Privacy Policy

Last updated June 26, 2018 websites (collectively “” in this document) refer to sites, applications, and services hosted on and subdomains thereof. This privacy policy describes how uses and protects any information that you give us, including information that may be used to identify you as an individual (“personal data”). We are committed to ensuring that your privacy is protected. LevelStory will never use your personal data for advertising purposes or sell your personal data to third parties. If you provide us with personal data through, you can be assured that it will only be used in accordance with this privacy statement.

Not for Children. None of our websites, applications or services are intended for children. Please do not submit information about yourself using our websites if you are under 16. If you are the parent or guardian of a child under 16 who may have submitted information to us please contact us at

Please contact us at (i) you wish to find out more about our use and disclosure of your personal data and how to limit it, (ii) you wish to exercise your right to access, amend, or delete any personal data we hold about you; or (iii) you have any other questions or concerns about this Privacy Policy.

Website Visitors

Like most website operators, collects information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request.’s purpose in collecting this information is to better understand how’s visitors use its website. From time to time, may release this information in the aggregate, e.g., by publishing a report on trends in the usage of its website. also collects personal data like Internet Protocol (IP) addresses. does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personal data, as described below.

Gathering of Personal Data

Certain visitors to choose to interact with in ways that require to gather personal data. The amount and type of personal data that gathers depends on the nature of the interaction. For example, we ask visitors who sign up for an account for their name and email address. In each case, collects such personal data only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with

This includes: does not disclose personal data other than as described below. And visitors can always refuse to supply personal data, with the caveat that it may prevent them from engaging in certain website-related activities, like creating a new account or joining an existing team.

All of the personal data that is collected on will be handled in accordance with GDPR legislation.

Indirect Personal Data Collection

The following information is collected when you enter information into LevelStory about your clients, vendors, subcontractors, and employees.

None of the above information is shared with third parties in any manner. When you enter information about your clients, vendors, subcontractors, and employees, LevelStory only acts as a processor of the information and you remain the controller of the information.

Protection of Personal Data discloses personal data only to those employees and affiliated organizations that (i) need to know that personal data in order to process it on’s behalf or to provide services available through, and (ii) that have agreed not to disclose it to others. is located in the United States. receives and processes all data, including personal data, in the United States.

All personal data is received via a channel secured with SSL encryption. Once the personal data is received it is stored in a password protected database located on a server in a physically secured data center. Currently no information, other than passwords, are hashed and/or encrypted within the database.

Backups of the database are encrypted and stored in a private S3 bucket on AWS. Backups are currently stored for 90 days before being deleted.

Logs may contain your email address and IP address to aid in software debugging. Logs are sent to Data Dog for processing and are retained for 90 days before being deleted. will not rent or sell personal data to anyone. Other than to employees and affiliated organizations, as described above, discloses personal data only when required to do so by law, if you give permission to have your personal data shared, or when believes in good faith that disclosure is reasonably necessary to protect the property or rights of, third parties, or the public at large.

If you are a registered user of a website and have supplied your email address, may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with and our products. We primarily use our website to communicate this type of information, so we expect to keep this type of email to a minimum. If you wish to stop receiving these communications, please click the unsubscribe button on the bottom of the email or email us at

If you send us a request (for example via a support email or via one of our feedback mechanisms), upon your consent we may publish it in order to help us clarify or respond to your request or to help us support other users. takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of personal data.

Use of personal data

We use the personal data you provide to register for an account, receive newsletters, or use certain other services.

We will not sell or release your personal data to third parties unless we are required by law to do so.

We may send you email marketing communications about our products and services which may be of interest to you from time to time. You may opt out at any time. If you no longer wish to be contacted for marketing purposes, please click on the unsubscribe link at the bottom of the email or email us at

Legal grounds for processing personal data

We rely on one or more of the following processing conditions:

Purposes of processing

The personal data concerning the user is collected to allow to provide its services, as well as for the following purposes: registration, infrastructure monitoring, user feedback, analytics, and backup.

Personal information is collected using the following purposes and using the following services:

Registration and authentication

By registering or authenticating and giving their consent, users allow to identify them and give them access to dedicated services.

Direct registration

The user registers by filling out the registration form and providing the personal data directly to

Personal Data collected through registration: address, company name, email address, first name, last name, password, phone number and profile picture.


The services contained in this section enable to monitor and analyze web traffic of visitors and registered users and can be used to keep track of registered user behavior in applications. See our cookie policy for more information.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the data collected to track and examine the use of, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. uses the IP anonymization function to anonymize any IP addresses collected and only uses Google Analytics to receive data on site statistics and use.

Personal Data collected: Cookies and usage data.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.

Heap (Heap Inc.)

Heap Analytics is a web analysis service provided by Heap Inc. (Heap). Heap utilizes the data collected to track and examine the use of

Personal Data collected: Cookies, IP address, usage data.

Place of processing: United States – Privacy Policy

User feedback

The services contained in this section enable users to provide direct feedback to and allow to respond to that feedback in a timely manner.

Intercom (Intercom, Inc.)

Intercom is a user database management service provided by Intercom Inc. Intercom is used only as a medium for communications, either through email, or through messages within

Personal Data collected: Cookies, email address, full name, company, IP address

Place of processing: United States – Privacy Policy.

Infrastructure monitoring

This type of service allows to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved. Which types of personal data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of


Sentry is real-time error tracking and monitoring service provided by GetSentry, LLC.

Personal Data collected: full name, email address, IP address

Place of processing: United States – Privacy Policy.


Datadog is infrastructure monitoring and log aggregation service provided by Datadog, Inc.

Personal Data collected: email address, IP address

Place of processing: United States – Privacy Policy.

Pingdom (Pingdom AB)

Pingdom is a monitoring service provided by Pingdom AB.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

Data storage and backup

This type of service allows to save personal data and manage backups of on external servers managed by the service provider itself. The backups may include the source code and content as well as the data that the user provides to

Amazon S3

Amazon S3 is a service to save and manage file data provided by Amazon Web Services Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: US – Privacy Policy.

Access to data

You have the right to request a copy of the personal data we hold about you. If you would like a copy of some or all your personal data, please follow the instructions at the end of this policy. user accounts can be edited by following these steps:

  1. Visit, and then enter your email and password.
  2. You will be redirected to
  3. Click your user icon in the upper right hand corner and select the “Settings” menu item.

Retention of personal data

We will retain your personal data on our systems only for as long as we need to, for the programs that support We keep contact information (such as mailing list information) until a user unsubscribes or requests that we delete that personal data from our live systems. If you choose to unsubscribe from a mailing list, we may keep certain limited personal data so that we may honor your request.

Unless required by law, will not delete personal data from logs or records necessary to the operation, development, or archives of .

When deletion is requested or otherwise required, we will anonymize the personal data of data subjects and/or remove their information from publicly accessible sites if the deletion of data would break essential systems or damage the logs or records necessary to the operation, development, or archival records of

Rights in relation to your personal data

You may have certain rights under data protection law in relation to the personal data we hold about you. In particular, you may have a right to:

If you would like to exercise these rights or understand if these rights apply to you, please follow the instructions at the end of this Privacy statement.

Third Party Links

Our website may contain links to other websites provided by third parties not under our control. When following a link and providing information to a third-party website, please be aware that we are not responsible for the personal data provided to that third party. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on, you should read their own privacy policies.

Aggregated Statistics may collect statistics about the behavior of visitors to its websites. For instance, may reveal how many times a particular version of LevelStory was accessed or report on which tags are the most popular, based on data gathered by, a web service used by during normal operation. However, does not disclose personal data other than as described in this policy.


Additionally, personal data about how you use our website is collected automatically using “cookies”. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

Please see our cookie policy for more information about what cookies are collected on

Privacy Policy Changes

Although most changes are likely to be minor, may change its Privacy Policy from time to time, and at’s sole discretion. will send an email to notify all users with active accounts when its Privacy Policy is updated. You must consent to any changes in this Privacy Policy in order to continue your use of this site.


Please contact us if you have any questions about our privacy policy or personal data we hold about you by emailing