Privacy Policy

Levercomm Inc. (Montréal, Québec, Canada) provides underwriting and origination software for commercial mortgage professionals. Levercomm Inc. is responsible for the personal information described here.

Privacy questions and requests go to our Privacy Officer at admin@levercomm.com.

• —Account details: your name, email address and a password stored only as a hash, or the Google account you sign in with.
• —Deal data you enter: borrower and sponsor details, property and rent-roll figures, financials, loan terms and the notes you write.
• —Documents you or your borrowers upload through an intake link, and the packages and workbooks Levercomm generates from them.
• —Google Drive data, when you choose to connect Drive — see section 4.
• —Usage data: pages opened and actions taken in the app, kept to operate and improve it.
• —Billing data: what you bought and when. Payments are handled by Stripe and we never see or store your card number.
• —Anything you send us: support messages, demo requests and contact-form submissions.

• —To run the service you asked for: computing underwriting metrics, producing lender packages, and screening a deal against lender programs when you use LeverLink.
• —To maintain your account, take payment and provide support.
• —To keep the platform secure: detecting abuse, investigating incidents and preventing fraud.
• —To meet legal and accounting obligations.

We do not sell personal information, we do not share it with data brokers, and we do not use it for advertising or for building profiles about you.

Connecting Google Drive is optional. When you connect it, you grant Levercomm access to your Google account through the permissions below, and you can withdraw that access at any time.

• —Your email address (userinfo.email): so the app can show which Google account is connected.
• —Files you pick and files Levercomm creates (drive.file): LeverAI can open only the files you choose in the Google Drive picker, plus the deal folder and the documents, packages and workbooks Levercomm creates in it. Nothing else in your Drive is visible to us.

We store a Google refresh token so the connection keeps working, the connected account’s email address, the deal folder’s id and name, and details about the files you pick or that Levercomm files there: name, type, size, dates, a content checksum and the classification you give them. We do not copy your Drive files into our own storage, except for documents uploaded to us through an intake link and files Levercomm itself generates.

Documents you select for LeverAI analysis are sent to our AI provider (OpenAI) to be classified and to have figures extracted for your own deal. Those figures are stored on the deal. This content is not used to train AI models, is never used for advertising, and is not read by our staff except with your permission or where required for security or by law.

Levercomm’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To disconnect: open Settings and disconnect Google Drive, which deletes the stored token immediately, or remove Levercomm at myaccount.google.com/permissions. Deleting your account also deletes the token. Disconnecting does not remove files already in your own Drive — those stay yours.

Levercomm uses OpenAI to read the documents you select and to draft the written summary in a lender package. Only what is needed for that deal is sent. The output is stored on your deal, the content is not used to train models, and you can use the platform without these features by not selecting documents for analysis and not generating a summary.

• —Supabase — hosting, database, file storage and authentication.
• —OpenAI — the AI features described above.
• —Stripe — payments and subscriptions.
• —Google — only your own Google account, and only when you connect Drive.
• —Lenders — only through LeverLink: a deal is private by default, a lender sees an anonymized summary only where you make the deal visible, and identifying detail only after you approve a specific request.

These providers act on our instructions and may not use your information for their own purposes. We may also disclose information where the law requires it, or to protect our rights, users or the security of the platform.

Levercomm runs on Supabase infrastructure hosted in the United States, and our AI and payment providers also process data there. Information about Canadian users is therefore stored and processed outside Canada, and may be accessible to authorities under the laws of that country. We use providers that commit contractually to protecting it.

• —While your account is open, we keep your deals and documents so the platform works.
• —When you delete your account in Settings, we erase it: your deals, borrowers, sponsors, properties, uploaded documents, generated packages, branding, your Google Drive token and your profile. Any active subscription is cancelled.
• —Copies in encrypted backups are overwritten within 30 days.
• —Stripe keeps its own payment records for as long as tax and accounting rules require.

You can ask for a copy of the personal information we hold about you, have it corrected, have it deleted, receive it in a portable format, or withdraw a consent you gave. Write to admin@levercomm.com and we will answer within 30 days.

If you are not satisfied with our answer, you can complain to the Commission d’accès à l’information du Québec, or to the Office of the Privacy Commissioner of Canada.

Connections are encrypted in transit and data is encrypted at rest by our host. Every account’s rows are isolated at the database level, so one customer cannot read another’s. Staff access is limited to what support requires, and we ask for your authorization before looking at a deal’s documents, except where security or the law requires otherwise. No system is perfect: if a breach affects you, we will notify you and the relevant authority as the law requires.

The app stores your session in your browser so you stay signed in, and remembers small preferences such as your language and theme. The website uses a cookie banner to ask before anything beyond what is strictly necessary is set. We do not use advertising cookies.

Levercomm is a professional tool and is not directed to anyone under 18. We do not knowingly collect information from children.

We update this policy when the product changes. The date above reflects the current version, and material changes are signalled in the app before they take effect.

Levercomm Inc., Montréal, Québec, Canada. Privacy Officer: admin@levercomm.com.