Privacy Policy
Last updated: 10 September 2026 · Level10ai, LLC
This policy explains what Level10ai collects, why, where it is kept, and who else touches it. It covers level10ai.ai and all Level10ai products — the Knowledge Monetization Lab™ Self Evaluation, Industry Research Reports, and Level10ai Advisor.
The short version. We collect your email address, what you type into our tools, and what those tools produce for you. We use it to deliver the product you paid for. We do not sell it, we do not share it for advertising, and there are no analytics or tracking scripts anywhere on this site. You can ask for a copy of your data or have it deleted by emailing dave@level10ai.ai.
1. What we collect
Information you give us.
- Email address — at checkout, and when you request an access link. This is the key everything else is filed under.
- First name — if you give one at checkout or when saving an evaluation. Used to address you in emails and reports.
- Your answers — responses to the Self Evaluation, the Industry Research questionnaire, and any Roadmap Assessment you take.
- Your conversations — the questions you put to an Advisor and the answers it gives.
Information we generate for you. Your evaluation scores and written report, your Industry Research reports and the sources cited in them, and your roadmaps and action plans.
Information we do not collect. We do not collect your card number, bank details, address, phone number, date of birth, or any government identifier. We do not build a profile of you from other websites, and we do not buy data about you from anyone.
2. There is no tracking on this site
Level10ai runs no analytics package, no advertising pixels, no session recording, and no third-party tracking scripts of any kind. Nothing on the site follows you anywhere else, and nothing reports your browsing back to an advertising network.
We also do not set tracking cookies. To keep you signed in, your browser stores an access token and your email address in localStorage on your own device. That is local to your browser and is never transmitted to anyone but us. Clearing your browser data removes it and signs you out.
3. What we use it for
- To deliver what you bought: producing your evaluation, researching and writing your reports, and answering your questions.
- To keep your work available to you across devices and after you close the browser.
- To send you the emails that make the product work — your access link, your receipt, and notice that a report is ready.
- To answer you when you write to support.
- To meet our tax and accounting obligations for a purchase you made.
We do not use your content to train any AI model of our own, and we do not use it to market other people's products to you.
4. Where your information lives
Some of it is on our servers and some of it never leaves your device, which is worth knowing because it changes what happens if you clear your browser.
On our servers (Netlify Blobs, keyed to your email address): your evaluation scores, your finished Industry Research reports, your report credits, a count of follow-up questions asked against each report, and a backup copy of anything you save to My Library — Advisor conversations, roadmaps and social posts. These survive a cleared browser.
The My Library backup is new. It exists because saved work used to live in one browser and nothing else, so clearing that browser destroyed it permanently. Your browser is still where My Library is read from; the server copy is there so the work can be recovered rather than lost. We keep it for as long as you have an account, and you can ask us to delete it at any time using the contact details below. There is also a Download a copy button in My Library if you would rather hold your own backup.
In your browser only: your access token, and any Advisor conversation or post you have not saved. Unsaved work in progress is never sent to us as a saved item, and if you clear your browser before saving it, it is gone.
5. Who else handles your information
We use a small number of service providers to run the product. Each one only receives what it needs to do its job, and none of them is permitted to use your information for their own purposes.
| Provider | What it does | What it receives |
|---|---|---|
| Stripe | Takes payment | Your name, email and payment details, given directly to Stripe |
| Netlify | Hosting and storage | Everything stored on our servers, plus standard web server logs |
| Anthropic | Generates evaluations, reports and Advisor answers | The text of your questions and answers, at the moment a response is produced |
| Resend | Sends transactional email | Your email address and the contents of that email |
| Kit | Sends onboarding email sequences | Your email address and first name |
We may also record evaluation results in aggregate to understand how the tool performs. Those records contain scores and report text but not your name or email address, so they are not tied back to you.
Beyond these providers, we share your information only when the law requires it, or if Level10ai is ever sold or merged — in which case you would be told before your information moved, and this policy would continue to apply to it.
We do not sell your personal information, and we never have.
6. Payments
All payments are handled by Stripe on Stripe's own pages. Level10ai never sees, receives or stores your card number, CVC, or bank details — they do not pass through our servers at any point. What we receive back from Stripe is your email address, whether the payment succeeded, and what you bought.
7. AI processing
Level10ai is built on AI, so it is worth being explicit about what that means for your information.
When you take an evaluation, request a report, or ask your Advisor a question, the relevant text is sent to Claude, the AI model made by Anthropic, to produce the response, and the result is returned to you. Anthropic acts as our processor for this and, under its commercial API terms, does not use content submitted through the API to train its models.
Answers are generated by a model, not written by a person, and no member of Level10ai staff reads your conversations in the ordinary course of running the service. We may look at specific content only if you ask us to — for example, when you report a problem with a report.
No decisions are made about you automatically. Your evaluation produces scores and your reports produce findings, but nothing is decided about you on that basis — there is no automated profiling that affects your access, your price, or anything else with a legal or similarly significant effect on you.
8. How long we keep it
- Reports and evaluation results: kept until you ask us to delete them. Unused report credits do not expire, and finished reports stay available so you can reopen them.
- Your email address: kept while you have an account, credits or a subscription with us.
- Payment records: retained by Stripe, and by us in summary, for as long as tax and accounting rules require.
- Email lists: until you unsubscribe, which you can do from any email we send.
9. Your rights
Whatever jurisdiction you are in, we will honour these:
- Access — ask what we hold about you and get a copy.
- Correction — have anything inaccurate fixed.
- Deletion — have your data erased, subject to records we are legally required to keep.
- Portability — get your reports and results in a form you can take elsewhere. Every report already downloads as a PDF.
- Objection — tell us to stop processing your information for a given purpose.
- Restriction — have us pause what we do with your information while a dispute about it is sorted out.
- Withdraw consent — where we rely on your consent, take it back at any time. This does not undo anything done before you withdrew it.
- Unsubscribe — leave any mailing list without losing access to what you bought.
If you are in the UK or EEA, these are your rights under the GDPR; our lawful bases are performance of a contract for delivering the product, legitimate interests for keeping it secure and working, and consent for marketing email. If you are in California, the CCPA gives you equivalent rights, and we will not discriminate against you for exercising them.
We do not sell or share your personal information, as those terms are defined under the California Consumer Privacy Act as amended by the CPRA. We have not sold or shared personal information in the preceding twelve months, and we do not process sensitive personal information for the purpose of inferring characteristics about you.
To exercise any of these, email dave@level10ai.ai from the address you signed up with. We will respond within 30 days.
You can also complain to a regulator. If you are in the UK you may complain to the Information Commissioner's Office at ico.org.uk. If you are in the EEA you may complain to the data protection authority in the country where you live or work. We would rather you came to us first so we can put it right, but you do not have to.
10. International transfers
Level10ai is operated from the United States, and our service providers process data on servers in the United States and elsewhere. If you use the service from outside the US, your information will be transferred there and handled under this policy.
Where information is transferred out of the UK or the EEA, that transfer is covered by the safeguards in our providers' own data processing terms — the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or the EU-US Data Privacy Framework, depending on the provider. Every provider listed in section 5 offers one of these. If you want to know which applies to a particular provider, or to see the terms, write to us and we will tell you.
11. Security
The site is served entirely over HTTPS. Access is controlled by a signed token rather than a password we store, so there is no password database to breach. Stored data sits behind our providers' access controls, and payment details never reach us in the first place.
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your information, we will tell you, and we will tell you what happened rather than issue a statement that says nothing.
12. Children
Level10ai is a business tool intended for adults. It is not directed at anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.
13. Changes to this policy
If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will tell you by email before it takes effect rather than expecting you to notice.
14. Contact
Questions about privacy, or a request about your own data:
dave@level10ai.ai
Level10ai, LLC
14900 Conference Center Drive, Suite 200
Chantilly, VA 20151
United States