Privacy Policy

Last updated June 26, 2018

LevelStory.com websites (collectively “LevelStory.com” in this document) refer to sites, applications, and services hosted on LevelStory.com and subdomains thereof. This privacy policy describes how LevelStory.com uses and protects any information that you give us, including information that may be used to identify you as an individual (“personal data”). We are committed to ensuring that your privacy is protected. LevelStory will never use your personal data for advertising purposes or sell your personal data to third parties. If you provide us with personal data through LevelStory.com, you can be assured that it will only be used in accordance with this privacy statement.

Not for Children. None of our websites, applications or services are intended for children. Please do not submit information about yourself using our websites if you are under 16. If you are the parent or guardian of a child under 16 who may have submitted information to us please contact us at privacy@levelstory.com.

Please contact us at privacy@levelstory.com (i) you wish to find out more about our use and disclosure of your personal data and how to limit it, (ii) you wish to exercise your right to access, amend, or delete any personal data we hold about you; or (iii) you have any other questions or concerns about this Privacy Policy.

Website Visitors

Like most website operators, LevelStory.com collects information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. LevelStory.com’s purpose in collecting this information is to better understand how LevelStory.com’s visitors use its website. From time to time, LevelStory.com may release this information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

LevelStory.com also collects personal data like Internet Protocol (IP) addresses. LevelStory.com does not use IP addresses to identify its visitors, however, and does not disclose such information, other than under the same circumstances that it uses and discloses personal data, as described below.

Gathering of Personal Data

Certain visitors to LevelStory.com choose to interact with LevelStory.com in ways that require LevelStory.com to gather personal data. The amount and type of personal data that LevelStory.com gathers depends on the nature of the interaction. For example, we ask visitors who sign up for an account for their name and email address. In each case, LevelStory.com collects such personal data only insofar as is necessary or appropriate to fulfill the purpose of the visitor’s interaction with LevelStory.com.

This includes:

LevelStory.com does not disclose personal data other than as described below. And visitors can always refuse to supply personal data, with the caveat that it may prevent them from engaging in certain website-related activities, like creating a new account or joining an existing team.

All of the personal data that is collected on LevelStory.com will be handled in accordance with GDPR legislation.

Indirect Personal Data Collection

The following information is collected when you enter information into LevelStory about your clients, vendors, subcontractors, and employees.

None of the above information is shared with third parties in any manner. When you enter information about your clients, vendors, subcontractors, and employees, LevelStory only acts as a processor of the information and you remain the controller of the information.

Protection of Personal Data

LevelStory.com discloses personal data only to those employees and affiliated organizations that (i) need to know that personal data in order to process it on LevelStory.com’s behalf or to provide services available through LevelStory.com, and (ii) that have agreed not to disclose it to others.

LevelStory.com is located in the United States. LevelStory.com receives and processes all data, including personal data, in the United States.

All personal data is received via a channel secured with SSL encryption. Once the personal data is received it is stored in a password protected database located on a server in a physically secured data center. Currently no information, other than passwords, are hashed and/or encrypted within the database.

Backups of the database are encrypted and stored in a private S3 bucket on AWS. Backups are currently stored for 90 days before being deleted.

Logs may contain your email address and IP address to aid in software debugging. Logs are sent to Data Dog for processing and are retained for 90 days before being deleted.

LevelStory.com will not rent or sell personal data to anyone. Other than to employees and affiliated organizations, as described above, LevelStory.com discloses personal data only when required to do so by law, if you give permission to have your personal data shared, or when LevelStory.com believes in good faith that disclosure is reasonably necessary to protect the property or rights of LevelStory.com, third parties, or the public at large.

If you are a registered user of a LevelStory.com website and have supplied your email address, LevelStory.com may occasionally send you an email to tell you about new features, solicit your feedback, or just keep you up to date with what’s going on with LevelStory.com and our products. We primarily use our website to communicate this type of information, so we expect to keep this type of email to a minimum. If you wish to stop receiving these communications, please click the unsubscribe button on the bottom of the email or email us at privacy@levelstory.com.

If you send us a request (for example via a support email or via one of our feedback mechanisms), upon your consent we may publish it in order to help us clarify or respond to your request or to help us support other users. LevelStory.com takes all measures reasonably necessary to protect against the unauthorized access, use, alteration, or destruction of personal data.

Use of personal data

We use the personal data you provide to register for an account, receive newsletters, or use certain other services.

We will not sell or release your personal data to third parties unless we are required by law to do so.

We may send you email marketing communications about our products and services which may be of interest to you from time to time. You may opt out at any time. If you no longer wish to be contacted for marketing purposes, please click on the unsubscribe link at the bottom of the email or email us at privacy@levelstory.com.

Legal grounds for processing personal data

We rely on one or more of the following processing conditions:

Purposes of processing

The personal data concerning the user is collected to allow LevelStory.com to provide its services, as well as for the following purposes: registration, infrastructure monitoring, user feedback, analytics, and backup.

Personal information is collected using the following purposes and using the following services:

Registration and authentication

By registering or authenticating and giving their consent, users allow LevelStory.com to identify them and give them access to dedicated services.

Direct registration

The user registers by filling out the registration form and providing the personal data directly to LevelStory.com.

Personal Data collected through registration: address, company name, email address, first name, last name, password, phone number and profile picture.

Analytics

The services contained in this section enable LevelStory.com to monitor and analyze web traffic of visitors and registered users and can be used to keep track of registered user behavior in LevelStory.com applications. See our cookie policy for more information.

Google Analytics (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google utilizes the data collected to track and examine the use of LevelStory.com, to prepare reports on its activities and share them with other Google services. Google may use the data collected to contextualize and personalize the ads of its own advertising network. LevelStory.com uses the IP anonymization function to anonymize any IP addresses collected and only uses Google Analytics to receive data on site statistics and use.

Personal Data collected: Cookies and usage data.

Place of processing: United States – Privacy PolicyOpt Out. Privacy Shield participant.

Heap (Heap Inc.)

Heap Analytics is a web analysis service provided by Heap Inc. (Heap). Heap utilizes the data collected to track and examine the use of LevelStory.com.

Personal Data collected: Cookies, IP address, usage data.

Place of processing: United States – Privacy Policy

User feedback

The services contained in this section enable users to provide direct feedback to LevelStory.com and allow LevelStory.com to respond to that feedback in a timely manner.

Intercom (Intercom, Inc.)

Intercom is a user database management service provided by Intercom Inc. Intercom is used only as a medium for communications, either through email, or through messages within LevelStory.com.

Personal Data collected: Cookies, email address, full name, company, IP address

Place of processing: United States – Privacy Policy.

Infrastructure monitoring

This type of service allows LevelStory.com to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved. Which types of personal data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of LevelStory.com.

Sentry

Sentry is real-time error tracking and monitoring service provided by GetSentry, LLC.

Personal Data collected: full name, email address, IP address

Place of processing: United States – Privacy Policy.

Datadog

Datadog is infrastructure monitoring and log aggregation service provided by Datadog, Inc.

Personal Data collected: email address, IP address

Place of processing: United States – Privacy Policy.

Pingdom (Pingdom AB)

Pingdom is a monitoring service provided by Pingdom AB.

Personal Data collected: Cookies and Usage Data.

Place of processing: Sweden – Privacy Policy.

Data storage and backup

This type of service allows LevelStory.com to save personal data and manage backups of LevelStory.com on external servers managed by the service provider itself. The backups may include the source code and content as well as the data that the user provides to LevelStory.com.

Amazon S3

Amazon S3 is a service to save and manage file data provided by Amazon Web Services Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: US – Privacy Policy.

Access to data

You have the right to request a copy of the personal data we hold about you. If you would like a copy of some or all your personal data, please follow the instructions at the end of this policy. LevelStory.com user accounts can be edited by following these steps:

  1. Visit https://app.levelstory.com, and then enter your email and password.
  2. You will be redirected to https://app.levelstory.com/todo.
  3. Click your user icon in the upper right hand corner and select the “Settings” menu item.

Retention of personal data

We will retain your personal data on our systems only for as long as we need to, for the programs that support LevelStory.com. We keep contact information (such as mailing list information) until a user unsubscribes or requests that we delete that personal data from our live systems. If you choose to unsubscribe from a mailing list, we may keep certain limited personal data so that we may honor your request.

Unless required by law, LevelStory.com will not delete personal data from logs or records necessary to the operation, development, or archives of LevelStory.com .

When deletion is requested or otherwise required, we will anonymize the personal data of data subjects and/or remove their information from publicly accessible sites if the deletion of data would break essential systems or damage the logs or records necessary to the operation, development, or archival records of LevelStory.com.

Rights in relation to your personal data

You may have certain rights under data protection law in relation to the personal data we hold about you. In particular, you may have a right to:

If you would like to exercise these rights or understand if these rights apply to you, please follow the instructions at the end of this Privacy statement.

Third Party Links

Our website may contain links to other websites provided by third parties not under our control. When following a link and providing information to a third-party website, please be aware that we are not responsible for the personal data provided to that third party. This privacy policy only applies to the websites listed at the beginning of this document, so when you visit other websites, even when you click on a link posted on LevelStory.com, you should read their own privacy policies.

Aggregated Statistics

LevelStory.com may collect statistics about the behavior of visitors to its websites. For instance, LevelStory.com may reveal how many times a particular version of LevelStory was accessed or report on which tags are the most popular, based on data gathered by app.levelstory.com/api, a web service used by LevelStory.com during normal operation. However, LevelStory.com does not disclose personal data other than as described in this policy.

Cookies

Additionally, personal data about how you use our website is collected automatically using “cookies”. Cookies are text files placed on your computer to collect standard internet log information and visitor behaviour information. This information is used to track visitor use of the website and to compile statistical reports on website activity.

Please see our cookie policy for more information about what cookies are collected on LevelStory.com.

Privacy Policy Changes

Although most changes are likely to be minor, LevelStory.com may change its Privacy Policy from time to time, and at LevelStory.com’s sole discretion. LevelStory.com will send an email to notify all users with active LevelStory.com accounts when its Privacy Policy is updated. You must consent to any changes in this Privacy Policy in order to continue your use of this site.

Contact

Please contact us if you have any questions about our privacy policy or personal data we hold about you by emailing privacy@levelstory.com.