Privacy Policy

Symple Leases Inc. ("Symple Leases," "we," "us," or "our") operates Levvn, a multi-sided property management platform available at getlevvn.com, in the Levvn apps for iPhone, iPad, and Android, and in the Levvn desktop app (together, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the Platform. By using the Platform, you consent to the practices described in this policy.

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information from Third Parties

We may receive information from third-party services, including:

• Payment and identity verification data from Stripe.
• Publicly available business information about service businesses (such as a business name, business phone, website, service area, address, photos, and public ratings) that we compile from public sources, business directories, and research tools to list them in Levvn's Find Pros directory. A business can claim its listing or ask us to remove it from inside the Levvn apps or by emailing privacy@sympleleases.com.

We use the information we collect to:

• Provide, operate, and maintain the Platform and its features.
• Process payments, including rent collection, service payments, and subscription billing through Stripe.
• Send transactional notifications via email (through Resend) and SMS (through Twilio, when you opt in).
• Facilitate communication between users, including hosts, owners, tenants, and service professionals.
• Improve the Platform through analytics, usage patterns, and user feedback.
• Provide AI features you choose to use, such as the Levvn Assistant (see Section 5).
• Keep the community safe: we automatically screen messages and profile text for abuse, scams, and attempts to move payments off the Platform, and review reports you send us.
• Enforce our Terms of Service and Community Guidelines and protect the security of the Platform and its users.
• Comply with legal obligations and respond to lawful requests from government authorities.

We share your information with the following categories of third-party service providers:

We require all service providers to use your information only as necessary to perform services on our behalf and to maintain appropriate security measures.

AI features are optional. Before you first use the Levvn Assistant or another AI feature, we explain what is shared and with whom, and ask for your permission. You can withdraw it at any time in Settings, and everything else on the Platform keeps working without AI.

• Levvn Assistant (Anthropic): When you use the assistant, we send Anthropic, which runs the Claude models, what you type or say to it, your name and role, and the account information the assistant reads to answer you or to do what you ask, such as your properties, leases, tenants, payments, tasks, and messages.
• Voice (Google): When you talk with the Levvn Assistant or have its replies read aloud with a natural voice, recordings of your voice and the reply text are sent to Google's Gemini API to convert speech to text and text to speech. We do not keep the recordings. If natural voices are unavailable, your device's own speech recognition (from Apple or Google) may be used instead.
• AI estimates (Anthropic): Features such as the rental revenue estimate send the listing details needed for the estimate to Anthropic. AI-generated results are labeled and may be inaccurate.
• Safety screening (OpenAI): Messages may be screened by OpenAI's moderation service to detect abusive content. This is used only to keep the Platform safe.

These providers process this information only to provide the feature to us, under agreements that do not allow them to use it to train their AI models. Assistant conversations are kept until you delete them or your account. Levvn staff may review a conversation to help you with a support request, investigate a report, or keep the Platform safe. You can report a reply you think is harmful or wrong from inside the assistant.

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Between Platform users: Certain information is shared as necessary for transactions. For example, a host’s name and property details are visible to prospective tenants; a service professional’s profile is visible to hosts seeking services.
• Service providers: As described in Section 4 above.
• Legal requirements: When required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
• With your consent: We may share your information for other purposes when you give us explicit consent.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect core Platform functionality. Where required by law (e.g., in the EU), we will obtain your consent before placing non-essential cookies.

We retain your personal information for as long as your account is active or as needed to provide you with the Platform. After account closure:

Deleting your account

You can delete your account at any time in the Levvn app (Settings → Delete Account) or on the web (Settings → Account). Deleting your account signs you out everywhere and immediately erases your personal information: your name, email, phone, photo and business details, sign-in details and passkeys, devices, Levvn Assistant conversations, saved searches and favorites, your documents and the files you attached to messages, your public profile and listings, and your marketing contact record. Records we must keep for the periods above (payments, invoices, leases, and the messages, reviews, and support tickets other people are part of) are kept without your name or contact details. See getlevvn.com/account-deletion for details, including how to ask us to delete your account if you can't sign in.

Payments and money owed when you close your account

When you close your Levvn account, your subscriptions are canceled and future automatic payments through Levvn are stopped. Payments already initiated may still be completed. Closing your account does not cancel amounts you owe or amounts owed to you. Payment methods, payout accounts, and related financial records may be retained by Stripe or Levvn as necessary and permitted to complete existing transactions, handle refunds and disputes, meet applicable requirements, or resolve outstanding financial obligations. Any collection of outstanding amounts must be appropriately authorized.

Regardless of your location, you have the right to:

• Access: the personal information we hold about you.
• Correct: inaccurate or incomplete information.
• Delete: your account and personal data, subject to legal retention requirements. You can do this yourself in the app or on the web (see Section 8).
• Export: your data in a portable, machine-readable format (JSON). You can download it yourself in Settings → Privacy, or email us.
• Object: to certain processing activities.

To exercise any of these rights, contact us at privacy@sympleleases.com. We will respond within 30 days. We will not charge a fee for making a request unless the request is manifestly unfounded or excessive.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know: You may request details about the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.
• Right to delete: You may request deletion of your personal information, subject to certain legal exceptions (e.g., completing a transaction, legal obligations, security).
• Right to correct: You may request correction of inaccurate personal information we hold about you.
• Right to opt out of sale/sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this ever changes, we will provide a “Do Not Sell or Share My Personal Information” mechanism.
• Right to limit use of sensitive information: We only use sensitive personal information as necessary to provide the Platform and do not use it for profiling.
• Non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights. You will receive equal service and pricing.

To submit a verifiable consumer request, email privacy@sympleleases.com. We will verify your identity before processing and respond within 45 days.

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing

Your GDPR Rights

• Right of access, rectification, erasure, and data portability.
• Right to restrict or object to processing.
• Right to withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint with your local supervisory authority.

Data Protection Contact

For GDPR-related inquiries, contact our data protection team at privacy@sympleleases.com. We will respond within 30 days.

The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us at privacy@sympleleases.com.

Symple Leases is based in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. We take appropriate measures to ensure that your data is treated securely and in accordance with this Privacy Policy, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers from the EEA.
• UK International Data Transfer Agreement or UK Addendum to the EU SCCs for transfers from the UK.
• Contractual data protection obligations with all sub-processors to ensure equivalent safeguards.

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Row-level security (RLS) policies on our database to ensure users can only access their own data.
• Role-based access controls (RBAC) to limit internal access to personal information.
• Regular security reviews and monitoring.
• Secure, hashed password storage with multi-factor authentication support.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and by posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes your acceptance of the revised policy. If you do not agree with the changes, you may close your account before they take effect.