Privacy Policy

Even Level is a B2B SaaS platform built for trade contractors and restoration companies to manage their accounts receivable and collections workflows. This Privacy Policy explains what data we collect, how we use it, how we protect it, and what rights you have.

We keep this plain and readable on purpose. If something isn't clear, email us at support@evenlevel.com.

1. Who This Policy Applies To

This policy applies to:

• Account holders — businesses and individuals who sign up for Even Level
• Team members — users added to an account by an account holder
• End contacts — clients of our customers whose information is managed within Even Level (e.g., invoice recipients)

Even Level is a business-to-business (B2B) service. We are not directed at consumers or children under 13.

2. Information We Collect

2.1 Account Information

• Name and email address
• Company name
• Password (stored as a one-way hash — we never store your plain-text password)
• Subscription and billing information (processed via Stripe — see Section 6)

2.2 QuickBooks Data

If you connect QuickBooks Online, we sync invoice data (customer names, amounts, balances, due dates) and customer contact information. We access QBO via OAuth authorization you grant. Depending on features used, Even Level may read from and write to your QBO account — we will always clearly indicate within the product when an action writes to QuickBooks. Your OAuth token is stored encrypted at rest.

2.3 Contact Information You Add

You may add or import client contact information including names, emails, phone numbers, notes, and activity history. When you delete an end contact record within Even Level, that deletion is processed promptly. Backup copies may persist up to 30 days before being fully purged.

2.4 Email and SMS Credentials

SMTP passwords and Twilio API credentials are stored encrypted at rest and used solely to send communications on your behalf.

2.5 Activity and Usage Data

We collect platform action logs (emails sent, SMS sent, calls logged, notes, payments) and general usage data (pages visited, features used, error logs) to operate and improve the service.

2.6A Call Recordings and Transcripts

When you use Even Level's calling feature, we store audio recordings of calls made through the platform and AI-generated transcripts, summaries, and extracted commitments from those recordings. Call recordings and transcripts are associated with the relevant customer record and accessible to authorized users in your organization. Recordings are retained while your account is active and deleted per our standard data retention policy in Section 5.

2.6B AI Processing

Even Level uses artificial intelligence and large language model technology to provide features such as email draft generation, account summaries, call transcript analysis, and suggested next steps. To deliver these features, your invoice data, customer information, communication history, and call transcripts may be sent to third-party AI service providers for processing. AI service providers are listed in our subprocessor table in Section 6. AI providers process your data solely to generate outputs for your use within Even Level and do not use your data to train their models.

2.6C Email Open Tracking

Emails sent through Even Level may include a tracking pixel that records when the email is opened by the recipient. Open tracking data is used to measure the effectiveness of your follow-up communications and is displayed in your template performance reports. Recipients are not individually notified of the tracking pixel. If you prefer not to use open tracking, contact support@evenlevel.com.

2.6 Cookies

We use session cookies only to keep you logged in. No advertising cookies, tracking cookies, or third-party analytics (no Google Analytics, no Facebook Pixel). Disabling cookies will prevent login.

3. How We Use Your Information

• Provide the service — sync QBO data, send emails/SMS, display AR dashboard
• Manage billing — process subscriptions, send receipts
• Customer support — respond to questions and troubleshoot
• Improve the product — aggregate usage analysis only, never individual profiling
• Security — detect fraud and unauthorized access
• Legal compliance — respond to lawful government requests. Where permitted by law, we will attempt to notify you before disclosing your information and will push back on requests we believe are overbroad.

We do not sell your data. We do not use your data for advertising.

4. How We Store and Protect Your Data

• Encryption at rest — QBO tokens, SMTP passwords, Twilio credentials encrypted in the database
• Encryption in transit — all traffic over HTTPS (TLS)
• Password hashing — one-way hash; we cannot recover your password
• Access controls — production access limited to authorized personnel
• No card data stored — Stripe handles all payment data (PCI-DSS compliant)

While we take these measures seriously, no system can guarantee absolute security. If you believe your account has been compromised, contact us immediately at support@evenlevel.com.

Security incidents: In the event of a data breach affecting your information, we will notify you as required by applicable law.

5. Data Retention

Data is retained while your account is active. After cancellation:

• Retained for 30 days for reactivation or data export
• Permanently deleted after 30 days
• Backup copies purged within an additional 30 days

Email support@evenlevel.com to request faster deletion.

6. Subprocessors and Third-Party Services

Even Level engages the following third-party subprocessors to help deliver the service. Your data may flow through these providers as part of normal platform operation.

We share only what's necessary for each integration. We do not authorize these subprocessors to use your data for their own marketing. We will notify customers of material changes to our subprocessor list.

7. California Privacy Notice (CCPA/CPRA)

Even Level is a B2B platform and does not sell to California consumers directly. However, if your business operates in California or manages information about California residents as end contacts within Even Level, you (as the account holder and data controller) may have obligations under the CCPA/CPRA. We encourage customers who may be subject to CCPA to review their own obligations regarding end contact data managed through Even Level. Contact us at support@evenlevel.com if you need a Data Processing Agreement (DPA) for enterprise compliance purposes.

8. Your Rights

• Access — request a copy of your data
• Correction — fix inaccurate information
• Deletion — delete your account and associated data
• Data portability — export your data

Contact support@evenlevel.com. We respond within 10 business days.

End contacts: please contact the Even Level customer managing your account directly — they are the data controller for their clients' information.

9. Business Transfers

If Plumbob Software LLC is involved in a merger, acquisition, or asset sale, your data may transfer. We will notify you by email before it happens and describe your choices.

10. Changes to This Policy

Material changes will be notified by email or in-app at least 14 days before taking effect. The Effective Date always reflects the last update.

11. Governing Law

Governed by the laws of the State of Texas, without regard to conflict-of-law provisions.

12. Contact Us

Plumbob Software LLC
Email: support@evenlevel.com
Website: evenlevel.com