Privacy Policy

Last updated: August 2, 2026

Welcome to Levra ("Levra", "we", "us", or "our"). Levra is a digital storefront and prompt library that helps you create professional product photography, branding, and creative outputs with AI tools. This Privacy Policy explains how we collect, use, store, and share personal information when you visit levra.io or use our website, accounts, purchases, and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

Information We Collect

We collect information that you provide directly, information collected automatically when you use the Service, and information from payment and authentication providers.

Account and contact information

When you create an account, sign in, contact support, or purchase a plan, we may collect:

  • Name and email address
  • Account credentials (passwords are stored in hashed form)
  • Google account profile details if you sign in with Google (such as name, email, and profile identifier)
  • Support messages and related correspondence
  • Subscription and order details linked to your account

Usage and technical data

We automatically collect technical and usage information such as IP address, browser type, device information, pages visited, referring URLs, approximate location derived from IP, timestamps, and interactions with prompts, categories, checkout, and account features. This helps us operate, secure, and improve the Service.

Payment information

Payments are processed by Stripe. Levra does not store your full card number or payment credential details on our servers. We may receive limited payment metadata from Stripe, such as payment status, amount, currency, transaction identifiers, and billing-related information needed to fulfill your order and manage your subscription access.

Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences (such as theme or locale), secure sessions, and understand how the Service is used.

Essential cookies are required for authentication and core site functionality. Analytics cookies or similar technologies may be used to measure product usage and improve performance. You can control cookies through your browser settings, but disabling essential cookies may prevent some features from working.

How We Use Your Information

We use the information we collect to:

  • Create and manage your Levra account
  • Provide access to free and paid prompt libraries based on your subscription
  • Process purchases, confirm orders, and deliver digital access
  • Send transactional emails such as account verification, password resets, and order confirmations
  • Provide customer support and respond to inquiries
  • Monitor, secure, and improve the Service
  • Analyze product usage and performance (including through analytics tools)
  • Detect fraud, abuse, and unauthorized access
  • Comply with legal obligations and enforce our Terms of Service

Legal Bases for Processing

Depending on your location and applicable law, we process personal data on one or more of the following bases:

These include:

  • Performance of a contract — to provide the Service and fulfill purchases
  • Legitimate interests — to secure, improve, and operate Levra in a way that does not override your rights
  • Consent — where required for certain cookies, analytics, or optional communications
  • Legal obligations — where we must retain or disclose information to comply with law

Analytics

We use analytics tools to understand how users interact with Levra, diagnose issues, and improve the product experience. These tools may collect device, usage, and event data associated with your session or account.

  • PostHog — product analytics and usage insights (hosted in the EU for Levra)
  • Other infrastructure or logging providers necessary to operate and monitor the Service

Data Retention

We retain personal information for as long as your account remains active or as needed to provide the Service, fulfill purchases, resolve disputes, enforce agreements, and meet legal, tax, or accounting requirements.

When information is no longer needed, we delete or anonymize it, unless a longer retention period is required or permitted by law. Order and payment records may be retained longer for compliance and fraud-prevention purposes.

International Data Transfers

Levra may process and store information in Saudi Arabia and in other countries where our service providers operate, including payment, hosting, authentication, email, and analytics providers.

When we transfer personal data internationally, we take reasonable steps to ensure appropriate safeguards are in place consistent with applicable law.

By using the Service, you understand that your information may be transferred to and processed in countries that may have different data-protection laws from your country of residence.

Disclosure of Data

Legal requirements

We may disclose your information if we believe in good faith that such disclosure is necessary to:

  • Comply with applicable law, regulation, legal process, or governmental request
  • Enforce our Terms of Service or other agreements
  • Protect the rights, property, or safety of Levra, our users, or the public
  • Detect, prevent, or address fraud, security, or technical issues

Service providers and business transfers

We share information with trusted service providers that help us operate Levra, such as Stripe (payments), Google (authentication), Cloudflare (hosting and infrastructure), email delivery providers, and analytics providers. These providers may process data only as needed to perform services on our behalf.

If Levra is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

Security of Data

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted transport (HTTPS), hashed passwords, access controls, and secure payment processing through Stripe. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

Depending on applicable law, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information, subject to legal exceptions
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent
  • Request a copy of certain information in a portable format

To exercise these rights, contact us at support@levra.io. We may need to verify your identity before responding. We will respond within a reasonable period consistent with applicable law.

Service Providers

We engage third-party companies and individuals to facilitate the Service, including for:

  • Payment processing (Stripe)
  • Authentication (Google OAuth)
  • Hosting, CDN, and infrastructure (Cloudflare)
  • Product analytics (PostHog)
  • Transactional email delivery

These providers have access to personal information only to perform tasks on our behalf and are obligated not to disclose or use it for other purposes.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or the Service.

When we make material changes, we will update the "Last updated" date at the top of this page and may provide additional notice where appropriate.

Your continued use of the Service after an updated Privacy Policy becomes effective constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at: