us to provide our Service to you, we obtain your prior consent.

Otherwise, we process this information, to the extent it is personal data, on the basis of our legitimate interest to understand how you use our Services, and to improve those Services.

More information

You can find out more about how Fathom uses data by clicking here, how Mouseflow uses cookies for analytics by clicking here and how Crisp uses your data by clicking here.

You can opt-out of all analytics by .

Sources

We use Fathom, Mouseflow, and Crisp’s services to collect this data from you when you visit our Services.

Recipients

Fathom in the USA, Mouseflow in the USA and Crisp in the Netherlands, collect and process analytics information on our behalf.


Where explicit retention periods are not described above, we hold data for as long as necessary bearing in mind the purpose for which it was collected. At the end of the retention period, we assess whether it is necessary to continue to retain information to achieve the purposes for which it was collected. To determine appropriate retention periods, we consider the amount, nature, and sensitivity of the data, the potential risk of unauthorised access, and legal requirements.


Cookies, analytics and similar technologies

Cookies, pixels and other technologies store and access data on your device to help websites and apps work. This table explains their purpose, how long they last, and who else can access their data. We get your consent to use them unless they’re essential for our sites, apps or services.

Most browsers allow control over cookies. For more information see:

Cookie/data

We use Crisp live chat, which sets cookies with ID prefix crisp-client that may be stored for up to 12 months.

We use Mouseflow for analytics, which sets cookies with ID mf_user that may be stored for up to 3 months.

We set cookies with IDs levellr-cookie-preferences to keep track of your cookie preferences, which may be stored for up to 6 months.

We set leads cookies with IDs levellr-leads to keep track of your leads subscription status, which may be stored for up to 6 months.

Finally, we use our own cookie with ID jwt to give you access to your dashboard and to keep you logged in.

Purpose

To provide our Services and to collect information about how people interact with our Services & generate reports to help us identify problems, understand how people use our Services, and improve them.

You can find out more about how Mouseflow uses data by clicking here.

You can find out more about how Crisp uses data by clicking here.

Opting out

You can opt-out of all analytics by .


Storage, transfers and disclosure

Storage & Transfers

Save where indicated otherwise, your personal data is securely stored in the EU. Where we use data processors outside the UK and European Economic Area, and transfer personal data to a country which does not provide an adequate level of protection, we use contracts or other safeguards which give personal data the same or equivalent protection it has in Europe or the UK. For more information drop us a line using the contact details at the start of this policy.

Disclosure

We may disclose your personal data:

  • Where required by law, government, competent authorities or the courts or to establish, exercise or defend our legal rights, and for the purposes of preventing crime and fraud (for example, we may share personal data with our professional advisors, investigators, or credit reference agencies).
  • With members of our corporate group, insurers, advisers, suppliers and subcontractors, as necessary for the purposes set out in this policy.
  • With our service providers and subcontractors, provided that they only use that personal data on our instructions and not for their own independent purposes.
  • If involved in an investment, merger, acquisition, or sale of our organisation or assets, personal data we hold may be shared on the basis of the legitimate interests of us, our shareholders, customers and other parties to a transaction, unless those interests are outweighed by prejudicial impacts upon you.
 

Subprocessors

Under the GDPR, a subprocessor is any business or contractor customer data may pass through as a side effect of using Levellr's service. This definition is very broad and includes things some might simply consider "hardware", like cloud infrastructure.

We use partners for some business processes that are not core to our expertise but are critical to our customers having a quality experience. Here is a current list of subprocessors.

MIXPANEL S.L., Avenida Diagonal, 442 - P. 3 PTA. 1 08037, Barcelona, SpainTypeform S.L., Bac de Roda, 163, 08018, Barcelona, Spain
EntityService ProvidedCountryAddress
GoogleEmail, collaboration, office, hosting and platform servicesUSGoogle LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA
MailchimpMarketing emailUSThe Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
PostmarkTransactional emailUSActiveCampaign LLC, 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA
MixpanelUsage analyticsES
TypeformForms and surveysES
FathomAnalyticsCAConva Ventures Inc., BOX 37058 Millstream PO, Victoria, British Columbia, V9B 0E8, Canada
CrispLive chat and analytics for customer supportFRCrisp IM SAS., 2 Boulevard de Launay, 44100 Nantes, France
HubspotCustomer relationship management softwareUSHubspot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA
ElasticService monitoring and error reportingNOElasticsearch AS, Postboks 539, 1373 Asker, Norway
SlackWorkplace communications platformIESlack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland

The following subprocessors are only used for paid communties created before January 2022.

Entity NameService ProvidedCountry
Uploadcare IncContent delivery networkUS
StripePayment processingUS

The following subprocessors are only used for paid communties created before July 2021.

Entity NameService ProvidedCountry
ShopifyPayment processingUS
PaypalPayment processingUS
KlaviyoTransactional emailUS

Data is stored in the following locations:

  • Google Cloud Platform: Frankfurt, Germany