Privacy Policy

Overview

LevelEngine AI ("we", "our", "us") is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how we use it, and the choices you have. By using our platform you agree to this policy.

1. Data We Collect

Account data — username, email address, hashed password, unique account ID.

Usage data — symbols you search, AI questions asked, daily usage counts, subscription tier.

Technical data — IP address, browser type, operating system, session token, timestamps.

Payment data — transaction reference numbers and plan type only. We never store full card numbers; all card processing is handled by our payment processor (Razorpay / Stripe).

We do not collect: trading account details, broker credentials, real money positions, or sensitive financial information.

2. How We Use Your Data

• Provide and personalise the LevelEngine AI platform
• Enforce daily usage limits based on your subscription plan
• Send transactional emails (verification, password reset, plan receipts)
• Display your recent search history in the sidebar
• Admin analytics (aggregate usage — never sold externally)
• Prevent fraud, abuse and unauthorised access
• Comply with legal obligations

3. Data Retention

Account data is retained for as long as your account is active. Daily usage counters reset every UTC midnight. Search history is retained for 90 days. If you delete your account, all personal data is permanently deleted within 30 days.

4. Data Security

• All data transmitted over HTTPS / TLS 1.3
• Passwords hashed using bcrypt (PHP password_hash)
• Sessions use Strict SameSite cookies over HTTPS only
• Database access restricted to server-side PHP only
• Admin access protected by separate authentication layer

5. Cookies & Storage

We use session cookies to keep you logged in (expires after 30 minutes of inactivity). We use localStorage only to remember your theme preference (dark/light). We do not use advertising cookies or tracking pixels.

6. Third-Party Services

We use the following third-party services, each with their own privacy policy:

• Groq AI — processes your AI questions (no personal data sent, only question text)
• Google Fonts — font delivery (standard Google CDN terms)
• Razorpay / Stripe — payment processing (PCI-DSS compliant)
• Hosting provider — server infrastructure (Hostinger)

7. Your Rights

• Access — request a copy of your personal data
• Correction — update incorrect information via account settings
• Deletion — request full account and data deletion
• Portability — request your data in machine-readable format
• Opt-out — unsubscribe from non-essential communications at any time

To exercise any right, email: privacy@levelengine.ai. We respond within 72 hours.

8. Children

LevelEngine AI is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately.

9. Policy Changes

We may update this policy periodically. Material changes will be communicated via email and/or a banner on the platform at least 14 days in advance. Continued use after changes constitutes acceptance.

10. Contact

Privacy Officer: privacy@levelengine.ai
General support: support@levelengine.ai
Response time: within 24–72 hours