Privacy Policy

1. Introduction

Welcome to Levelop ("we," "our," or "us"). We respect your privacy and are committed to protecting the personal information you share with us. This policy explains how we handle your data when you use our AI-powered interview prep platform at levelop.dev.

2. Information we collect

When you use Levelop, we collect the following categories of information:

• Account data: When you sign up with email or sign in via Google OAuth, we collect your name, email address, and (if using Google) profile picture to create and maintain your account.
• Usage data: We process code snippets, learning queries, system design canvas interactions, and performance metrics (sprint scores, submission results) you generate while using the platform.
• Analytics data: We automatically collect information about how you interact with the platform, including pages visited, features used (coding submissions, knowledge base sessions, system design sessions), session duration, scroll depth, outbound clicks, and file downloads. We also collect device type, browser type, operating system, screen resolution, and approximate geographic location (country / region level, derived from IP address).
• Subscription data: If you subscribe to a paid plan, we record your plan type, subscription status, and payment confirmation details. We do not store full credit card or bank account numbers. Payment processing is handled entirely by our third-party payment providers (see Section 5).

3. How we use your data

We use your information for the following purposes:

• Authentication: To identify you and securely log you in across sessions and devices.
• Service provision: To generate AI coding feedback, track your weekly sprints, record subtask and set progress, and maintain your learning history.
• Analytics and improvement: To understand how users interact with the platform, identify popular features and drop-off points, measure the effectiveness of product changes, and improve the overall user experience. We associate analytics data with a pseudonymous user identifier to track usage patterns across sessions.
• Communication: To send important updates regarding your account, subscription status, or service changes.

4. Cookies and tracking technologies

Levelop uses cookies and similar technologies to operate the platform and collect analytics data:

• Essential cookies: Required for authentication and session management. These cannot be disabled without breaking core functionality.
• Analytics cookies: We use Google Analytics 4 (GA4) to collect usage statistics. GA4 sets cookies such as _ga and _ga_QBGNEK64R4 to distinguish unique users and sessions. These cookies are retained for up to 14 months.

Google Analytics collects data such as pages viewed, time on page, traffic source, device information, and approximate location. We have configured GA4 to associate analytics sessions with a pseudonymous internal user ID so we can understand cross-session usage patterns. Google may process this data on servers located outside your country of residence. Google's privacy policy is available at policies.google.com/privacy.

5. Data sharing

We do not sell your personal data to advertisers or third parties. We share data only with the following categories of service providers, strictly for the purposes described in this policy:

• AI providers: Your code inputs and queries are processed by third-party AI models (OpenAI, Anthropic, Google Gemini) to generate feedback and responses. These providers process data under their data processing agreements and do not use your inputs to train their general models.
• Analytics: Google Analytics (operated by Google LLC) receives anonymized usage data and a pseudonymous user identifier to produce aggregate usage reports.
• Payment providers: PayPal and Razorpay process subscription payments. They receive only the information necessary to complete and verify transactions.
• Infrastructure: We use cloud hosting providers to store and serve the platform. Data is protected by encryption in transit (TLS) and at rest.

6. Data retention

We retain your account data for as long as your account is active. Analytics event data is retained in Google Analytics for up to 14 months. If you delete your account, we will remove your personal data from our systems within 30 days, though anonymized aggregate analytics data may persist.

7. Your rights and choices

You have the following rights regarding your data:

• Account deletion: You may request deletion of your account and all associated personal data at any time by contacting support@levelop.dev.
• Data access and portability: You may request a copy of the personal data we hold about you by contacting support@levelop.dev.
• Rectification: You can update your profile data directly from your account settings or request corrections via email.
• Opt out of analytics: You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on, or by enabling "Do Not Track" in your browser settings.
• Cookie controls: Most browsers allow you to refuse or delete cookies through their settings. Note that disabling essential cookies may impair platform functionality.

If you are located in the European Economic Area (EEA), United Kingdom, or any jurisdiction with applicable data protection laws, you may also have the right to object to processing, request restriction of processing, and lodge a complaint with your local data protection authority. California residents may have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete it, and the right not to be discriminated against for exercising these rights.

8. International data transfers

Levelop operates from India. By using the service, you understand that your data may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions where our service providers operate. Where required, we rely on standard contractual clauses or other appropriate safeguards to protect data transferred outside your region.

9. Security

We use reasonable technical and organizational measures to protect your personal data, including encryption in transit (TLS), encryption at rest for sensitive fields, scoped access controls, and routine security review of our infrastructure. No method of transmission or storage is perfectly secure, but we work to maintain a defense-in-depth posture.

10. Children's privacy

Levelop is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@levelop.dev.