Privacy Policy

Levels Flow is operated by Levels Studio, ABN 78 938 052 697, in Perth, Western Australia. This policy covers visitors, account holders and people whose information is handled through the Service. We decide how account, billing and service-operation information is handled. Studios and other account holders also determine how they use client information they upload; contact the relevant studio about its own use of that information, or contact us for assistance.

We collect information you provide when creating an account, uploading content, paying, contacting us or using the Service. This includes contact and profile details, authentication information, billing records, audio and other files, invoices, receipts, client records and messages. A studio or collaborator may provide information about you when inviting you or managing a project. Stripe handles payment-card information; we receive payment identifiers and status information. Technical information can include account or device identifiers, IP addresses, browser information, page visits, error reports and activity events. This information is not necessarily anonymous. Without information needed for an account or transaction, we may be unable to provide the relevant service.

When you create an account we ask for your date of birth. We use it to confirm that you are old enough to use the Service, and we do not show it to other users.

Account and content data are processed solely to operate the Service for you — store your files, render your invoices, deliver share links to people you authorise, send you transactional email (receipts, failed-payment notices, security alerts). Account holders may also receive optional product emails from us — getting-started tips, feature announcements and a monthly studio summary — each with a one-click unsubscribe link and a preferences page; you can turn them off at any time in Settings Notifications. Usage data is processed to keep the Service running, debug problems, and prevent abuse. We do not use your data for advertising or for training third-party machine-learning models.

We use Supabase for authentication and database services, Vercel for application hosting and Cloudflare R2 for audio and file storage. Our existing infrastructure records identify Japan for the main database and application region and the United States for R2 file storage. Service providers may also process information in other countries through support, delivery and infrastructure operations. We use access controls, encrypted connections and restricted file links to help protect information. No online system can guarantee absolute security.

Providers used to operate Levels Flow include Supabase (authentication and database services), Vercel (hosting and performance monitoring), Cloudflare (file storage and website analytics), Resend (email), Stripe (payments), PostHog (optional product analytics) and Sentry (error and performance monitoring when configured). They receive information relevant to their functions. AI features are disabled in this release.

We use necessary cookies for sign-in, security and preferences. Where PostHog analytics is configured, analytics starts opted out and is enabled when you accept through the cookie banner. Analytics may use cookies and identifiers to measure visits and feature use. Separately, Cloudflare Web Analytics counts visits and measures page speed without cookies or stored identifiers, so it runs whatever you choose in the cookie banner. To make a new cookie choice, clear this site’s cookies in your browser and revisit the site; this may also sign you out. Error monitoring helps us investigate faults. We do not use your information for third-party advertising. You can also manage cookies through your browser; blocking necessary cookies can affect sign-in and other features.

We do not sell your personal information. Content is shared with people you authorise through projects, invitations, share links, invoices and accountant access, and with service providers as described above. Recipients may retain copies they download. Take care when sharing links or granting access. We may also disclose information where required by law or where reasonably necessary to address fraud, security incidents or legal claims. Where lawful and appropriate, we will notify you about a legal request affecting your information.

You can edit profile details in Settings, request deletion through the account settings, or contact admin@levelsflow.com for access, correction or deletion assistance. The account data export provides a machine-readable export of supported records; audio and other files are not bundled into that export. Large exports may be limited; contact us if an export is incomplete. Account deletion removes access and starts removal of associated records and files, subject to retention needs described below. It does not necessarily delete copies retained independently by a studio, collaborator or recipient. We may verify your identity before fulfilling a request. Additional rights may apply depending on your location and the law applicable to the processing, including rights to object, restrict processing or complain to a regulator.

We retain information while it is needed to provide the Service and for relevant billing, security, dispute and legal purposes. Account deletion initiates removal of associated active records and files. Some file deletions are processed through background jobs and retries rather than completing immediately. Limited deletion-audit records, payment records and backups may remain after an account is closed. Retention depends on the record type, applicable obligations and provider backup schedules. Contact us for information about the retention of a particular record.

Levels Flow is not for children under 13. We ask everyone for their date of birth when they create an account, we do not allow anyone under 13 to use one, and we do not knowingly collect personal information from children under 13. If we learn that we hold such information, we will take steps to delete it. If you believe a child under 13 has created an account, email admin@levelsflow.com.

If you are 13 or older but under the age of majority where you live, a parent or guardian must agree to our Terms of Service for you. Where the law that applies to you sets a higher age for consenting to the use of your personal information (in the European Union, between 13 and 16 depending on the country), your parent or guardian must give that consent for you, including for optional analytics cookies.

Material changes will be communicated by email or in-app notice at least 14 days before they take effect. The “last updated” date at the top of this page reflects the current version.

For a privacy request or complaint, email admin@levelsflow.com with details of your concern and how we can contact you. We will review the concern, seek any information needed to investigate, and communicate the outcome and any proposed action. If unresolved, you may contact the Office of the Australian Information Commissioner where it has jurisdiction, or the relevant privacy regulator in your location.