Privacy Policy
LEVELMAX Privacy Policy — Levelmax Trade app
Version 2026-11
This policy explains how Level Flow Pty Ltd (ABN 75 680 434 128), trading as LEVELMAX (“LEVELMAX”, “we”, “us”), handles personal information in the Levelmax Trade app and the ordering service behind it. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. What we collect
• Your login: your name, email address and password. We store the password only in a form that can’t be read back (a secure hash). We also record when you accepted these terms, your last sign-in and failed sign-in attempts, to keep your account secure.
• Your company’s details: company name, customer ID, ABN and account manager. These come from LEVELMAX’s customer records.
• Orders: the products and quantities, delivery or pickup, the date and time you ask for, the delivery address and site details, the contact name and phone number for the delivery, any notes, and the order’s status, delivery fee, payment status and rewards points.
• Address book: addresses you save for later orders.
• Requests and messages: change requests sent in the app, and the messages we send you.
• Address suggestions: when you type a delivery address, what you type is sent to Google to suggest matching addresses. We keep only the address you choose.
• Technical information: our server uses your IP address to protect the service (for example, to limit repeated sign-in attempts) and logs errors so we can fix problems. If you allow notifications, we store your device’s notification token and whether it is an iPhone or an Android device.
We don’t collect your location, contacts, photos or payment card details, and the app contains no advertising, analytics or tracking tools.
2. How we use it
• to run your account and check it’s you when you sign in;
• to receive, confirm, deliver and invoice your orders;
• to send order updates, account emails and in-app messages (and push notifications if you allow them);
• to calculate rewards points;
• to answer your requests and support you;
• to keep the service secure, prevent misuse and fix problems;
• to meet our legal obligations, such as tax and accounting records.
We don’t sell personal information or use it for advertising.
3. Who can see it
• Your company: the main user of your company’s account can see all orders placed from it, including those of sub-accounts, and manages the sub-accounts’ logins. A sub-account sees only its own orders.
• LEVELMAX: our account managers, warehouse and accounts staff, through our business systems (including Lark, which we use to approve and fulfil orders, and our accounting system for invoices).
• Delivery: if an outside carrier delivers your order, it gets the delivery details it needs (address, site details, contact name and phone number).
• Service providers that process information for us: Amazon Web Services (our server, in Sydney), Lark Technologies (our business system), Google (business email through Google Workspace, and address suggestions through Google Maps Platform), and Apple and Google (push notifications, if you allow them). They may use it only to provide their services to us.
• Others: when the law requires it, or to protect someone’s safety or our legal rights.
4. Overseas
Our app server and database are in Australia (Sydney). Some of the service providers above store or process information in other countries, for example Singapore (Lark) and the United States (Google and Apple). We use providers with strong privacy and security commitments.
5. How we protect it
• Connections to the app are encrypted (HTTPS).
• Passwords are stored only as secure hashes.
• In our back office, account managers see only their own customers.
• Changing your password signs you out on your other devices.
• We back up the database every night.
6. How long we keep it
• We keep your details while your account is open.
• If you delete your account, it is closed straight away and your personal details are deleted 30 days later; within those 30 days we can restore the account if you ask. Orders and the rewards points history stay as LEVELMAX’s business records, with the personal details removed as described at trade.levelmax.com.au/account-deletion.
• Copies of orders in our business systems, such as order approvals, delivery records and invoices, are kept as business records for as long as the law requires (for tax records, generally five years).
• Deleted information can stay in our backups for up to 30 days, until they are replaced. Our copies of the emails we send, and of order alerts to our staff, are deleted after 30 days. Server logs are kept for a short time and then overwritten.
7. Your choices and rights
• See and correct: most of your details are in the app. For a copy of your personal information or to correct it, ask your account manager or email info@levelmax.com.au (the main user can also use Account → Request a change). We reply within 30 days.
• Delete: Account → Delete account in the app, or see trade.levelmax.com.au/account-deletion.
• Notifications: you can turn off push notifications in your phone’s settings. Order and account emails are part of the service.
• Complaints: contact us first at info@levelmax.com.au and we will reply within 30 days. If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au, 1300 363 992).
8. Children
The app is for business customers and is not intended for anyone under 18.
9. Changes to this policy
We may update this policy. The app shows the new version and asks you to accept it before you continue; the current version is always at trade.levelmax.com.au/privacy.
10. Contact
Privacy questions: LEVELMAX (Level Flow Pty Ltd, ABN 75 680 434 128), Unit L / 61-65 Roberts Rd, Greenacre NSW 2190. Email info@levelmax.com.au.