Privacy
Policy

At levelpartner.ai, we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our automation template marketplace platform.

We comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws. By using our Platform, you consent to the data practices described in this policy.

Account Information

When you create an account through Replit Auth, we collect:

• Email address and profile information from your Replit account
• User ID and authentication tokens
• Profile picture and display name (if provided)

Creator Verification Data

For creators, we collect additional verification information:

• Government-issued identification documents
• Proof of residence (utility bills, bank statements)
• Tax identification numbers
• Portfolio samples and client references
• Banking information for payment processing

Transaction Data

• Purchase history and payment information (processed by Stripe)
• Template downloads and usage analytics
• Communication records with creators
• Support ticket history

Technical Information

• IP address and geolocation data
• Browser type, device information, and operating system
• Pages visited and time spent on platform
• Cookies and similar tracking technologies

Platform Operations

• Authenticating users and maintaining account security
• Processing payments and managing transactions
• Facilitating communication between buyers and creators
• Providing customer support and resolving disputes

Creator Verification

• Verifying identity and professional qualifications
• Conducting background checks and reference verification
• Ensuring compliance with tax and regulatory requirements
• Monitoring service quality and response times

Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and functionality
• Monitoring platform security and preventing fraud
• Generating anonymous usage statistics and reports

Legal Compliance

• Meeting tax reporting and record-keeping obligations
• Responding to legal requests and court orders
• Preventing money laundering and fraud
• Enforcing our Terms of Service

With Creators and Buyers

• Basic profile information for marketplace interactions
• Contact information for purchased services
• Communication history related to specific transactions
• Rating and review information (when applicable)

With Service Providers

• Stripe for payment processing (governed by Stripe's privacy policy)
• Replit for authentication services
• Neon Database for secure data storage
• Email service providers for communications

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Investigate potential fraud or security breaches
• Protect the rights and safety of our users
• Enforce our Terms of Service

We Do NOT Sell Personal Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Technical Safeguards

• End-to-end encryption for all data transmission
• Secure database storage with access controls
• Regular security audits and vulnerability assessments
• Multi-factor authentication for admin access

Operational Security

• Employee background checks and confidentiality agreements
• Principle of least privilege for data access
• Regular backup and disaster recovery procedures
• Incident response and breach notification protocols

Payment Security

All payment information is processed by Stripe, a PCI DSS Level 1 certified payment processor. We do not store payment card information on our servers.

Retention Periods

• Account information: Retained while account is active plus 7 years
• Transaction records: 7 years for tax and legal compliance
• Creator verification documents: 5 years after account closure
• Support communications: 3 years from last interaction
• Technical logs: 2 years for security monitoring

Data Deletion

After retention periods expire, data is securely deleted using industry-standard procedures. You may request earlier deletion of certain data types, subject to legal and operational requirements.

Creator Data Obligations

Creators must delete client data within 7 days of project completion, unless contracted for ongoing maintenance services.

GDPR Rights (EU Users)

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

All Users

• Update your account information through your profile settings
• Control communication preferences and notifications
• Request information about data sharing and processing
• File complaints with relevant data protection authorities

Exercising Your Rights

To exercise any of these rights, contact us at support@levelpartner.ai. We will respond within 30 days and may require identity verification.

Types of Cookies We Use

• Essential Cookies: Required for platform functionality and security
• Authentication Cookies: Maintain your login session
• Analytics Cookies: Help us understand platform usage patterns
• Preference Cookies: Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may limit platform functionality.

Third-Party Tracking

We may use analytics services to understand user behavior. These services have their own privacy policies governing data collection and use.

Our platform serves users globally. Data may be transferred to and processed in countries outside your residence, including the United States and European Union.

We ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions from relevant data protection authorities
• Binding corporate rules for service providers
• Explicit consent where required by law

Our Platform is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly.

Parents who believe we have collected information from their child should contact us immediately at support@levelpartner.ai.

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Material changes will be communicated through:

• Email notification to registered users
• Prominent notices on our Platform
• Updated "Last Modified" date at the top of this policy

Continued use of the Platform after changes indicates acceptance of the updated policy.