Privacy Policy

1. Who we are

The controller of your personal data is Individual Entrepreneur (FOP) Vitalij Oleksandrovych Dubenyuk (see “Service provider details” below). This policy describes what data the Level Signal website collects, why, and what rights you have, regardless of the country you access the service from.

2. What data we collect

Account and contact data: email address.

Assessment profile data: job title, years of experience, and your answers to assessment questions.

Technical and analytics data: interaction events on the website (collected via the PostHog analytics platform), approximate country (used only to pick the interface language), device and browser information.

Payment data is processed by the payment provider; we do not receive or store your full card details — we only receive payment status and transaction identifiers. If you contact support, we also process the correspondence.

3. Why we process it

To run the assessment, compute results, generate and deliver your report; to send transactional emails about report availability; to process payments and handle support and refund requests; to improve the product using aggregated, de-identified analytics; to build anonymized benchmark statistics; and to comply with legal obligations.

The legal bases are: performance of the contract with you (assessment, report, payments, support), your consent (analytics where required), our legitimate interest in improving and securing the service, and compliance with legal obligations.

4. Where it is stored, processors, international transfers

Data is stored in the Supabase cloud platform. Transactional email is delivered via Resend. Product analytics is processed by PostHog. Payments are processed by the payment acquiring provider. These processors receive only the data necessary for their function and are bound by data processing agreements.

Our processors' servers may be located outside your country of residence (including in the EU and the US). By using the service you acknowledge that your data may be transferred to and processed in such countries, subject to the safeguards provided by our processors.

We do not sell personal data and do not share it with third parties beyond the processors listed above, except where required by law or to protect our legal rights.

5. Retention

We retain personal data while your account/assessment records are active and for the period required by law (e.g., payment records for accounting purposes). Anonymized, aggregated statistics that cannot identify you may be retained indefinitely.

6. Your rights

You may request access to, correction of, or deletion of your personal data, receive a copy of it, restrict or object to its processing, and withdraw consent to processing at any time, by writing to support@levelsignal.dev. Deleting your data will revoke access to your results and reports. We respond within the time limits set by applicable law.

Depending on your country of residence, you may have additional rights under local law — for example, the Law of Ukraine “On Personal Data Protection”, Brazil's LGPD, Canada's PIPEDA, or US state privacy laws. We honor such requests to the extent those laws apply to you.

You also have the right to lodge a complaint with the data protection authority of your country of residence.

7. Cookies and local storage

We use cookies and browser storage for essential purposes (keeping you signed in, remembering your interface language) and for product analytics (PostHog). We do not use third-party advertising cookies. You can restrict cookies in your browser settings; essential features may stop working without them.

8. Security

We apply appropriate technical and organizational measures to protect personal data, including encrypted connections (TLS), access controls, and row-level access restrictions in the database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children

The service is intended for adults (18+) and is not directed at children. We do not knowingly collect personal data from persons under 18; if we learn that we have, we will delete it.

10. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date of the last update. Material changes will be additionally communicated on the website.