1. Introduction
Welcome to Levrit. Levrit is operated by PT Akselerasi Inovasi Digital, a company incorporated in the Republic of Indonesia with its registered office in Sragen, Jawa Tengah 57274, which is the controller responsible for the personal data described here. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights.
2. Data We Collect
When you use Levrit, we may collect, use, store and transfer different kinds of personal data about you, including:
- Identity Data: includes first name, last name, username or similar identifier.
- Contact Data: includes email address and telephone numbers.
- Technical Data: includes internet protocol (IP) address, your login data, browser type and version.
- Usage Data: includes information about how you use our website, products and services.
- Customer messages you paste: if you paste a message from one of your customers into Levrit to find their words, phone numbers and other long numbers such as bank accounts, email addresses, web addresses and @handles are masked, and the senders of a pasted WhatsApp chat are replaced by labels wherever their full or first names appear in it, before the text is sent to the providers that run Levrit's AI writing models, which are told to leave names out. The text is therefore processed outside Indonesia. The pasted text is not stored or logged. What is kept is what you choose to save to your Brand Brain, and any caption Levrit writes with those words, saved to your Library like every other. The customer who wrote the message is not Levrit's user: you, as the business holding their message, are the controller of it, and Levrit processes it only on your instruction, for this one purpose, as described here. Paste only messages you are entitled to use.
- An Instagram bio you paste into Bedah Bio: the free bio check reads the bio on your device. If you ask for the three-line rewrite, the bio is sent to the providers that run Levrit's AI writing models, and is therefore processed outside Indonesia. It is not stored or logged. Levrit keeps a count of rewrites per network address in memory for the day, to apply the limit of three, and if you are signed in it records that a rewrite took place and what it cost, never the bio. If you then register through the page's door, your browser carries the bio into the brand step of your setup, where you can edit or remove it before anything is saved.
- Your Marketing Lanes result, if you buy the pass: the free Marketing Lanes reflection runs on your device and sends nothing. If you are signed in and press Buy on the Marketing Lanes Pass, your browser sends Levrit the lane your answers point to and the job you chose on the last question, and Levrit keeps both with your account and the payment, to show you the report written for that lane while your pass is active. Your answers to the other questions are not sent. Levrit does not use the lane or the job for anything else, and does not share them with anyone.
3. Google User Data
Our application may request access to your Google account information. If you grant us access, we will use this data strictly to authenticate you and provide you with our services. We do not sell your Google user data.
3.1 Google Ads data
If you connect a Google Ads account, Levrit requests the https://www.googleapis.com/auth/adwords scope. This is the only scope Google publishes for the Google Ads API and it has no read-only variant, so it is the narrowest permission that allows Levrit to read your advertising performance at all.
With that permission, Levrit reads:
- Account details: the account number, descriptive name and currency of the Google Ads accounts your Google login can reach, so you can choose which one to connect and see which one is connected.
- Account structure: campaign, ad group, ad and keyword names and identifiers, together with campaign type, bidding strategy, status and daily budget.
- Performance metrics: cost, impressions, clicks, and where your account reports them, conversions, conversion value and lost impression share, by day over a recent window.
We use this data for one purpose: to show you your own advertising performance inside Levrit, to generate written findings and recommendations about the account you connected, and to carry out the changes you confirm, as described below. It is shown only to people with access to the Levrit workspace that the connection belongs to.
Changes you confirm. Where Levrit offers a change to your Google Ads account, such as pausing a campaign or adjusting a daily budget, it makes that change only after a member of your workspace with edit access has seen the current value and the new value and confirmed that one change. Nothing is changed automatically or on a schedule, and members with view-only access cannot make changes. Levrit records who confirmed each change, the previous value and the outcome, so every change can be reviewed. Levrit never deletes a campaign, an ad group or an ad; pausing is the only way it stops one.
We do not sell your Google Ads data, we do not share it with third parties, we do not use it to train AI models, and we do not use it for advertising personalisation.
How this data is protected. Everything Levrit exchanges with Google and with your browser travels over encrypted connections (TLS). The authorisation token Google issues is held only on our servers, in a database that is encrypted at rest by our hosting provider; it is never sent to your browser, never written into a page, and never included in logs or error reports. Access to that database is restricted to Levrit's server processes and to the people who operate the service, and it is not shared with any other organisation. Your Google Ads figures are shown only inside the workspace the connection belongs to, and only to people who are members of it. If we ever became aware of a breach affecting your Google data, we would notify you without undue delay at the email address on your account.
Retention and deletion. We store the authorisation token Google issues, and the performance figures needed to render your reports, only while the connection exists. Choosing Disconnect in Levrit deletes the stored token and the data that connection imported. You can also withdraw the permission on Google's side at any time at myaccount.google.com/permissions, which stops Levrit reading the account whether or not you disconnect in Levrit first.
Levrit's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4. Social Platform Data
If you connect a third-party social account to Levrit (such as a Facebook Page or an Instagram professional account), we access only the data needed to provide the feature you connected it for: the Page's name and the Instagram account's username to show which account is connected, the content you ask Levrit to publish, the account's own bio and recent posts when you ask for an Instagram funnel map (section 4.1), and, where you connect an ad account, advertising metrics for that account. We use this data solely to provide those features to you. We do not sell it, and we do not use it to train AI models.
Platform data is retained only while the connection exists. Disconnecting the account in Levrit deletes the access tokens and the data the connection imported. If your account has no such connection, Levrit holds no platform data about you.
4.1 Facebook Pages, Instagram and Meta ad accounts
Publishing. If you connect a Facebook Page or an Instagram professional account, Levrit publishes to it only the posts you choose to publish or schedule in Levrit: immediately, or at the time you set (scheduled posts go out within a few minutes of it). It reads the Page's name and the Instagram account's username to show which account is connected.
Reading your account. If you ask Levrit to draw an Instagram funnel map while an Instagram professional account is connected, Levrit reads that account's username, bio, follower count and post count, and the caption, kind, link, date, likes and comments of its 30 most recent posts, to draw a map of its content. The bio and the captions go to the providers that run Levrit's AI writing models to write the map, as described below. Levrit uses them for that map only, keeps none of it beyond the map you choose to save, and logs how many posts were read and nothing of what they said. A map you saved stays in your Library until you archive it. Levrit never reads another account.
Reporting. If you connect a Meta ad account, Levrit reads the account's name and currency; the names of its campaigns, ad sets and ads; each campaign's objective, each ad set's daily budget and learning-phase status, each ad's delivery status and creation date, and the kind of creative each ad uses; and performance figures such as spend, impressions, clicks, frequency, results and conversion value. Levrit uses them to show you your own results and to write findings and suggestions about them.
Changes you confirm. Only if you separately give Levrit permission to change your ads can it make these changes to a Meta ad account, and no others: pause or resume an ad or an ad set, and change the daily budget of a campaign or an ad set. It makes a change only after a member of your workspace with edit access has been shown it in a preview and has confirmed that one change. The preview names the ad, ad set or campaign and the new state or amount and, for a budget, the current amount when Meta reports it. Undo, which puts back what a change just replaced, is its own single confirmation. Members with view-only access cannot make changes, and nothing is changed automatically or on a schedule. Levrit records who confirmed each change and when; for a budget change it also records the new amount and, when Meta reports it, the amount before. Levrit never creates or deletes an ad, and never changes targeting, creative or bidding.
How this data is protected. The access token Meta issues is stored only on our servers, in a database that is encrypted at rest by our hosting provider. No page or script in your browser can read it. If you grant more than one Page or ad account, Levrit holds the token in a signed, HttpOnly cookie for at most 15 minutes while you choose which one to connect, and removes it when you choose. We do not sell this data and we do not use it to train AI models. We share it only with the providers that host Levrit and that run the AI models writing your findings and reports. Disconnecting in Levrit deletes the stored tokens and the account details the connection imported; reports you generated from that data stay in your workspace until you delete them. You can also remove Levrit's access on Facebook's side at any time under Business Integrations in your Facebook settings.
5. Reel Editor
If you use the reel editor, the video you choose stays on your device. Your device takes only its sound (mono audio, up to 90 seconds) and sends it to Levrit's servers, which pass it to a speech-to-text provider based in the United States to write out the words and when each one was said. The words are returned to your device, and the reel is made on your device. To suggest an opening title, Levrit's servers also pass the words to the providers that run Levrit's AI writing models. The sound and the words are therefore processed outside Indonesia.
Levrit does not store or log the sound or the words. To apply usage limits and to know what the feature costs, it records each transcription and each title suggestion, when it took place, and what it cost. It also records how the editor was used, never any of the words: how many words a clip held, how many words and pauses were cut, how long each step took, the finished reel's length, picture height and video format, its caption style and colour look, and whether it has an opening title and a closing card. A cover you save is made on your device and is not sent; Levrit records only that a cover was saved, how it was set (its kind of font and colour, position, size, shadow and look) and whether its frame was one the editor suggested, never its headline or its picture. These details are kept with your account and also sent to our website analytics.
6. Data Retention and Deletion
We keep your personal data only as long as your account is active or as required by Indonesian law. You can request deletion of your account data, or of connected-platform data specifically, at any time. Step-by-step instructions are on our Data Deletion page; we complete deletion requests within 30 days.
7. Contact Us
If you have any questions about this privacy policy or our privacy practices, please contact us at:hello@levrit.io