1. Who is responsible
Levelry is operated by Ihar Kutuzau, an independent developer ("Levelry", "we", or "us"). This policy covers levelry.app, the application at go.levelry.app, and Levelry's MCP and ChatGPT integrations. Contact hello@levelry.app about this policy or your personal data.
2. Data we process
- Account information: your email address, account identifier, and authentication and session information needed to sign you in.
- Content you provide: projects, canvas objects, documents, layers, connections, uploaded media, project membership and sharing settings, and content submitted to AI features.
- Connection information: authorization grants, scopes, tokens, selected project identifiers, and session information used by connected clients such as ChatGPT.
- Technical information: service requests, errors, timestamps, IP addresses and browser or device information that may be processed by our hosting services or analytics tools.
- Support correspondence: information you send when contacting us.
3. Why we use data
We use this data to operate your account, store and synchronize your work, enforce project permissions, provide requested AI and integration features, troubleshoot problems, protect the service, and respond to support and privacy requests. Website analytics help us understand visits and use of the service.
Where applicable data protection law requires a legal basis, we rely on providing the service you request, legitimate interests in security and service maintenance, consent where required, and compliance with legal obligations.
4. ChatGPT and other AI tools
When you connect Levelry to ChatGPT or another MCP client, that client can request data and actions within the permissions you authorize. Tool responses may include project names, object identifiers, documents, and other requested canvas content. Write access permits changes to your saved work, subject to project permissions.
The canvas embedded in ChatGPT communicates with Levelry to load and save the selected project. Levelry's built-in AI features may send your prompts, relevant canvas content, and conversation context to the configured AI provider to generate responses or carry out requested actions.
Information sent to ChatGPT is also handled under OpenAI's privacy policy and your OpenAI account settings. Other connected clients have their own policies. Review these before connecting, and avoid sending content you do not want those services to process. Disconnecting a client does not erase information it has already received.
5. Service providers and sharing
We use service providers to operate Levelry, including Supabase for authentication and data services, DigitalOcean for server hosting, Google Analytics for usage measurement where enabled, and AI providers such as OpenAI for AI features. These providers process information needed for the functions they provide.
People you invite or give access to a project can access content according to its sharing settings. Connected clients receive data when you authorize and use them. We may also disclose information when legally required or necessary to investigate abuse or protect the service and its users.
Providers may process data in countries other than your own. Where required by applicable law, international transfers must use the relevant safeguards.
6. Cookies and browser storage
Levelry uses browser storage for sign-in sessions, preferences such as the color theme, and application state. Google Analytics, where enabled, may use cookies and related identifiers to measure page visits and interactions. You can manage cookies and site storage in your browser; clearing session storage may sign you out. These policy and support pages do not load Google Analytics.
7. Retention and deletion
Saved account and project data is retained while it is needed to provide the service. You can delete content using the available application controls or request account and data deletion by email. Disconnecting ChatGPT alone does not delete saved Levelry content.
Deleted information may remain temporarily in backups, recovery storage, or operational logs. Information needed for security, legal obligations, or resolving disputes may be retained where necessary. Shared content and copies already received by other users or connected services may remain with those recipients.
8. Your choices and rights
You can manage project sharing and disconnect integrations. Depending on your location, you may have rights to access, correct, delete, restrict, object to processing, or receive a copy of your personal data, and to withdraw consent where processing relies on it. Send requests to hello@levelry.app. We may verify your identity and will respond as required by applicable law. You may also complain to your local data protection authority.
9. Security
Levelry uses authenticated access and project permission checks to restrict access to saved content. No online service can guarantee absolute security. Keep your account credentials and connection tokens private, and report suspected unauthorized access through support.
10. Changes to this policy
We may update this policy as Levelry changes. The date above identifies the current version. Where required, we will provide notice of material changes or request consent.