Legal
Privacy Policy
Your privacy matters. This policy explains how Lever collects, uses, stores, and protects your personal information when you use our website and services.
Effective date: March 18, 2026 · Last updated: March 18, 2026
1. Who We Are
Lever ("we," "us," or "our") operates the website at leverco.marketing. Lever is a marketing strategy and AI agent implementation agency based in Maine, United States.
For any privacy-related questions or requests, you can reach us at hello@leverco.marketing.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you interact with our website, including:
- Marketing Stack Audit: Your responses to 12 quiz questions about your marketing operations, plus contact information including your name, email address, company name, industry, company size, role, and location.
- Contact Form: Your name, email address, company name, and message content when you submit an inquiry through our contact or booking form.
- Email Communications: Any information you include when you email us directly.
2.2 Information Collected Automatically
When you visit our website, certain information is collected automatically through cookies and similar technologies:
- Usage and Analytics Data: Pages visited, time spent on pages, click patterns, referring URLs, browser type, device type, operating system, and screen resolution — collected via Google Analytics 4.
- Security and Bot Detection Data: IP address, browser characteristics, and interaction patterns — collected via Google reCAPTCHA v3 to prevent spam and abuse on our forms.
- Technical Information: IP address (anonymized where possible), browser type and version, time zone, and general geographic location.
2.3 Information We Do Not Collect
We do not collect sensitive personal information such as Social Security numbers, financial account information, health data, biometric data, or precise geolocation data through our website. We do not knowingly collect data from children under the age of 16.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Delivering Your Audit Results: Processing your quiz responses and generating a personalized marketing audit report emailed to the address you provide.
- Responding to Inquiries: Replying to contact form submissions and booking requests.
- Improving Our Services: Analyzing aggregate, anonymized usage data to improve website content, user experience, and service offerings.
- Security and Fraud Prevention: Using reCAPTCHA and rate limiting to protect our forms from spam, bots, and abuse.
- Business Communications: Sending follow-up communications related to your audit results or inquiry, only where you have provided your contact information for that purpose. We do not send unsolicited marketing emails.
4. AI and Automated Processing
Lever uses artificial intelligence (AI) tools as part of our service delivery. Here is how AI interacts with your data:
- Audit Scoring: Your Marketing Stack Audit responses are processed through an automated scoring algorithm on our servers to generate your personalized results. This is deterministic scoring, not AI-generated.
- Client Service Delivery: If you become a client, AI tools may be used to assist with marketing strategy, content creation, analytics, and workflow automation as part of our service delivery. Client data used in AI-assisted workflows is handled under the terms of your specific service agreement.
- Human Oversight: All AI-generated outputs are reviewed and validated by a qualified human before delivery to clients. AI assists our work — it does not replace human judgment.
- No Automated Decision-Making: We do not use AI to make automated decisions that produce legal or similarly significant effects on individuals without human involvement.
5. Third-Party Services
We use the following third-party services that may collect or process your data:
| Service | Purpose | Data Shared |
|---|---|---|
| Google Analytics 4 | Website analytics and usage tracking | Anonymized usage data, cookies, IP address (anonymized) |
| Google reCAPTCHA v3 | Spam and bot prevention on forms | IP address, browser data, interaction patterns |
| Resend | Transactional email delivery | Email address, name, email content |
| Notion | Internal lead tracking and CRM | Contact information, audit results |
| Vercel | Website hosting | Server logs, IP address, request data |
Each of these services operates under their own privacy policies. We encourage you to review them. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.
6. Cookies and Tracking Technologies
Our website uses the following cookies and tracking technologies:
- Google Analytics Cookies: First-party cookies used to distinguish unique users, throttle request rates, and track session information. These cookies collect anonymized usage data.
- Google reCAPTCHA Cookies: Used exclusively for security purposes — to differentiate human users from bots. reCAPTCHA data is governed by Google's Privacy Policy and Terms of Service.
We do not use advertising cookies, retargeting pixels, or cross-site tracking technologies. You can control cookies through your browser settings. Disabling cookies may affect the functionality of certain features such as form submissions.
7. Data Retention
We retain your personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected:
- Audit and Contact Form Data: Retained in our internal systems for up to 24 months after submission, unless you request earlier deletion.
- Client Data: Retained for the duration of the client relationship plus 12 months, unless a longer retention period is required by law or agreed in your service contract.
- Analytics Data: Google Analytics data retention is set to 14 months. Aggregate, non-identifying analytics may be retained indefinitely.
You may request deletion of your personal data at any time by contacting us at hello@leverco.marketing.
8. Data Security
We implement reasonable technical and organizational measures to protect your personal information, including:
- HTTPS encryption for all data in transit between your browser and our servers.
- Server-side input validation and sanitization to prevent injection attacks.
- Rate limiting on all form submission endpoints to prevent abuse.
- Bot detection via Google reCAPTCHA v3 on form submissions.
- Disposable email address filtering to maintain data quality.
- Access controls limiting who can view personal data within our organization.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.
9. Your Rights
9.1 Rights for All Users
Regardless of where you are located, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Objection: Object to processing of your personal data for certain purposes.
9.2 California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected, the sources of that data, our business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You can request deletion of your personal information, subject to certain legal exceptions.
- Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under CCPA/CPRA. There is no need to opt out because we do not engage in these activities.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.
- Opt-Out of Automated Decision-Making: We do not use automated decision-making technology to make significant decisions about you without human involvement.
To exercise any of these rights, contact us at hello@leverco.marketing. We will respond to verifiable consumer requests within 45 days.
9.3 European Economic Area Residents (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, data portability, and object to processing.
Our legal basis for processing your personal information includes: (a) your consent when you submit our forms, (b) legitimate interest in responding to inquiries and improving our services, and (c) necessity for the performance of a contract when you engage our services. You may withdraw consent at any time by contacting us.
9.4 Maine Residents
We comply with applicable Maine privacy laws. If the Maine Data Privacy and Protection Act comes into effect and applies to our business, we will honor all consumer rights established under that law, including the right to confirm processing, access, correct, delete, and obtain a copy of your personal data, and to opt out of targeted advertising and data sales.
10. Children's Privacy
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal data from a child under 16, we will delete that information promptly. If you believe a child has provided us with personal data, please contact us at hello@leverco.marketing.
11. International Data Transfers
Our website is hosted in the United States and our services are primarily offered from the United States. If you access our website from outside the United States, your information may be transferred to, stored, and processed in the United States where data protection laws may differ from those in your jurisdiction. By using our website, you consent to the transfer of your information to the United States.
12. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. We do not currently respond to DNT signals as there is no industry standard for how to interpret them. However, we do not engage in cross-site behavioral tracking.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically for the latest information on our privacy practices.
14. Contact Us
If you have questions about this Privacy Policy, want to exercise any of your data rights, or have concerns about how we handle your personal information, please contact us:
See also our Terms of Service.