Privacy Policy

This policy describes the personal data the application actually collects and how it is used.

Information we collect

• Account information: first name, last name and email address.
• Authentication data: an encrypted password credential and session information managed by our authentication provider. We never see your password in readable form.
• Membership data: membership status, plan, founding-member flag, member-since date, next billing or access-until date, and cancellation state.
• Subscription records: the identifiers our payment processor assigns to your customer and subscription records, the price applied, and the subscription period.
• Saved securities: the securities you add to your watchlist.
• Member reviews: the review text, title, rating and display name you submit.
• Acceptance records: the date and version of the legal documents you acknowledged at signup.
• Support communications: the content of emails you send to our support address.
• Technical and security logs: standard request, error and security logs generated by our hosting and database platform.
• Analytics data, only if you accept analytics cookies: the public LevelScan pages you view (address without query strings, and page title), with the identifiers and browser, device and approximate location information Google Analytics derives from the visit.
• Visit measurement data, only if you accept marketing cookies: the LevelScan pages you view, together with the technical identifiers Meta assigns to your browser for that purpose.

Information we do not collect

We do not collect your portfolio value, net worth, income, holdings, investing objectives, risk tolerance or date of birth. We do not build investor suitability profiles, and we do not operate a marketing newsletter. We do not show advertising on LevelScan. If you accept marketing cookies, the Meta Pixel and the Google Ads conversion tag measure visits and purchases as described below; if you accept analytics cookies, Google Analytics counts page views. If you decline both, we set no analytics, advertising or traffic-measurement cookies.

Payment information

Card payments are processed by Stripe. Card details are entered directly into Stripe's payment form. GF Innovative Investments LLC does not receive or store full card numbers. We store only the subscription and customer identifiers and the membership state needed to grant access.

How we use information

• To create, secure and operate your account.
• To grant and restrict access to member research based on membership status.
• To process membership billing, renewals and cancellations.
• To send account and billing emails, including payment receipts sent by Stripe.
• To review, approve or reject submitted member reviews.
• To answer support requests.
• To detect abuse and keep the service secure.
• To understand which pages are visited, only when you have accepted analytics cookies.
• To measure website traffic and advertising performance, only when you have accepted marketing cookies.

Service providers

We use service providers that process data on our behalf so that the application can operate:

• Our hosting, database and authentication platform, which stores account records, membership data, saved securities and reviews, and processes authentication emails.
• Stripe, which processes payments, subscriptions, the billing portal and payment receipt emails.

These providers receive only the information necessary to perform their function. We do not sell personal data.

When you accept marketing cookies, Meta Platforms, Inc. also receives information about your visits to LevelScan so that traffic and advertising performance can be measured. Meta processes that information under its own data terms, and technical identifiers may be involved — for example cookies or similar identifiers stored in your browser, information about your browser, device and operating system, and an IP address derived from your connection. We do not send Meta your name, email address, account details, membership or billing status, payment information, saved securities or research content.

When you accept marketing cookies, Google LLC also receives a purchase conversion through the Google Ads conversion tag, sent once after Stripe confirms your first membership payment, so that the performance of Google ads can be measured. It contains only the amount paid in USD and the Stripe invoice reference used to prevent double counting. Google processes it under its own data terms, and technical identifiers such as cookies, browser and device information and an IP address may be involved. We do not send Google your name, email address, account details, payment card information or research content. If you decline, Google's tag does not load.

Separately, when you accept analytics cookies, Google LLC receives page-view information through Google Analytics 4: the public page address without query strings, the page title, and the technical identifiers, browser, device and approximate location data Google derives from the visit. Sign-in, password-reset, checkout, account, admin and member research pages are excluded. We do not send Google Analytics your name, email address, account details, sign-in tokens, payment information, purchases or research content, and Google signals and ad personalization are disabled. Analytics consent is independent of marketing consent and can be withdrawn at any time from "Cookie settings".

Cookies and storage

We use essential cookies and browser storage to keep you signed in.

We offer an optional analytics cookie, Google Analytics, which counts page views on public pages only after you accept analytics cookies, separately from marketing cookies.

We also offer one optional marketing cookie, the Meta Pixel, which is used for website traffic measurement and advertising analytics. It activates only after you accept marketing cookies through the notice shown on your first visit, and it tracks three events: PageView (each LevelScan page you view), CompleteRegistration (when you create an account) and Purchase (sent once after Stripe confirms your first membership payment, with only the amount paid in USD and a reference used to prevent double counting). If you decline, or never make a choice, none of Meta's scripts load and no information is sent to Meta during your visit.

Declining analytics or marketing cookies does not restrict your access to LevelScan. You can still read the public pages, create an account, sign in, use the research dashboard, save securities and manage your membership and billing. Your choice is saved in your browser, and clearing LevelScan's site data brings the notice back so you can change it. Full details are in our Cookie Policy.

Security

Data is transmitted over encrypted connections, passwords are stored as hashes by our authentication provider, and database access rules restrict member data to the account that owns it and to authorized administrators.

Retention

Account, membership and subscription records are retained while your account exists and for as long as needed to meet legal, tax and accounting obligations. Reviews you submit remain visible while approved.

Your requests

You can request access to, correction of, or deletion of your account data by emailing us. We may need to retain limited billing records where required by law.

Contact

Privacy requests and questions: support.levelscan@gmail.com.