Privacy Policy

This policy explains how Levare (Matthew Borg trading as Levare, ABN 66 745 568 547) handles personal information collected through the Levare Core website and application (“Levare Core”, “we”, “us”). We handle information in two distinct roles, and it matters which one applies to you:

• As the business you deal with directly — if you visit our marketing site, submit the “Request a call” form, or sign up for a Levare Core account, we are the controller of that information and this policy governs it in full.
• As a service provider to a real estate agency — if a real estate agency uses Levare Core to manage its buyers, vendors, and contacts, and you are one of that agency's buyers, vendors, or contacts, your personal information is entered and controlled by that agency, not by us. We process it only on the agency's instructions, to provide them the CRM service (see “Contacts, buyers, and vendors managed by our customers” below). If you want to access, correct, or delete your own information in that case, please contact the agency directly — we will refer any request we receive to the relevant agency.

• Request a call: name, phone number, email, agency name, and number of agents, submitted through the homepage enquiry form.
• Account signup and use: agency name, your name, email address, and a securely hashed password. If you enable two-factor authentication, we store a TOTP secret used only to verify your login codes.
• Billing: subscription and payment details are handled by our payment processor, Stripe. We store a reference to your Stripe customer and subscription record, but we never see or store your full card number.
• Open-home check-in: if you check in at an open home using a Levare Core QR code, the name, email, and phone number you provide are collected on behalf of, and controlled by, the real estate agency running that open home — see “Contacts, buyers, and vendors managed by our customers” below.
• Usage and device information: standard server logs (IP address, browser type, pages requested, timestamps) generated automatically by visiting the site, used for security and troubleshooting.

Levare Core is a CRM: our customers (real estate agencies and their agents) use it to store and manage information about their own buyers, vendors, and other contacts, including through the open-home check-in page, the vendor portal, and the buyer portal. In relation to that information, we act as a service provider processing data on our customer's behalf, not as the controller. We only use it to operate the software (for example, matching a buyer's saved criteria against new listings, or displaying a vendor's own property in their portal) and we do not use it for our own marketing or sell it to anyone.

• To operate, maintain, and improve Levare Core.
• To respond to enquiries and set up new agency accounts.
• To process subscription payments and manage billing.
• To secure accounts, including two-factor authentication and fraud prevention.
• To send service-related communications (billing, security, product updates).
• To comply with legal obligations.

We do not sell personal information, and we do not use it to serve third-party advertising.

If you choose to connect Google Calendar from Settings, we request access to your calendar events (the calendar.events scope) and your email address, solely to create and keep appointments in sync between Levare Core and your Google Calendar. You can disconnect this at any time from Settings, or by revoking access directly in your Google Account permissions.

Levare Core's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: calendar data is used only to provide and improve the calendar sync feature visible to you, is never used for advertising, and is never transferred to third parties except as needed to provide that feature or as required by law.

We share personal information only with service providers who help us run Levare Core:

• Vercel — application hosting and file storage.
• Prisma Data Platform — database hosting.
• Stripe — payment processing.
• Google — only if you connect Google Calendar.

These providers may store data on servers outside Australia. We take reasonable steps to ensure they protect personal information to a standard consistent with the Australian Privacy Principles.

We use industry-standard safeguards including encrypted connections (HTTPS/HSTS), hashed passwords, optional two-factor authentication, and role-based access controls that keep each agency's data separated from every other agency's. No system is completely secure, and we can't guarantee absolute security of information transmitted to us.

We retain account and customer data for as long as your subscription is active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations. You can request deletion of your account data at any time by contacting us.

Levare Core uses cookies that are strictly necessary to keep you logged in and secure — see our Cookie Policy for details. We don't currently use analytics or advertising cookies.

If we are the controller of your information (see “Who this policy covers” above), you can ask us to access, correct, or delete it, or ask how it's been used, by emailing matthew@levarestudio.com. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC).

Levare Core is a business tool for real estate professionals and is not directed at children.

We may update this policy from time to time. We'll update the “Last updated” date above, and if a change is significant we'll let account holders know by email.

Questions about this policy or your personal information: matthew@levarestudio.com.