1. Introduction
Sitelevel, Inc. ("Sitelevel," "we," "us," or "our") is committed to protecting the privacy of our customers and users. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI-powered financial planning and analysis platform and related services ("Services").
Please read this policy carefully. By using the Services, you agree to the practices described here. If you do not agree, please discontinue use of the Services.
2. Information we collect
2.1
Information You Provide Directly
Account Information: When you create an account, we collect your name, work email address, company name, job title, and password.
Billing Information: We collect payment-related information such as billing address and payment method details. Full payment card data is processed by our third-party payment processor and is not stored on our systems.
Communications: If you contact us for support or other inquiries, we collect the contents of those communications.
User-Generated Content: Any data, prompts, queries, or inputs you submit through the platform.
2.2
Financial and Business Data
When you connect your financial systems to Sitelevel — including ERPs, data warehouses, billing platforms, and CRMs — we access and process the financial and operational data contained in those systems solely to deliver the Services to you. This may include:
Revenue, expense, and budget data
Location- or unit-level financial performance data
Forecasts, variance reports, and other FP&A outputs
Organizational and operational metadata
This data remains yours. We do not sell it, share it for advertising purposes, or use it to train our models without your explicit consent.
2.3
Usage and Technical Data
We automatically collect certain technical information when you use the Services, including:
IP address and general location
Browser type, operating system, and device information
Pages visited, features used, and time spent on the platform
Referring URLs and clickstream data
Error logs and performance data
2.4
Cookies and Tracking Technologies
We use cookies and similar technologies to maintain session state, remember preferences, analyze usage patterns, and improve the platform. You can control cookie preferences through your browser settings, though disabling certain cookies may affect platform functionality. We do not use cookies to serve third-party advertising.
3. How we use your information
We use the information we collect to:
Provide and operate the Services, including processing queries, generating AI Outputs, and managing integrations
Personalize your experience, including remembering preferences and surfacing relevant features
Process payments and manage your subscription
Communicate with you, including sending service updates, security alerts, and responses to your inquiries
Improve and develop the platform, including analyzing usage patterns and diagnosing technical issues
Ensure security and prevent fraud, including monitoring for unauthorized access or misuse
Comply with legal obligations, including responding to lawful requests from government authorities
Enforce our Terms of Service and other applicable agreements
We do not use your Customer Data to train AI models without your explicit, opt-in consent.
4. How we share your information
We do not sell your personal information. We may share information in the following limited circumstances:
4.1
Service Providers
We work with trusted third-party vendors who assist us in operating the platform, including cloud infrastructure providers, payment processors, analytics tools, and customer support platforms. These providers are contractually obligated to use your information only to perform services on our behalf and in accordance with this policy.
4.2
Third-Party Integrations
When you connect a third-party system (such as an ERP or CRM) to Sitelevel, data flows between that system and our platform as directed by you. Your use of those third-party services is subject to their own privacy policies and terms.
4.3
Business Transfers
If Sitelevel undergoes a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will provide reasonable notice before your information becomes subject to a materially different privacy policy.
4.4
Legal Compliance and Protection
We may disclose your information if we believe in good faith that doing so is necessary to:
Comply with applicable law, regulation, or legal process
Protect the rights, property, or safety of Sitelevel, our users, or the public
Detect, prevent, or address fraud, security, or technical issues
4.5
With Your Consent
We may share your information for other purposes with your explicit consent.
5. Data retention
We retain your information for as long as your account is active or as necessary to provide the Services. Following termination of your account, we will retain your data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements, after which it will be securely deleted or anonymized.
You may request deletion of your data at any time by contacting us at privacy@sitelevel.com. Certain information may be retained as required by law or for legitimate business purposes even following a deletion request.
6. Data security
We implement industry-standard technical and organizational safeguards to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:
Encryption of data in transit (TLS) and at rest (AES-256)
Role-based access controls and least-privilege principles
Regular security assessments and vulnerability testing
Employee training on data handling and security practices
No method of transmission or storage is completely secure. While we take the protection of your data seriously, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.
7. Your privacy rights
Depending on your location, you may have certain rights regarding your personal information, including:
Access: The right to request a copy of the personal information we hold about you
Correction: The right to request correction of inaccurate or incomplete information
Deletion: The right to request deletion of your personal information, subject to certain exceptions
Portability: The right to receive your data in a structured, machine-readable format
Objection or Restriction: The right to object to or request restriction of certain processing activities
Withdrawal of Consent: Where processing is based on consent, the right to withdraw that consent at any time
To exercise any of these rights, please contact us at privacy@sitelevel.com. We will respond to your request within the timeframe required by applicable law. We will not discriminate against you for exercising your privacy rights.
8. California privacy rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect and how it is used, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as defined under California law. To submit a request, contact us at privacy@sitelevel.com or visit our Privacy Request page.
9. European privacy rights (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, Sitelevel processes your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable local laws. Our legal bases for processing include:
Contract performance: Processing necessary to deliver the Services under our agreement with you
Legitimate interests: Processing for product improvement, security, and fraud prevention, where those interests are not overridden by your rights
Legal obligation: Processing required to comply with applicable law
Consent: Where you have provided explicit consent
For cross-border data transfers outside the EEA, we rely on Standard Contractual Clauses or other lawful transfer mechanisms approved under applicable law. To exercise your GDPR rights or to contact our data protection representative, please email info@sitelevel.com.
10. Children's privacy
The Services are intended for business use by adults and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
11. Links to third-party sites
The Services may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on our website and, where appropriate, sending you an email notification. Your continued use of the Services following such notice constitutes your acceptance of the updated policy.
13. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: info@sitelevel.com