Privacy Policy

Information we collect

Information you give us:

• Account information: your name, email address, password (stored only as a secure hash), job title and profile photo.
• Company information: your company's name, address, phone number, logo and settings.
• Business records you put into Lever: customers, properties, jobs, estimates, invoices, schedules, photos, notes, employees and pay plans, website content, leads, reviews and messages.
• Messages you send us, such as feedback or support requests, and your email address if you join our waitlist.

Information from services you connect:

• Google sign-in: your name, email address and profile photo.
• Google Business Profile: your business listing (name, address, phone, hours, categories, description) and reviews, and the replies you choose to publish.
• Google Search Console: search performance for your website (clicks, impressions, positions, search queries and pages).
• Google Ads: your ad accounts, campaigns, ads, budgets and their performance, and, if you use Local Services Ads, the leads it sends you. "Google user data" below describes exactly what Lever reads and does.
• Meta (Facebook and Instagram): your ad accounts, Pages, ad performance and the leads your lead forms collect.
• Payroll: Lever works with Check (checkhq.com) to run payroll. Sensitive details such as Social Security numbers, tax forms and bank accounts are entered directly into Check's secure forms and are held by Check, not by Lever.
• QuickBooks Online (Intuit): your QuickBooks company's name and, once your company sets up syncing, the accounts, products and services, tax codes and customers Lever needs to send it your invoices and payments. "QuickBooks data" below describes exactly what Lever reads and does.
• Other connections you set up, such as Zapier, or automations that send data to a web address you choose.

Information collected automatically:

• Essential cookies that keep you signed in and protect sign-in flows. We don't use advertising cookies on leverservices.app.
• Product analytics: which pages and features of Lever you use and when, so we can improve it. We record this under your account's id, not your name or email, and leave out what you type and the records you open. It's stored by PostHog, with a cookie and browser storage on leverservices.app. If your browser sends Global Privacy Control, we don't collect it.
• Technical information such as your browser type and the time of your activity, used for security and to fix problems. Our logs are designed to leave out names, email addresses, phone numbers and message contents.

Location in the Lever phone apps

The Lever apps for iPhone and Android use your phone's precise location only while you've turned it on, in two ways:

• On a trip: when you tap On my way, the app sends your location while you drive to the job, so the customer gets an accurate arrival time and the app notices when you get there. The trip ends when you arrive or stop it.
• During your workday: if you turn on Start my day, the app notices when you leave one job and reach the next, even with the phone locked, so it can offer to let the next customer know you're on the way. It stops when you end your day, at midnight, or after 12 hours.

Lever stores only your most recent position, replacing it with each update, and regularly deletes positions more than a day old. We don't keep a history of where you've been. Your company sees the arrival time for your visits, and the customer you're driving to gets it in the text you send. Nothing is texted without your tap.

You can turn location off at any time by ending your day, or in your phone's settings. The rest of the app works without it.

How we use information

• To provide Lever: run your account, store your records, send the emails and texts you ask Lever to send, publish your website and show your reports.
• To provide AI features you use, such as the Assistant, drafting messages and campaigns, and automated replies to leads.
• To keep Lever secure, prevent abuse and fix problems.
• To communicate with you about your account, security and changes to Lever.
• To meet legal obligations.

We do not sell personal information, and we don't use it for advertising to you.

AI features

When you use an AI feature, the information it needs to answer you (for example, the records you ask about, or a conversation with a lead) is sent to an AI model provider to generate a response. Today that's Anthropic, with Cloudflare Workers AI as a fallback, and OpenAI for live voice conversations, generating ad images, and checking how your business appears in AI search results. These providers process it to produce the response; they don't use it to train their models under the terms we use them on. We don't use your data to train AI models.

AI output can be wrong. Review it before relying on it, especially for anything about pay, prices or commitments to customers.

Google user data

Lever's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can read that policy at https://developers.google.com/terms/api-services-user-data-policy.

What we access. Lever asks for access to a Google service only when someone in your company chooses to connect it, and it asks for each one separately:

• Google sign-in: your name, email address and profile photo, used only to sign you in and show your name and photo in Lever.
• Google Business Profile (business.manage): Lever lists the business locations your Google account manages (their names and addresses) so you can choose which one is your company's, then reads only that location's listing details (name, phone number, categories, website, address, service areas, regular hours, description and Google Maps link) and its reviews (the reviewer's display name, star rating, review text, date and any reply already posted). With your approval, it posts your replies to those reviews.
• Google Search Console (webmasters.readonly): read-only search performance for your Lever website over the last 90 days: clicks, impressions and average position, by day, by search query and by page.
• Google Ads (adwords), with your Google email address: Lever lists the Google Ads accounts your Google account can reach (their name, ID, currency, time zone and status) so you can choose your company's, and uses your email address to check your own access level on it. For the account you choose, it reads its settings, campaigns, budgets, ad groups, ads, keywords, images and other assets; performance (cost, impressions, clicks and conversions) by day, by campaign and by search term; its conversion actions and tracking settings; whether billing is set up (not your payment details); and whether Google approved your ads.
• Google Local Services Ads, through the same Google Ads connection: your leads (the customer's name and phone number, and email address if Google provides one; the lead type, category, status and whether you were charged or credited), the messages those customers sent your business through Google, and the status of your licence, insurance and background-check verification.

What Lever does in your Google Ads account. Lever changes your account only as your company directs. Your company chooses how much Lever does on its own: in Review first, every change waits for approval; in Managed autopilot or Custom, an owner approves an operating agreement (the objective, budget, territory, offers and claims) and Lever does the routine work that agreement allows. Raising total spend, a new offer or territory, a claim outside the approved ones, spending on a new channel and changing the agreement always wait for an owner. Lever records which agreement and rule allowed each change it makes on its own. Within those limits:

• It creates campaigns, budgets, ad groups, ads, keywords, call details and conversion actions, using only the photos, offers and claims your company approved. New campaigns are created paused and started as a separate step.
• It tests new ads, pauses campaigns that perform poorly, moves budget between campaigns within the approved total, excludes searches that spend without bringing leads, replaces tired ads and changes what Google bids on once there's enough data.
• It asks to link your account to Lever's Google Ads manager account, or, if you ask Lever to create an account, creates it under that manager account with you as its administrator. That link is how Lever reaches your account. The account, its ads and its billing stay yours, and Google bills ad spend to you.
• So Google learns which ads bring real customers, it sends Google the outcome of leads that came from your ads (for example a booked visit or a completed job, and its value) and, for Local Services Ads, your rating of each lead. Each outcome is matched by Google's click ID or lead ID. Only when your company turns it on, and an owner has approved the advertising section of your company's own privacy policy in Lever, Lever may instead match it by the customer's email address and phone number, which are hashed (SHA-256) before they leave Lever. This goes only to your company's own Google Ads account. Your company is responsible for the notice and consent its customers are given.

How we use it. We use Google user data only to provide features you can see and use in Lever:

• To show your company its own Business Profile, reviews and search performance in Lever, and to compare your Google listing with your website so you can fix differences.
• To show your company its own Google Ads results in Lever (spend, leads, cost per lead, and which searches and ads brought customers), to run and adjust its campaigns as described above, and to write its weekly marketing update.
• To put your Local Services Ads leads in your company's inbox so your team can follow up. Lever replies to a lead by text only when that customer has already agreed to get texts from your business; otherwise your office calls them.
• To post a review reply to Google only after a person in your company approves it. Lever never posts a reply on its own.
• To show a review on your own website, only if you choose to quote it there.
• To answer you when you ask Lever's Assistant about your reviews, listing, search or ads data, ask it to write a reply draft, or use Lever's AI to write ads and plan campaigns. The information needed to answer is then sent to our AI model provider (today Anthropic, and Cloudflare Workers AI as a fallback) to generate the response. Lever's built-in suggested replies are written from a template, without AI.
• To run automations your company sets up, such as alerting you when a new review comes in. If an automation your company builds includes an AI step, or sends review details to a webhook or to Zapier, Lever sends what that step uses, and only there, as your company directs. An automation can never post a review reply: posting always needs a person's approval.

We don't sell Google user data. We don't use it for advertising, including personalized, retargeted or interest-based advertising, and we don't use it to develop, improve or train generalized AI or machine learning models. We don't use one company's Google user data to provide or improve Lever for another company. We don't transfer it to anyone else except as needed to provide or improve these features for you, where your company directs it (such as an automation it sets up), for security, to comply with the law, or as part of a merger, acquisition or sale of Lever. Other members of your company can see it in Lever, depending on their permissions.

People at Lever don't read your Google user data, except when you give us permission for specific data (for example, when you ask for support), when it's needed for security purposes such as investigating abuse, to comply with the law, or for Lever's internal operations when the data has been aggregated and anonymized.

How it's stored and protected. Lever reads from Google when you connect an account, when you ask it to refresh, and once a day for your connected Business Profile, so new reviews show up without you asking. Lever reads your connected Google Ads account when you connect it, when you ask it to refresh, and about once an hour while it manages your ads, so leads and spend stay current. It all stops as soon as you disconnect. The Google access and refresh tokens are encrypted (AES-GCM, with a key held separately from the database) before they're stored, and are used only by Lever's servers. The data Lever reads is stored in our database with your company's other records, encrypted in transit and kept separate from other companies' data.

Retention and deletion. Disconnecting a Google service in Lever deletes its stored tokens at once and asks Google to revoke Lever's access, so Lever can no longer reach that Google account. Disconnecting Google Ads also ends the link between your account and Lever's manager account; your Google Ads account, its campaigns and its billing stay with you. The profile details, reviews, replies, search data, ad performance and leads Lever already copied stay with your company's records so your history is kept; to have them deleted, email privacy@leverservices.app and we'll delete them. When your company's account is deleted, they're permanently removed along with its other data, as described under "Retention and deletion" below. You can also remove Lever's access at any time from your Google Account at https://myaccount.google.com/permissions.

QuickBooks data

Lever connects to QuickBooks Online only when an owner of your company chooses to, by signing in to Intuit and choosing which QuickBooks company to connect. Lever asks for one permission, accounting (com.intuit.quickbooks.accounting).

What Lever reads. When you connect, Lever reads your QuickBooks company's name, to show which company is connected. Once your company sets up syncing, Lever also reads your chart of accounts, products and services, and tax codes, so you can choose where Lever's invoices and payments go, and your QuickBooks customers' names and email addresses, only to match them to customers already in Lever so none is created twice.

What Lever writes. Once your company sets up syncing, Lever sends QuickBooks the customers, invoices, payments, refunds, voids and bank deposits your company records in Lever from the start date it chooses, so your books match your work. Lever sends one way: it doesn't copy changes made in QuickBooks back into Lever, and it never deletes anything in QuickBooks.

How we use it. Only to keep your company's own QuickBooks books in step with its own records in Lever. We don't sell QuickBooks data, use it for advertising, use it to train AI models, or use one company's QuickBooks data for another company.

How it's stored and protected. The QuickBooks access and refresh tokens are encrypted (AES-GCM, with a key held separately from the database) before they're stored, and are used only by Lever's servers. What Lever reads from QuickBooks is kept with your company's other records, encrypted in transit and separate from other companies' data.

Disconnecting. An owner can disconnect QuickBooks in Lever at any time (Settings → QuickBooks): Lever asks Intuit to revoke its access, deletes its stored tokens at once, and sends nothing more. You can also disconnect Lever from inside QuickBooks, which ends its access the same way. Nothing in QuickBooks is deleted. To have what Lever read from QuickBooks deleted from Lever, email privacy@leverservices.app.

Text messages

Businesses use Lever to text their own customers and leads, for example appointment confirmations, reminders, estimates, invoices and replies to inquiries. Those texts are sent on the business's behalf, and the business is responsible for having permission to send them.

Reply STOP to any text to stop receiving texts from that business, and HELP for help. Message and data rates may apply. Mobile phone numbers and text messaging consent are not shared with or sold to third parties or affiliates for their own marketing or promotional purposes.

Lever also texts the people who use it, from Lever's own number: sign-in codes, if you choose to get two-step verification codes by text, and emergency alerts to the number a business puts on call. These texts are never marketing. Reply STOP to stop them and HELP for help. https://leverservices.app/text-messages describes them and how you agree to them.

If you join Lever's waitlist, you can also give us your mobile number and check the box to get texts about the waitlist, including follow-ups, from Lever's company number. The box is unchecked until you check it, and joining doesn't need it. We save your number with the words you agreed to and when. Message frequency varies. Reply STOP to stop them and HELP for help.

Who we share information with

We use service providers to run Lever. They process information on our behalf and only to provide their service:

• Cloudflare: hosting, file storage, security and AI processing.
• Neon: our database (hosted in the United States).
• Resend: sending email.
• Twilio: sending and receiving text messages.
• Anthropic: AI features.
• OpenAI: live voice conversations, ad images, and checks of how a business appears in AI search.
• PostHog: product analytics (which pages and features are used).
• Check: payroll, when a business runs payroll in Lever.
• Firecrawl: reading a business's own public website when it sets up marketing.

We also share information:

• With services you connect (such as Google, Meta, QuickBooks, Zapier or an AI assistant you connect to Lever), as you direct.
• Within your company: other members of your company in Lever can see its records, depending on their permissions.
• When the law requires it, or to protect the rights, safety and security of our users, the public or Lever.
• With a successor if Lever is reorganized, merged or sold, subject to this policy.

Retention and deletion

We keep information while your account or your company's account is active. You can delete your account from your profile. Deleted accounts and companies are permanently removed after a 30-day window in which they can be restored, except where we need to keep something to meet legal obligations, resolve disputes or prevent abuse. Removed data may remain in backups for a limited time before it's overwritten.

A business that uses Lever controls the records it keeps about its customers, employees and leads, and can edit or remove them.

Your choices and rights

You can see and update your account information in Lever, disconnect connected services, and delete your account. You can also ask us to access, correct or delete your personal information, or ask questions about it, by emailing privacy@leverservices.app. We'll respond within a reasonable time and may need to verify your identity. We won't treat you differently for making a request.

If your information is in Lever because a business you deal with uses it, please contact that business first. We'll help it respond.

Security

We use reasonable safeguards to protect information, including encryption in transit, hashed passwords, encrypted connection credentials and access controls that keep each company's data separate. No system is perfectly secure, and we can't guarantee the security of information.

Children

Lever is for businesses and is not intended for anyone under 18. We don't knowingly collect personal information from children. If you believe a child has given us information, contact us and we'll delete it.

Where information is processed

Lever is operated from the United States, and information is stored and processed in the United States.

Changes to this policy

We may update this policy as Lever changes. We'll post the new version here with a new date, and tell you by email or in Lever if a change is significant.

Contact

Questions about privacy: privacy@leverservices.app. Everything else: support@leverservices.app.