Privacy Policy

Version: 2026-04-28 · Last updated: 2026-04-28

Leva Pte. Ltd. ("Leva," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over it.

1. Information We Collect

Information you provide directly

Account: email address (used for sign-in via magic link), display name, and your role (brand or creator).
Creator onboarding: full name, WhatsApp number, gender (where you choose to share it), per-format rates (Reel / video, Story, Static post), willingness to accept product-in-lieu, PayNow number, PayNow name, your audience-demographics screenshots, and any free-form note you write to our team.
Brand onboarding: company name, contact name, email, campaign briefs (text, attachments, target audience, budget bands), and brand assets you upload.
Consents: we record the version of the Terms and Privacy Policy you accepted, the date of acceptance, your age confirmation, and your brand-discovery visibility preference.
Communications: messages you send us via WhatsApp, Instagram, Telegram, or email.

Information we collect from public sources

Public profile data: we discover Instagram and TikTok profiles using public data (handle, display name, bio, follower / following / post counts, profile picture, recent public posts, engagement metrics, business category). We do not access private accounts or message inboxes.
When a creator successfully claims a profile, we link this public data to the creator's Leva account.

Information collected automatically

Usage data: pages visited, features used, timestamps, and interactions with the Service.
Device information: browser type, operating system, IP address, and device identifiers.
Cookies: we use essential cookies to keep you signed in. We do not currently use third-party advertising cookies.

2. How We Use Your Information

To operate the marketplace — show creators in our gallery (where they have consented to public discovery), match brands with creators, and route campaign briefs.
To verify creator claims (we may compare your submitted info to public profile signals and reach out via WhatsApp).
To send transactional email — application received, claim approved, campaign opportunities — and operational WhatsApp messages.
To improve the Service: analyze usage, debug issues, train internal classifiers (we do not train external generative models on your private data).
To comply with legal obligations and resolve disputes.

We do not sell your personal data.

3. How We Share Your Information

Brands you opt into: if your discovery visibility is set to public, brands browsing the Leva gallery can see your public profile data and engagement metrics. Your private fields (rates, phone, PayNow, audience screenshots, gender, note) are not shown to brands by default — we share only what is necessary to facilitate a specific campaign you opt into.
Service providers: Supabase (hosting, database, storage — Singapore region), AWS Simple Email Service (email delivery), Anthropic (AI-assisted brief parsing — only the brief text/attachments you submit are sent), Apify (used to discover public creator data, not to share your account data), and Vercel (web hosting). All providers are bound by their own security and confidentiality terms.
Legal: when required by law, regulation, or legal process, or to protect Leva or others from harm.
Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.
With your consent: when you explicitly authorize us to share specific data.

4. Data Retention

We retain your data while your account is active. After account closure or claim revocation, we may retain creator-application records (rates, audience proofs, consent logs) for up to seven (7) years for audit, dispute resolution, and tax purposes. Aggregated and anonymized data may be retained indefinitely.

5. Data Security

We implement reasonable security measures including encryption in transit (TLS), encryption at rest, role-based access control on our database (creator data, audience screenshots, and admin tools sit on different access tiers), and multi-factor authentication for staff accessing administrative dashboards. Audience-screenshot uploads are stored in a private bucket accessible only to you and authorized Leva staff during application review. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. International Data Transfers

Our database and storage are hosted in Singapore. Email delivery (AWS SES) and AI parsing (Anthropic) may process limited data outside Singapore. By using the Service, you consent to these transfers.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data (subject to retention requirements above).
Object to or restrict certain processing.
Request a portable copy of your data.
Withdraw consent at any time (where processing is based on consent).
Change your brand-discovery visibility setting from public to private.

To exercise any of these rights, contact us at hi@leva.sg. We will respond within 30 days.

8. PDPA Compliance (Singapore)

We comply with the Personal Data Protection Act 2012 (PDPA) of Singapore. We collect, use, and disclose personal data only for purposes a reasonable person would consider appropriate, and with your consent where required. Our Data Protection Officer can be reached at hi@leva.sg.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. Creators must confirm they are 18 or older during onboarding. If we become aware that we have collected data from someone under 18, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The Version date at the top of this page reflects the latest material revision. We may require you to re-accept the Policy before continuing to use the Service if changes are significant.

11. Contact

If you have questions or concerns about this Privacy Policy, contact us at hi@leva.sg.