Skip to main content
2,200+ service businesses benchmarked. How does your cash flow stack up? See where you stand →
Level

Privacy Policy

Effective April 27, 2026

Who we are

"Level" ("we," "us") is operated by Level CFO, headquartered at 447 Broadway 2nd Floor #1301, New York, NY 10013. You can reach us at [email protected]. This policy explains what we collect when you visit levelcfo.com or engage us as a client, why we collect it, and what choices you have.

What we collect

Information you give us. When you submit a form on the site (free profitability audit, contact form, lead-capture modal, newsletter signup) we collect your name, email address, phone number (optional), company name, industry, team size, and any free-text message you write. We also capture which page and CTA you used and any UTM parameters present in the URL.

Information from your browser. We use Google Tag Manager, PostHog, and HubSpot tracking to record standard web analytics: pages viewed, referrer, IP-derived approximate location, device and browser type, and interaction events (button clicks, form starts). These are collected via first- and third-party cookies and similar technologies.

Information from client engagements. If you become a Level client, we receive financial and operational data through read-only integrations with your accounting and field-service software (for example QuickBooks, Sage Intacct, ServiceTitan, BuildOps, Jobber). We only receive data necessary to deliver our services.

How we use it

  • To respond to inquiries and deliver requested services (e.g. follow up on an audit request, send a downloadable report you asked for).
  • To send you newsletters and product updates if you opted in. You can unsubscribe in any email.
  • To analyze how the site is used and improve it (which content is helpful, which CTAs convert, which pages have problems).
  • To meet legal, tax, and accounting obligations.

We do not sell your personal information. We do not share it with advertisers.

Service providers we use

We use the following processors. Each receives only the data needed for its function and is contractually bound to protect it:

  • HubSpot — CRM, contact management, email automation. Stores names, emails, phone numbers, company data, and form submissions.
  • Google (Tag Manager, Analytics, Workspace) — site analytics and our internal email.
  • PostHog — product analytics and event capture.
  • Slack — internal lead notifications.
  • Resend — transactional email delivery (e.g. report download links).
  • Calendly — calendar booking. When you book a meeting, Calendly receives your name, email, and time-zone.
  • Cloudflare — site hosting, DDoS protection, and serverless functions.

Cookies and tracking

We use cookies and similar technologies for analytics and to remember your preferences (for example dismissing a CTA banner). We do not use behavioral advertising cookies. Your browser's "Do Not Track" signal is honored by our analytics providers where supported. You can block or delete cookies in your browser settings.

Data security

We use industry-standard practices to protect your data: TLS encryption in transit, encrypted-at-rest storage with our processors, principle-of-least-privilege access controls, and read-only integrations to client accounting systems. No system is perfectly secure, but we treat client financial data with the same care we'd expect from our own bank.

How long we keep data

Marketing contact data is retained while you remain subscribed plus 24 months. Client engagement data is retained while we have a contract with you and for 7 years after termination, to satisfy financial recordkeeping obligations. You can ask us to delete data sooner — see "Your rights" below.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or port the personal data we hold about you, and to object to or restrict certain processing. California residents have rights under the CCPA / CPRA, including the right to know what we collect and the right to opt out of any sale or share of personal information (we do neither).

To exercise any of these rights, email [email protected]. We respond within 30 days.

Children

Level is a B2B service. The site is not directed to children under 16 and we do not knowingly collect data from them.

Changes to this policy

We may update this policy as our services evolve. Material changes will be flagged at the top of the page. The effective date above always reflects the current version.

Contact

Privacy questions: [email protected]
Mail: Level CFO, 447 Broadway 2nd Floor #1301, New York, NY 10013