Levit8 CX – Privacy Policy

1. Purpose and Scope

This Privacy Policy applies primarily to information collected online through our Services. It may also apply to information collected offline or through other means, such as email, telephone, or support interactions.

When Levit8 CX processes personal data on behalf of our customers, such processing is governed by our contractual agreements with those customers. In such cases, our customers act as the data controller, and Levit8 acts as a data processor.

We are not responsible for the privacy practices of our customers or any third-party services they use in conjunction with Levit8 CX.

2. How We Collect Information

a) Information Collected Automatically (System Data)

We may collect technical and usage-related data such as:

• Device type and operating system
• Browser type
• IP address
• Log data and timestamps

This data helps us operate, secure, and improve the Services.

b) User-Provided and Interaction Data

Information may be provided directly by users or end-customers when interacting with email, chat, or voice agents powered by Levit8 CX.

Some data is collected using cookies or similar technologies. Please refer to our Cookie Policy for details.

3. Types of Personal Information We Process

Depending on usage, we may process:

• First and last name
• Email address
• Business contact details
• Location (city, country)
• IP address
• Interaction metadata (timestamps, channel, sentiment score, tags)

We do not intentionally collect sensitive personal data, unless required for a specific lawful purpose and supported by an appropriate legal basis.

4. Handling of Email, Chat, and Voice Conversations

Email and Chat Conversations

Levit8 CX is designed to minimize storage of conversation content.

• Email and chat message content is not persistently stored on the Platform by default
• Conversation data is retrieved securely via API calls from relevant third-party service providers only when required to perform permitted actions such as:

• Classification and tagging
• Prioritization
• Workflow execution
• Response generation

We take commercially reasonable steps to ensure that email and chat content is processed transiently and not retained longer than necessary.

Voice Conversations

For voice interactions:

• Call recordings may be stored where required for:

• Quality assurance
• Compliance and regulatory purposes
• Customer dispute resolution

Voice data may be analyzed to:

• Detect sentiment and urgency
• Classify conversations
• Generate tags and summaries

Retention of voice recordings is limited to what is reasonably necessary and legally permissible.

5. How We Use Personal Information

We may use personal information to:

• Provide and operate the Services
• Authenticate users and manage accounts
• Process and route customer communications
• Analyze sentiment, intent, and conversation priority
• Improve AI models and system performance using aggregated or de-identified data, where permitted
• Respond to inquiries and support requests
• Manage billing and subscriptions
• Meet legal, regulatory, and compliance obligations
• Prevent fraud, abuse, or security incidents

Important Gmail-Specific Limitation

Notwithstanding the above, conversation data obtained via Google APIs (including Gmail) is used only to provide the requested Levit8 CX service and is not used to train or improve generalized AI or machine-learning models.

6. Use of Google User Data (Email Integrations)

Levit8’s use and transfer of information received from Google APIs, including the Gmail API, complies with the Google API Services User Data Policy, including the Limited Use requirements.

Purpose Limitation

Gmail data is used solely to retrieve, classify, route, and process customer communications as explicitly configured by the customer.

Gmail data is not:

• Used for advertising or marketing
• Sold, rented, or shared for unrelated purposes
• Used for generalized or cross-customer AI training

Revoking Google Access

Users may revoke Levit8 CX’s access to their Google account at any time via:
https://myaccount.google.com/permissions

Upon revocation, Levit8 will cease accessing Gmail data, and any Gmail data temporarily retained will be deleted or anonymized within 30 days, unless longer retention is legally required.

7. Internal Access to Data

Access to personal data within Levit8 is restricted to employees and contractors who require access on a need-to-know basis, including teams such as:

• Engineering
• Customer support
• Security and compliance
• Operations and leadership

All personnel are subject to confidentiality and data protection obligations.

8. Sharing of Personal Information

a) Service Providers (Processors)

We may engage third-party service providers for:

• Cloud hosting
• Data storage
• Payment processing
• Analytics and monitoring
• Customer support tooling

All such providers are contractually bound and may process data only for authorized purposes.

b) Legal and Regulatory Authorities

We may disclose information where required by law, legal process, or lawful government request, or to protect rights, safety, or prevent fraud.

c) Business Transfers

In the event of a merger, acquisition, restructuring, or asset sale, personal data may be transferred subject to appropriate safeguards.

9. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Services
• Fulfill contractual obligations
• Comply with legal, tax, or regulatory requirements
• Resolve disputes and enforce agreements

When no longer required, data is securely deleted, anonymized, or aggregated.

10. Security Measures

Levit8 implements commercially reasonable administrative, technical, and organizational safeguards to protect personal information.

No system can guarantee absolute security, and users are responsible for safeguarding their credentials.

11. Your Rights (GDPR, PDPA, and Similar Laws)

Depending on jurisdiction, rights may include:

• Access
• Rectification
• Erasure
• Restriction
• Objection
• Data portability

Requests may be submitted to support@levit8.ai.

12. California Privacy Rights (CCPA / CPRA)

California residents have rights to:

• Know what personal information is collected
• Request deletion
• Opt out of certain data sharing
• Non-discrimination

Levit8 does not sell personal information.

13. Children’s Privacy

The Services are not directed to children under 16. If such data is identified, it will be deleted promptly.

14. Links to Third-Party Sites

We are not responsible for the privacy practices of third-party websites linked through the Services.

15. Dispute Resolution

Privacy-related disputes shall be handled in accordance with applicable data protection laws. Where arbitration is applicable, disputes shall be resolved in Singapore, under applicable arbitration rules and governing law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated as required by law. Continued use of the Services constitutes acceptance of the updated Policy.

17. Contact Information

Support, support & Privacy: support@levit8.ai
Data Protection Officer:
Nilesh Ghai
nilesh@levit8.ai