Privacy Policy

Last updated: July 1, 2026

1. Introduction

Level Business Corp (“Level.ai,” “we,” “us,” or “our”) builds AI agents and AI-assisted workflow automation for businesses. We respect your privacy and are committed to being clear about the information we collect, how we use it, and the choices you have.

This Privacy Policy explains our practices for our websites, applications, APIs, and related services (together, the “Services”). By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

2. Scope of This Privacy Policy

This policy applies to information we collect through the Services, including from:

  • Website visitors who browse our marketing site;
  • Account users who sign up for and use the Services on behalf of a business (“Customer”); and
  • Business data that a Customer submits to or connects with the Services.

Our role. For most business data that a Customer submits or connects (for example, files, records, communications, and integration data), Level.ai acts as a service provider / processor that handles the data on the Customer’s behalf and under the Customer’s instructions. The Customer is responsible, as the controller / business, for that data and for its own privacy notices to the individuals it relates to. For our own website, marketing, and account administration, Level.ai acts as the controller / business.

This policy does not cover third-party websites, products, or services that we do not control, including services you connect through integrations.

3. Information We Collect

a. Account information. Name, business name, work email, username, password (stored in hashed form), role, and preferences you provide when you create or manage an account.

b. Business / customer information. Information about your organization and its users, such as team member names and contact details, billing contacts, and configuration settings.

c. Content you provide. Files, documents, business records, prompts, instructions, messages, and other materials you upload to or create in the Services (“Customer Content”).

d. AI interaction data. Inputs you submit to our AI agents, the outputs they generate, and related metadata such as timestamps, actions taken, and interaction logs. Depending on your configuration and the agents you use, this may include call recordings, transcripts, emails, chats, and form submissions.

e. Integration data. When you connect a third-party account (for example, email, calendar, accounting, payments, CRM, or phone/voice systems), we access and process the data you authorize us to access in order to perform the tasks you request.

f. Payment information. If you purchase a paid plan, our payment processor collects and processes your payment details. We do not store full payment card numbers. We receive limited billing information such as plan, amount, and payment status.

g. Usage, log, and device data. IP address, browser and device type, operating system, referring pages, pages viewed, features used, and diagnostic and performance data.

h. Cookies and analytics data. Information collected through cookies and similar technologies, as described in Section 8.

We do not intend for the Services to be used to store special-category or highly sensitive personal information. You are responsible for what you upload or connect.

4. How We Use Information

We use information to:

  • Provide, operate, maintain, and secure the Services;
  • Create and manage accounts and authenticate users;
  • Perform the tasks, workflows, and automations you request;
  • Process payments and manage billing;
  • Provide customer support and respond to requests;
  • Monitor, troubleshoot, and improve performance and reliability;
  • Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our terms;
  • Communicate with you about the Services, including service and administrative messages;
  • Send marketing communications where permitted (you can opt out); and
  • Comply with legal obligations and enforce our agreements.

We rely on legal bases including performance of a contract, our legitimate business interests, your consent (where required), and compliance with law.

Communications and SMS. We may contact you by email and, where you provide a number and consent, by phone or text message for service notifications, onboarding, support, or (where permitted) marketing. Message and data rates may apply, message frequency varies, and you can opt out of marketing texts at any time by replying STOP or of marketing emails using the unsubscribe link. Certain agents you configure may also send communications on your behalf; you are responsible for having the consents required for those communications.

5. How We Use AI-Related Data

Because we provide AI agents, how we handle AI-related data matters. Our current practices are:

  • We use Customer Content and AI interaction data to provide and operate the Services for you — for example, to run the agent, complete the task, and maintain your workspace.
  • We do not use Customer Content to train our general or foundation AI models unless you have separately opted in or agreed to it in writing.
  • We may use aggregated and de-identified information (which does not identify you or any individual) to understand usage, measure performance, improve features, and develop the Services.
  • Third-party AI model providers may process your inputs and outputs to generate responses. We work to use providers that do not train their models on business/API data by default, but their handling is governed by their own terms. See Section 7.
  • Human review is limited. Authorized personnel and vetted contractors may access Customer Content and AI interaction data only for specific purposes such as providing support you request, troubleshooting, investigating abuse or security issues, maintaining quality and safety, and complying with law.
  • Opt-out. Where we offer optional model-improvement or analytics uses, you may opt out through your account settings or by contacting us at privacy@level.ai.

The Services are designed to assist your workflows. Our AI produces outputs that may be inaccurate or incomplete, and you are responsible for reviewing outputs before relying on or acting on them. See the AI Outputs and Human Review section of our Terms.

6. How We Share Information

We share information only as described here:

  • With service providers and subprocessors who help us operate the Services (for example, cloud hosting, AI model providers, analytics, payment processing, communications, and support tools), under contracts that limit their use of the information.
  • At your direction, including through the integrations you connect and the tasks you ask our agents to perform.
  • Within your organization, with other authorized users of your workspace and your administrators.
  • For legal reasons, if required by law or legal process, or to protect the rights, safety, and property of Level.ai, our customers, or others.
  • In a business transaction, such as a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
  • With your consent, for any other purpose we describe at the time.

We do not sell personal information for money, and we do not use advertising or retargeting cookies. Some privacy laws define “sale” or “sharing” broadly; see Section 12.

7. Third-Party Services and Integrations

The Services rely on third parties, which may include cloud infrastructure and hosting providers; AI model providers that process inputs and generate outputs; analytics providers; payment processors; and communication providers (for example, email, SMS, or telephony/voice) used by certain agents.

When you connect an integration (for example, email, calendar, accounting, CRM, payments, or phone systems), you authorize us to access and process the data needed to perform your requested tasks. Your use of third-party services is governed by those third parties’ terms and privacy policies, which we do not control. You are responsible for having the rights and permissions needed to connect those accounts and process that data.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the site, remember your preferences, keep you signed in, measure usage, and improve the Services. We use strictly necessary cookies (required for the site and app to function), preference cookies, and analytics/performance cookies. We do not use advertising or retargeting cookies. You can control cookies through your browser settings, and where required we provide a consent mechanism. We honor recognized opt-out preference signals (such as Global Privacy Control) where legally required.

9. Data Retention

We retain information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements.

  • Account information is retained for the life of the account.
  • Customer Content and AI interaction data are retained while your account is active and for 30 days after termination, after which they are deleted or de-identified according to our retention schedule.
  • Logs and diagnostic data are retained for a limited period for security and operational purposes.

Backups and archived copies may persist for a limited additional period before they are overwritten or deleted in the ordinary course. We do not delete data instantly.

10. Data Security

We use administrative, technical, and organizational measures designed to protect information, which may include encryption in transit, access controls, authentication, logging, and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your account credentials and for controlling who has access to your workspace.

11. Customer Controls and Data Requests

You can access and update much of your account information directly in the Services. Depending on your plan and configuration, you can also export or delete Customer Content.

To request access, correction, export, or deletion of information, or to ask a privacy question, contact us at privacy@level.ai or through https://level.ai/contact.

How we handle requests. We may need to verify your identity before acting on a request, and may ask for information reasonably necessary to confirm it. We will respond within the timeframe required by applicable law (generally within 45 days, with an extension where permitted, in which case we will let you know). Where Level.ai acts as a service provider/processor for a Customer, we will refer individual requests to the relevant Customer and assist that Customer in responding.

Appeals. If we decline to act on your request, we will explain why. You may appeal that decision by emailing privacy@level.ai with the subject line “Privacy Appeal.” We will respond to your appeal within the period required by law and inform you of the outcome and our reasons. If your appeal is denied, you may be able to contact your state attorney general or applicable regulator.

12. State Privacy Rights

Depending on where you live, U.S. state privacy laws (including in California, and in states such as Colorado, Connecticut, Virginia, and others with comprehensive laws in effect) may give you rights to:

  • Know and access the personal information we hold about you;
  • Correct inaccurate personal information;
  • Delete personal information;
  • Obtain a portable copy of your information;
  • Opt out of the “sale” or “sharing” of personal information and of targeted advertising; and
  • Opt out of certain profiling / automated decision-making that produces legal or similarly significant effects.

We do not discriminate against you for exercising these rights. California residents may also request information about disclosures of personal information. To exercise any right, contact us at privacy@level.ai or through https://level.ai/. You may use an authorized agent, and you may appeal a decision as described in Section 11.

Automated decision-making. The Services are designed to assist human decision-making and do not make legal or similarly significant decisions about individuals on a solely automated basis. A person at your organization remains responsible for reviewing outputs and making decisions.

13. Location of Processing (United States Only)

The Services are intended for businesses located in the United States, and we process and store information in the United States. We do not target or offer the Services to individuals or businesses in the European Economic Area, the United Kingdom, or other regions outside the United States. If you access the Services from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.

14. Children’s Privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us personal information, contact us at privacy@level.ai and we will take appropriate steps to delete it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required, for example by posting the updated policy with a new “Last updated” date or by other reasonable means. If we ever intend to use previously collected data for a materially new purpose, such as training general AI models, we will obtain any consent required by law before doing so.

16. Contact Us

Questions or requests about this Privacy Policy can be sent to:

Level Business Corp

Email: privacy@level.ai

Contact: https://level.ai