Privacy Policy

1. Introduction

LVL2 ("we," "us," or "our") operates the LVL2 platform, including the website at leveltwo.app and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information You Provide

• Account information: name, email address, phone number, and password when you create an account.
• Profile information: display name, handle, bio, avatar, industry type, and studio policies.
• Booking information: appointment details, service preferences, reference images, and scheduling data.
• Payment information: billing details processed securely through Stripe. We do not store full credit card numbers.
• Communications: messages sent through our SMS and email features.

Information Collected Automatically

• Usage data: pages visited, features used, and interaction patterns.
• Device information: browser type, operating system, and device identifiers.
• Cookies: session cookies for authentication and preference storage.

3. How We Use Your Information

• Provide, maintain, and improve the Service.
• Process bookings, payments, and deposits.
• Send appointment reminders, confirmations, and review requests via SMS and email.
• Facilitate communication between service providers and clients.
• Prevent fraud and enforce our Terms of Service.
• Respond to support inquiries and provide customer service.

4. How We Share Your Information

We do not sell your personal information. We may share data with:

• Service providers: Stripe (payments), Twilio (SMS), Resend (email), Supabase (data storage), and Google (calendar integration) to operate the Service.
• Other users: your public profile information (display name, handle, bio, reviews) is visible to clients who view your profile or booking pages.
• Legal requirements: when required by law, subpoena, or to protect our rights.

5. Data Security

We use industry-standard security measures including encryption in transit (TLS), secure authentication, and row-level security policies on our database. Payment processing is handled by Stripe, a PCI-DSS compliant provider.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of marketing communications.
• Export your data in a portable format.

8. SMS and Communications Program

Program Name

LVL2 Booking Updates — operated by LVL2 (leveltwo.app).

Consent and Opt-In

When submitting a booking request on an artist's profile page (e.g., leveltwo.app/russellcain), you may enter your phone number and check a consent checkbox that reads:

By checking this box and submitting the form, you expressly consent to receive transactional SMS messages from LVL2 at the phone number you provided. This checkbox is unchecked by default. Your consent to receive SMS is not a condition of any purchase or booking. You may complete a booking without providing a phone number or without checking the SMS consent box.

Types of Messages

We send the following types of transactional SMS messages only:

• Booking confirmations: Confirmation that your booking request has been received.
• Status updates: Notifications when your booking status changes (e.g., approved, rescheduled, or rejected).
• Appointment reminders: Reminders about upcoming appointments.
• Deposit and payment links: Secure links to complete deposit or balance payments.

We do not send marketing, promotional, or advertising SMS messages. All messages are transactional and directly related to your booking activity.

Message Frequency

Message frequency varies based on your booking activity. You will typically receive 2–5 messages per booking.

Opting Out

You can opt out of SMS messages at any time by replying STOP to any message you receive from us. After opting out, you will receive one final confirmation message and no further messages will be sent. You can opt back in by replying START or by providing your phone number and checking the consent box again during a future booking.

Help

For help with SMS messages, reply HELP to any message or contact us at support@leveltwo.app.

Carrier Liability

Standard message and data rates may apply depending on your mobile carrier and plan. LVL2 is not responsible for any charges from your mobile carrier. Carriers are not liable for delayed or undelivered messages.

No Sharing

We do not share, sell, rent, or trade your phone number or SMS opt-in data with any third parties or affiliates for marketing purposes. Phone numbers collected for SMS consent will only be used to send the transactional messages described above.

9. Google User Data

Our Service integrates with Google Calendar to provide sync features. If you connect your Google account, we access your calendar data solely to:

• Display your external events to prevent booking conflicts.
• Sync your LVL2 appointments to your Google Calendar (if enabled).

Limited Use Disclosure: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising purposes.

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or your data, contact us at support@leveltwo.app.