1. Who we are
Level Four Seven Ltd. is the controller of personal data described in this notice unless we state otherwise. We are registered in England and Wales with company number 17151358. Our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Privacy enquiries and rights requests can be sent to support@levelfourseven.com.
2. Personal data we process
Depending on how you interact with us, we may process:
- Account data: name, email address, organisation, authentication identifiers, account status and plan.
- Service activity: searches, filters, viewed organisations, watchlists, bookmarks, Pathfinder activity, usage allowances, saved AI Assistant answers and similar workspace activity.
- Analytics data: where you consent, pseudonymous analytics identifiers, pages or product routes visited, referring and campaign information, browser/device context and deliberately instrumented website or product interactions. For signed-in analytics we may associate activity with an internal account identifier and account type; we do not send your name or email address to PostHog as analytics identity properties.
- AI Assistant data: prompts, conversation content, generated responses and technical metadata needed to provide and protect the feature.
- Support and communications: support tickets, messages, contact details, status history and correspondence.
- Technical and security data: IP address, browser/device information, timestamps, session identifiers, diagnostic logs, security events and fraud/abuse signals.
- Subscription and transaction data: plan, billing status, transaction references and invoice information when paid subscriptions are enabled. Payment card details may be handled directly by a payment provider rather than stored by us.
- Professional/public-source data: names, roles and other professional information about people associated with companies, investors and other organisations covered by our intelligence database.
We do not ask users to submit special-category data through ordinary use of the service.
3. Why we use personal data and our lawful bases
| Purpose | Typical lawful basis |
|---|---|
| Create and administer accounts; provide requested features and subscriptions | Performance of a contract or steps requested before entering a contract |
| Save preferences, watchlists, bookmarks, recent activity and research workspace state | Contract; legitimate interests in providing a useful service |
| Measure optional website and product analytics, including journeys, feature adoption and retention | Consent |
| Operate the AI Assistant and return responses | Contract; legitimate interests in providing and improving the requested service |
| Provide support and transactional communications | Contract; legitimate interests in customer support |
| Protect accounts, prevent abuse, enforce limits and investigate incidents | Legitimate interests in security, fraud prevention and service integrity; legal obligation where applicable |
| Maintain professional intelligence about people acting in business or professional capacities | Legitimate interests in providing accurate deep-tech market intelligence, balanced against the rights of the individuals concerned |
| Comply with accounting, tax, legal and regulatory duties | Legal obligation |
| Optional direct marketing, where used | Consent where required; otherwise legitimate interests where permitted by law and subject to opt-out rights |
Where we rely on legitimate interests, we consider necessity, proportionality and the effect on the individuals concerned. You may object to processing based on legitimate interests in appropriate circumstances. Where we rely on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.
4. Where data comes from
We obtain personal data directly from users, from technical operation of the service, from consented analytics activity and from public or commercially available sources used to build professional intelligence. Those sources can include company websites, public announcements, regulatory and corporate records, patent and publication sources, careers pages, news sources and other publicly accessible professional material.
If information about you appears in our intelligence database and you believe it is inaccurate, inappropriate or should be removed, contact us and identify the relevant record.
6. AI Assistant processing
When you use the AI Assistant, relevant prompts, platform context and generated responses may be sent to a third-party AI processing provider so the requested response can be produced. We configure AI processing services in accordance with the provider terms available to us and our data-protection obligations.
You should not place information in an AI prompt that you are not authorised to disclose. Saved conversations or answers may remain in your Level Four Seven account until deleted or your account is closed, subject to backup, security and legal-retention requirements.
7. International transfers
We configure PostHog analytics to use its European Union cloud region. Some suppliers or their subprocessors may nevertheless operate internationally. Where personal data is transferred outside the United Kingdom or European Economic Area and the destination is not covered by an applicable adequacy decision, we use contractual or other safeguards required by applicable data-protection law, such as approved standard contractual clauses or UK transfer mechanisms where appropriate.
8. How long we keep data
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, security and dispute-resolution needs. Our normal approach is:
- account and workspace data: while the account is active and for a limited period after closure where needed for recovery, security or legal claims;
- analytics browser identifiers: up to 180 days after consent, unless you withdraw consent or clear browser storage sooner; analytics event data is retained only for as long as needed for usage analysis and product development under our configured analytics retention;
- support correspondence: normally up to 24 months after the request is resolved, unless a longer period is needed for an ongoing dispute or legal obligation;
- security and diagnostic logs: retained for limited periods proportionate to security and operational needs;
- AI Assistant data: according to account retention choices and any limited processor-side retention needed to provide, secure or comply with legal obligations relating to the service;
- financial and transaction records: for the period required by applicable accounting and tax law;
- professional/public-source intelligence: while it remains relevant to the service, subject to correction, review and applicable rights.
9. Your data-protection rights
Depending on the law and circumstances, you may have rights to access, correct or erase personal data; restrict processing; object to processing; receive certain data in portable form; and withdraw consent where processing is based on consent.
Your right to object: where we rely on legitimate interests, you can object to that processing. We will consider your circumstances and stop processing unless we have compelling legitimate grounds to continue or the processing is needed for legal claims.
To exercise a right, email support@levelfourseven.com. We may need to verify your identity before acting on a request.
10. Security
We use technical and organisational measures designed to protect personal data, including access controls, authenticated services, encryption, logging and restricted administrative access. No internet service can guarantee absolute security.
If you discover a security issue, please report it to support@levelfourseven.com.
11. Complaints, cookies and changes
If you have a privacy concern, contact us first so we can investigate it. You also have the right to complain to the UK Information Commissioner’s Office where UK data-protection law applies. If another European data-protection authority has jurisdiction, you may also have the right to complain to that authority.
Our use of cookies and similar storage technologies, including analytics controls, is described in the Cookie Policy.
We may update this notice when our processing, suppliers or legal obligations change. The current version and its update date will remain available on this page.