Privacy Policy

• Your name and email address — to make your account, sign you in, and email you things you asked for.
• Your company name, address and logo — they go on the proposals you send your customers.
• Your projects, bids, prices and item library — that is the product — it is your working data and it stays yours.
• The plans you upload — to draw on, measure and store so you can come back to a job.
• Your customers’ names and contact details, where you enter them — to put on the proposal and to let you find the job again.
• Feedback you send us, including a screenshot if you attach one — so we can see what went wrong and fix it.
• Pictures of the 3D model you attach to a proposal — so your customer can see what you are quoting.
• Basic technical information — browser, device and the page you were on — it arrives with a bug report and tells us where to look.

We do not collect anything you have not given us, and there are no advertising trackers on LevelSheet.

We never see it. Payment details are collected and held by Stripe; we store the customer and subscription identifiers Stripe gives us and nothing more.

• We do not sell your data, and we do not rent or share it for advertising.
• We do not use your bids, prices or plans to train AI models.
• We do not show your data to other customers — every table is scoped to your company and enforced by the database, not by the screen.

• Supabase — stores the database and your uploaded plans.
• Vercel — runs and serves the app.
• Stripe — takes the payment — we never see your card number.
• Resend — sends the emails the app sends you.
• Anthropic — reads a plan sheet when you ask the app to read one for you.
• HeyCatch — counts which pages get opened and which buttons get pressed.

Each of them is a processor acting on our instructions, under their own agreements with us. Anthropic is used only for the plan-reading feature and only on the sheet you ask it to read.

Your data is stored in the United States. We keep it while your account is open. Close your account and ask us to delete it, and we will — within 30 days, apart from anything we have to keep for tax or accounting, which we keep only as long as required.

Everything travels over HTTPS. Access is scoped to your company at the database level, so a bug on a screen cannot show your bids to somebody else’s account. Uploaded plans sit in storage scoped the same way. No system is perfectly secure, and if something happens that affects your data we will tell you promptly.

Where you enter a customer’s name or contact details, you are the one who decided to collect them and you are responsible for having the right to. We hold them for you and do nothing else with them.

A copy of your data, a correction, or deletion. Email office@levelsheet.com and we will do it. Depending on where you live you may have further rights under laws such as the CCPA or the GDPR; we will honour those requests the same way.

LevelSheet is a tool for businesses and is not intended for anyone under 18.

If this policy changes, the date at the top of the page changes. If a change matters to you, we will tell you rather than leave you to notice.