Privacy Policy

Last revised on August 26, 2026

This Privacy Policy describes how Palette Labs, Inc. d/b/a Lever (“we”, “us”, “our”) collects, uses and discloses information about you for the website, https://heylever.com and its subdomains (the “Website”), Lever’s autonomous personal assistant, the related Mac OS and mobile applications (the “App”), and any services, content, tools, features and functionality offered on or through our Website and the App (collectively referred to as the “Services”). For the purposes of this Privacy Policy, “you” and “your” means you as the user of the Services.

Please read this Privacy Policy carefully. By using any of the Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not understand or agree to this Privacy Policy, please do not use or access the Services.

Changes to this privacy policy

We may modify this Privacy Policy from time to time, in which case we will update the “Last Updated” date at the top of this Privacy Policy. If we make material changes to how we use or disclose information we collect, we will use reasonable efforts to notify you (such as by emailing you at the last email address you provided us) and will take additional steps as required by applicable law. If you do not agree to any updates to this Privacy Policy, please do not continue using or accessing the Services.

Collection and use of information

When you use or access the Services, we collect certain categories of information about you from a variety of sources.

In addition to the specific uses described below, we may use certain information that we collect to provide, develop, and improve the Services, including to understand your requests, plan and complete tasks on your behalf (which may include engaging third parties on your behalf), generate responses and provide you with personalized suggestions based on the context of your interactions and prior experience with the Services, and to improve and redesign features used across the Services. We also use this information to communicate with you, measure and analyze performance, enhance the safety and security of our Services, comply with applicable legal obligations, and protect our rights and the rights of our employees or other individuals. We do not sell your information or disclose your information to registered data brokers or third parties who resell your information to others.

Information you directly provide us

Some features of the Services may require you to directly provide us with certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing these features. Information that you directly submit through our Services, including:

• Contact details, such as name, address, phone number, and email address. We use this information to create and maintain your account and provide the Services, and to communicate with you (including to tell you about products or services that may be of interest to you).
• Payment information, such as credit or debit card information, and billing address, which we collect using a third-party payment processor. We use this information to process your payment and provide the Services.
• Any other information you choose to include in communications with us, for example, if you send a text message to us to engage the Services. We use this information to provide the Services.

Information collected through your use of the Services

The Services include our autonomous personal assistant that acts on your behalf, should you choose to engage our personal assistant. The personal assistant thinks, plans, and acts to help you complete your everyday tasks.

To effectively perform its duties, the personal assistant is designed to be available when engaged and, depending on the permissions you grant, may have access to information you share with and make available to it. This may include, for example, information from applications and services you have connected, text and documents that you transmit, and other text or data that is made available to us through your or connected integrations and accounts. This may include the content of messages, emails, or other private communications or materials that you choose to make accessible to the personal assistant. The Services may also collect audio and voice data, should you choose to enable these features.

Depending on the permissions you grant and how you interact with the personal assistant, it may have access to information that is considered sensitive. For example, you may provide your payment information to the personal assistant so it can book rides on your behalf or your username and password for third-party accounts so that the personal assistant can sign into these accounts on your behalf. Or, for instance, you may use the personal assistant to process health-related information, for example, when the personal assistant books a medical appointment for you or summarizes an email received from your healthcare provider. As noted above, should you choose to provide the personal assistant with access, it will also have access to the content of your messages, emails, and other private communications that you have made available to us through connected integrations.

As described above, we use certain information collected through your use of the Services, including as described in this section, to develop and improve our products and technologies, including to evaluate, fine-tune, and train the AI models that power our products and technology. If you do not want us to use your information to train AI models, you can opt out by visiting https://app.heylever.com/settings. Even if you opt out, we may still use your information for AI model training when that information is flagged for safety review to improve our ability to detect harmful content, enforce our policies, or advance our safety research. This opt out applies on a go-forward basis and applies only to model training and not, for clarity, other types of improvements to the Services. Please note that such opt out may limit the ability of our Services to better address your specific use case. We may still use AI models previously trained, fine-tuned or improved on your information prior to your opting out. We do not use information received directly from Google Workspace to evaluate, fine-tune, train, or improve AI models (as detailed in the “Information Collected From Google Workspace” section below).

Please note that the Services and the personal assistant are not a professional advisor, so you should not rely on it for actions requiring financial, legal, medical, or other advice or judgment.

Information collected from Google Workspace

If you choose to link your Google Workspace to the Services, we receive access to your Google Calendar, Gmail, Google Drive, Google Docs, Google Sheets, Google Slides and Google Tasks, and also receive related file metadata, message metadata, calendar event details, and other content that Google shares with us about your account and use of Google’s products and services via Google Workspace APIs. We use information collected from Google Workspace to provide the Services, including so that the personal assistant can take actions on your behalf, and to personalize your use of the Services.

Our use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use information received from Google Workspace APIs to evaluate, fine-tune, train, or improve AI models, or for serving ads, including retargeting, personalized or interested-based advertising. To the extent that third parties process information collected from Google Workspace on our behalf (including third-party AI model providers), we only permit them to process this information on our behalf and to help us provide the Services (and for certain legally permissible purposes such as maintaining security and complying with law). In particular, we do not disclose raw or derived Workspace or Photos API user data to third party AI services, including third-party AI model providers, for model training or secondary purposes.

At any time, you may revoke our access to your Google Workspace and request deletion of information collected via the Google Workspace API. You may revoke access by initiating a conversation with the Lever agent, or disconnecting via your settings within Lever’s Workspace. You may also delete the information we previously collected from Google Workspace by deleting your account within Lever’s Workspace.

Information we collect automatically about your interaction with the Services

We also automatically collect certain information about your interaction with the Services (“Usage Data”). We use Usage Data to tailor features and content to you, to develop and improve our product and technology (including to evaluate, fine-tune and train the AI models that power our products and technology), run analytics, and better understand user interaction with the Services.

• Usage information, such as clickstream information (keystrokes, clicks, cursor positions, how much time is spent on the page) and other information about how you use and interact with our Services.
• Location information, such as your precise geolocation, should you choose to share it.
• Log data, network and device information, including IP address, device type, operating system, browser type and version, time zone setting, and date and time stamps. In addition to the uses of Usage Data described above, we may review and use this information for safety and security purposes when you report a bug.

Information collected from other sources

We may obtain information about you from outside sources, including information that we collect directly from third parties and information from third parties that you choose to share with us.

In particular, the Services may obtain information about you when you choose to provide the Services with access to third-party applications. For example, if you choose to link your Google Workspace, we receive access to your instances of various Google products (discussed above). We also may receive information from login integrations like Google OAuth, such as your profile and email address. To the extent we receive information from Google OAuth, you may revoke our access at any time by initiating a conversation with the Lever agent, or disconnecting via your settings within Lever’s Workspace. Please note that disconnecting a third-party integration does not automatically delete data collected from that integration. You can delete all data indexed from external sources by visiting your Workspace.

Any information we receive from outside sources will be treated in accordance with this Privacy Policy. We are not responsible for the accuracy of the information provided to us by third parties and are not responsible for any third party’s policies or practices. For more information, see the section below, Third Party Websites and Links.

Deidentified information

Finally, we may deidentify or anonymize your information such that it cannot reasonably be used to infer information about you or otherwise be linked to you (“deidentified information”) (or we may collect information that has already been deidentified/anonymized), and we may use deidentified information for any purpose. To the extent we possess or process any deidentified information, we will maintain and use such information in deidentified form and not attempt to re-identify the information, except for the purpose of determining whether our deidentification process satisfies legal requirements.

Cookies and other tracking technologies

We and third parties also automatically collect certain Usage Information about your interactions with our website, including through cookies, pixels or other tracking technologies (“Tracking Technologies”). This information is collected to tailor your experience with the Services, provide you with offers or promotions and run analytics. Most browsers accept cookies automatically, but you may be able to control the way in which your devices permit the use of Tracking Technologies. If you so choose, you may block or delete our cookies from your browser; however, blocking or deleting cookies may cause some of the Services, including certain features and general functionality, to work incorrectly. If you have questions regarding the specific information about you that we process or retain, as well as your choices regarding our collection and use practices, please contact us using the information listed below.

Your browser settings may allow you to transmit a signal or other mechanism for exercising your choice regarding the collection or processing of your information when you visit various websites. Our website is not currently designed to respond to such signals.

Disclosure of your information

We may disclose your information to third parties subject to this Privacy Policy, including the following categories of third parties:

• Our affiliates or others within our corporate group.
• Vendors and other service providers who help us provide the Services, including for system administration, third-party hosting, payment processing, security, and analytics purposes.
• Third-party business partners who may use the information for their own purposes. We will provide this data on an aggregate / anonymized basis, or otherwise in accordance with applicable law (including with your consent where required). Please note, we will not provide information collected from Google Workspace to third-party business partners for their own purposes.
• Third-party AI model providers who help support the Services.
• Third parties with whom the Services interact with on your behalf (including autonomously), for example, when the Services book a ride to the airport for you.
• Third parties to whom you request or direct us to disclose information, such as through your use of social media widgets or connecting with third-party integrations or login integration.
• Third parties in connection with or in anticipation of a business transaction such as a merger or acquisition.
• Professional advisors, such as auditors, law firms, or accounting firms.

We may also disclose your information for legal and security reasons and to protect our services and business, including to cooperate with law enforcement and regulatory inquiries, to detect and prevent against fraudulent or illegal activity, to exercise or defend legal claims, and to ensure the safety and security of our business and employees.

Third-party websites and links

We may provide links to third-party websites or platforms. If you follow links to sites or platforms that we do not control and are not affiliated with us, you should review the applicable Privacy Policy, policies and other terms. We are not responsible for the privacy or security of, or information found on, these sites or platforms. Information you provide on public or semi-public venues, such as third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators.

Children’s privacy

Our Services are not intended for children, and we do not seek or knowingly collect any personal information about children. If we become aware that we have unknowingly collected information about a child, in particular any child under 13 years of age, we will make commercially reasonable efforts to delete such information from our database. If you are the parent or guardian of a child under 13 years of age who has provided us with their personal information, you may contact us using the information below to request that it be deleted.

Data security

Despite our reasonable efforts to protect your information, no security measures are impenetrable, and we cannot guarantee “perfect security.” Autonomous AI agent features such as our personal assistant may present additional privacy and security considerations because these features can perform tasks or take actions independently on your behalf, based on the permissions you grant.

As with any technology that acts on your behalf, there are inherent considerations to be aware of. These include the possibility of unintended actions (including unintended payments or communications to outside parties), incorrect or incomplete outputs, and interactions with third parties who may include misleading instructions intended to influence autonomous agents. We encourage you to review actions taken by the personal assistant and You should remain attentive while using the Services, and always be mindful of these considerations.

Moreover, any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure while in transit. We recommend that you do not use unsecure channels to send us sensitive or confidential information.

How to contact us

Should you have any questions about our privacy practices or this Privacy Policy, please email us at privacy@heylever.com.