Privacy policy

Last updated: 24 July 2026

Level Best is a planning tool for house and garden projects, operated by Richard Cowtan trading as Level Best, in the United Kingdom. This page says what data we hold, why, and what your rights are. The short version: we hold what the tool needs to work, we don't sell it, we don't run adverts, and you can export or delete everything.

What we collect

Account: your name, email address, and the town or area you give at sign-up. Your area keeps the AI's price estimates local; it's used for nothing else.
Project data: everything you put into your projects: budgets, tasks, schedules, quotes, notes, and any files you attach (photos, PDFs). This is your data; we just store and display it for you.
Usage counts: a monthly tally of assistant actions, used to run the free tier's meter and fair-use limits. We also keep a short log of which AI suggestions you accepted or rejected, which improves the suggestions you get.
Waitlist: if you joined the waitlist, your email address.
Email you send us: if you write to an address at levelbest.build, the message and your address are stored so we can read and answer it. Kept for two years, then deleted; ask sooner and it goes sooner.
Analytics: anonymous, cookieless page counts via GoatCounter: how many visitors, which pages, and which links led to a sign-up. No profiles, no tracking across sites.

Signing in uses your browser's local storage strictly to keep you signed in. If we ever advertise, the ad networks' cookies (Reddit or Meta) load only if you accept them when asked: decline and the site works exactly the same, minus their measurement.

Why we hold it (lawful bases)

To provide the service (contract): your account and project data exist so the tool works.
To run the service sensibly (legitimate interests): sign-in emails, usage metering, security, and knowing whether anyone visits the site.
Because you asked (consent): the waitlist email. Withdraw any time by asking.
To answer you (legitimate interests): email you send us, kept while it is useful to have the thread.

Who processes it for us

We don't sell or share your data for marketing. It passes through these services, each doing one job:

Service	Job	What they see
Supabase (EU region)	Database, sign-in, file storage	Account and project data, at rest in the EU
Vercel	Hosting the site and app	Standard web-server request data
Anthropic	The AI assistant	The project context needed to answer: sent when you use an AI feature, not otherwise
Google (Places)	Finding local trades	The search query, including your project's area, when you use the trade finder
Resend	Sending and receiving our email	Your email address, and the contents of any message you send us or we send you
GoatCounter	Anonymous visit counts	No personal data

If paid plans launch, payments will be handled by Stripe; card details would go to Stripe directly and never touch our systems.

How long we keep it

While your account exists. Delete a project and it's gone from your account immediately; delete your account and everything goes with it. Residual copies in short-term backups cycle out within 30 days.

Your rights

Under UK GDPR you can ask to see, correct, export, or delete your data. The useful ones are built in: full export (open formats, any time, in the app) and project deletion. For account deletion or anything else, email hello@levelbest.build: done within 30 days, usually much faster. If you're unhappy with how we've handled your data, you can complain to the ICO (ico.org.uk).

Security

Data is encrypted in transit and at rest, stored in the EU, and protected by per-user access rules enforced in the database itself: your projects are readable by your account and nobody else's. Sign-in is by emailed one-time link; there are no passwords to leak.

Age

Level Best is for adults planning real projects; it isn't directed at children and we don't knowingly hold data on anyone under 16.

Changes

If this policy changes in any way that matters, we'll say so plainly on the site, not bury it.

Questions: hello@levelbest.build