Privacy Policy
Last updated: February 26, 2026
1. Introduction
Level Up Basket Corp. (“Company,” “we,” “us,” or “our”) operates DoItFor.Life (the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.
2. Information We Collect
Information you provide
- Account information: name, email address, and authentication credentials when you create an account (directly or via Google/Apple sign-in).
- Messaging data: messages exchanged with your AI assistant via WhatsApp or Telegram, including commands, queries, and content you ask the assistant to process.
- Connected service data: emails, calendar events, task lists, and financial records that you authorize the assistant to access on your behalf.
- Payment information: processed securely by Stripe. We do not store your credit card number.
- Onboarding data: business type, preferences, and configuration choices you make during setup.
Information collected automatically
- Usage data: pages visited, features used, token consumption, skill installations, and interaction patterns.
- Device information: browser type, operating system, and screen resolution.
- Log data: IP address, access times, and referring URLs.
- Instance telemetry: virtual machine health status, uptime metrics, and error logs (no message content).
3. How We Use Your Information
- Provide, operate, and improve the Service.
- Process AI assistant actions on your behalf (email triage, task management, calendar scheduling, financial monitoring).
- Build and deploy custom skills through the Skill Factory.
- Monitor instance health and security through the Guardian system.
- Process payments and manage subscriptions via Stripe.
- Track token usage for billing purposes.
- Send transactional emails (account confirmations, receipts, security alerts).
- Respond to support requests.
- Detect, prevent, and address technical issues or abuse.
4. How We Share Your Information
We do not sell your personal information. We may share data with:
- Google Cloud Platform: hosting, compute (virtual machines for your assistant), storage, and AI processing (Vertex AI / Gemini models). Data is processed in accordance with Google’s data processing terms.
- Firebase: authentication, analytics, and push notifications.
- Stripe: payment processing and subscription management.
- Telegram / WhatsApp: message delivery to and from your AI assistant via their respective APIs.
- Meta (Facebook Pixel): anonymous conversion tracking for advertising optimization. No personal data is shared.
- Google Analytics: anonymous usage analytics.
- Open-source AI agent runtime: the underlying runtime that powers your assistant. Runs entirely within your isolated virtual machine; no data leaves your instance.
- Legal requirements: when required by law, subpoena, or government request.
- Business transfers: in connection with a merger, acquisition, or sale of assets.
5. AI Processing
The Service uses Google Vertex AI (Gemini models) to process your requests. When your assistant performs actions, your data is sent to AI models for processing. This data is processed in real time and is not retained by the AI service after processing, in accordance with Google’s Vertex AI data processing terms.
Your assistant runs on a dedicated virtual machine. Your emails, messages, and other data processed by the assistant are stored only within your isolated instance and our database. They are not used to train AI models.
6. Data Isolation & Encryption
Each user receives a dedicated, encrypted virtual machine. Your data is isolated from other users at the infrastructure level. Disk encryption uses customer-managed encryption keys (CMEK) via Google Cloud KMS. Data is encrypted in transit (TLS 1.3) and at rest.
7. Data Retention
We retain your account data for as long as your account is active. Token usage logs are retained for 12 months for billing purposes. Guardian security logs are retained for 90 days. If you delete your account, we will delete your personal data and terminate your virtual machine within 30 days, except where retention is required by law.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (including your virtual machine and all stored content).
- Object to or restrict certain processing.
- Request data portability (export your assistant’s data).
- Withdraw consent at any time.
To exercise these rights, contact us at privacy@doitfor.life.
9. Cookies & Local Storage
We use essential cookies for authentication and session management. We use local storage for app preferences and offline functionality (PWA). We use the Facebook Pixel and Google Analytics for anonymous conversion tracking and usage analytics. You can manage cookie preferences through our cookie consent banner.
10. Children’s Privacy
The Service is not directed to children under 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected data from a child under 18, we will delete it promptly.
11. International Users
Your data is processed and stored in the United States (Google Cloud us-central1 region). By using the Service, you consent to the transfer of your data to the United States, which may have different data protection laws than your country of residence.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Continued use of the Service after changes constitutes acceptance.
13. Contact Us
If you have questions about this Privacy Policy, contact us at privacy@doitfor.life.
Level Up Basket Corp.