Privacy Policy

Last updated: November 6, 2026

Who we are

LevinoxAI LLC is a Wyoming limited liability company and the controller of the information described below.

Postal address

LevinoxAI LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States

Privacy contact

adam@levinoxai.com

General contact

hello@levinoxai.com

This policy covers three groups: people who visit this website, business owners and staff we contact or research, and our clients.

1. If you only visit this website

We collect nothing from you directly. There is no contact form, no analytics, no advertising or tracking script, no embedded video or social widget, and no cookie is set by this site. The fonts come from your own device rather than a font service, so loading a page here does not send your details to any third party. See the Cookie Policy for detail.

Our host, Vercel, records standard server log data for every request: your IP address, the page, the time and your browser's user-agent. We use it only to deliver the site and investigate errors and abuse, on the basis of our legitimate interest in running a secure website. We do not combine it with anything else or build a profile from it.

2. If we contact you about our services

We run outbound email, so we may email you at work about services that could be relevant to your business. Here is exactly what that involves.

What we collect

• Business contact details: business name, website, public business phone number, and the name, job title and work email address of the owner or a senior person.
• Public website and listing signals: for example whether a website uses an analytics or advertising tag or an online booking tool, what its page title and headings say, and the public review count and star rating on its Google listing.
• Your correspondence, if you reply, and whether and when you asked us to stop.

Where it comes from

Public sources only. We do not buy marketing lists. Our sources are company websites, public business listings such as Google Maps, public company and licence registers, business email lookup and verification services (we use Hunter), and web search. We do not use private databases, social media scraping, or any source that requires getting around a login.

Why we are allowed to do this

Under UK and EU data protection law we rely on our legitimate interests (Article 6(1)(f)) in reaching businesses that plausibly need what we offer. We have weighed that against your interests: we use only work contact details in a business role, never personal or home details; we contact a business about something specific to that business rather than sending bulk identical mail; we send a maximum of four emails and then stop whether or not you reply; and we stop immediately and permanently if you ask. In the United States our emails follow the CAN-SPAM Act, which permits business-to-business email with accurate headers, an honest subject line, a valid postal address and a working opt-out.

You have an absolute right to object to direct marketing. If you object, we stop — see your rights.

How to make it stop

Reply to any of our emails with anything that means no — "no", "not interested", "unsubscribe", "remove me" — or email adam@levinoxai.com. We add you to a suppression list so our system will not contact you again. We keep the minimum needed to honour that (your email address and domain), because deleting it entirely is what would let us contact you again by mistake.

3. If you book a call or become a client

• Booking a call. We use Calendly. When you book, it collects your name, email address, time zone and anything you type into the booking questions, and shares it with us. Calendly's own privacy notice governs what it does on its site.
• Starting a pilot. We send a kickoff questionnaire (hosted on Google Forms) covering your niche, target city, sending inbox, the name that signs the emails, your time zone and your existing client list so we can exclude them. We ask for that client list because the work cannot be done correctly without it, and we use it for nothing else.
• Running the pilot. With your permission we connect to one of your mailboxes to send the emails you have approved and to detect replies to them. We also handle the business contact details of the owners we research for you.
• Invoicing. We keep the records needed to issue invoices and meet tax and accounting obligations. Payments are handled by our payment provider; we do not see or store your full card or bank details.

When we work inside your mailbox and on your prospect data, we act on your instructions as your processor, and you remain the controller of that data. We use it only to deliver the work you asked for.

4. Google user data

Our automation connects to Google accounts that we or our clients own (Gmail and Google Sheets), only with the account owner's permission. We use that access to send emails the account owner has approved, to detect replies to those emails, and to read and update the owner's own spreadsheets. We do not use Google user data for advertising, we do not sell it, and we do not share it with anyone except the service providers listed below that are needed to run this automation. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who else handles the data

We keep the list short on purpose. Each of these processes information on our behalf under its own terms.

Service providers we use

Provider	What it does for us
Google (Workspace, Cloud, Maps, Gemini)	Our email, the server our automation runs on, business listing data, and the model that reads public pages
n8n (self-hosted by us on Google Cloud)	The automation itself, on our own server rather than a shared service
Hunter	Finding and verifying work email addresses
Calendly	Scheduling calls
Vercel	Hosting this website
Our payment provider	Issuing invoices and receiving payment

We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to build advertising profiles. We make no decisions about you by automated means that have a legal effect on you.

6. International transfers

We are based in the United States and most of our providers are too, so information about people in the UK or the EU is processed in the United States. Where that happens we rely on the transfer safeguards our providers offer, such as the EU–US and UK–US Data Privacy Framework or standard contractual clauses. You can ask us which applies to a particular provider.

7. How long we keep it

Retention periods

What	How long
Research and contact details of businesses we have not contacted	Up to 12 months, then deleted if unused
Contact details and correspondence of businesses we have emailed	Up to 24 months after the last contact
Opt-out and suppression records	Kept indefinitely, because this is what stops us contacting you again
Client work data, including prospect lists we build for a client	For the engagement and 12 months after, or sooner if the client asks
Invoices and tax records	As long as US tax law requires, currently 7 years
Website server logs	As long as our host retains them, about 30 days

8. Your rights

Wherever you are, you can ask us to tell you what we hold about you and where we got it; give you a copy; correct it; delete it; stop emailing you, which we will always do; or stop or limit how we use it while we look into a complaint.

Email adam@levinoxai.com. We reply within 30 days and we do not charge for it. We may ask you to confirm you control the email address in question, so that we do not hand your details to someone else.

If you are in the UK or the EU and you think we have handled your data badly, please tell us first so we can fix it, but you also have the right to complain to a data protection authority: the Information Commissioner's Office in the UK, or your national supervisory authority in the EU. If you are in California, we do not sell or share personal information as those terms are defined under the CCPA, and we will not discriminate against you for exercising a privacy right.

9. Security

Our automation runs on a server we control, with access limited to the people who need it and connections encrypted in transit. Accounts that hold data use multi-factor authentication where the provider supports it. No system is perfectly secure, and we will tell you and the relevant authority without undue delay if a breach affects your data.

10. Children

Our services are sold to businesses and are not directed to anyone under 18. We do not knowingly collect information about children.

11. Changes

If we change this policy we will update the date at the top. If a change materially affects people we have already contacted, we will say so in our next email to them.