Privacy notice
What we collect, and why.
Levatio measures business processes. To do that we ask you for a small amount of personal data, and we keep it only as long as the work needs it. This page says exactly what that means, in the same plain language we use everywhere else.
Last updated 18 September 2026
Who we are
This site is operated by Levonata Pte Ltd (UEN 202510057E), trading as Levatio, in Singapore. We are the organisation responsible for the personal data described below under the Personal Data Protection Act 2012, except where we host a tool on behalf of a client; in that case the client is responsible and we act on their instructions.
What we collect
Every place on this site that asks you for something, and what happens to it. There is nothing else: no accounts, no passwords, no profiling.
Scope interview (home page)
- What
- Your email address, the name and description of a process, how long it takes, who runs it, how often, and where it stalls.
- Why
- To send you a copy of your summary and to prepare for a follow-up conversation about that process.
- How long
- Until the enquiry is closed, or 12 months after your last contact with us, whichever is sooner.
Onboarding form
- What
- Your name, company, email, phone number, industry, company size, and the challenge you describe.
- Why
- To set up your client record so that timing data you enter later is linked to you.
- How long
- For the term of your service agreement. When it ends, we export it on request within 14 days and delete it within 30 days, as the agreement says.
Task timer and process template
- What
- Task names, start and stop times, durations, and the TIPOV description of a process, linked to your client session.
- Why
- To measure the process you have asked us to improve. This is the baseline every engagement is built on.
- How long
- For the term of your service agreement, then deleted within 30 days of it ending, with the rest of your client data.
Service agreement signing
- What
- Your name, the time of signing, your IP address and browser identifier.
- Why
- To record that the agreement was signed and by whom, as evidence of consent.
- How long
- The signed agreement and its signing record are kept for 6 years after the agreement ends, the limitation period for contract claims. Everything else about you is deleted on the 30-day schedule above.
Client key portal
- What
- Your email address and the API keys you enter for the systems your automation connects to.
- Why
- To run your automation. Keys are stored encrypted and you can change or remove them at any time through the same portal.
- How long
- Until you remove them, or within 30 days of your agreement ending, whichever is first.
PDPA review request (dental)
- What
- Your organisation, role, email, phone number, and your answers about your current compliance setup.
- Why
- To arrange the review you asked for, delivered with our PDPA practitioner partners, who receive your request for that purpose only.
- How long
- Until the enquiry is closed, or 12 months after your last contact with us, whichever is sooner.
Event registration tools we host for clients
- What
- Attendee names, email addresses, company, and dietary requirements, entered by event organisers and attendees.
- Why
- To run the registration on behalf of the client organisation, which decides how the data is used. Levatio processes it on their instructions.
- How long
- Within 30 days after the event, unless the client organisation asks for earlier deletion. Deleted from the live system, backups and logs together, not just the live copy.
Contact page
- What
- Nothing is collected by the page itself. If you email or call, we keep that correspondence.
- Why
- To reply to you.
- How long
- Until the enquiry is closed, or 12 months after your last contact with us, whichever is sooner.
Where it is kept
Form submissions are processed by automation workflows that Levatio operates, and stored in databases on infrastructure Levatio controls in Singapore. Backup copies are held in private, access-controlled cloud storage so that a hardware fault cannot lose your data. The website itself is served by Vercel.
We do not sell personal data, and we do not share it with anyone except: our PDPA practitioner partners, for review requests you make on the dental compliance page; the client organisation, for tools we host on their behalf; and service providers we use to run the site and send email, who act only on our instructions.
Some of our providers are outside Singapore. Where that is the case we make sure the data is protected to a standard comparable to the PDPA, as the Act requires.
Analytics and your browser
We use Vercel Web Analytics to count page visits. It records the page you visited, the referring site, your country, and your device type. It does not use cookies and does not identify you personally. On pages where a personal link could appear in the address, we strip the address before anything is sent.
The scope interview and onboarding form save a draft of your answers in your own browser so you can pick up where you left off. That draft stays on your device and is cleared when you submit.
Your rights
Under the PDPA you can:
- →Ask what personal data we hold about you and how we have used it.
- →Ask us to correct it.
- →Withdraw consent for a use you previously agreed to. We will tell you what that means for any service we are providing.
- →Ask us to delete it, where we have no continuing need to keep it.
We answer within 30 days. There is no charge for a straightforward request. If you are not satisfied with our response, you can complain to the Personal Data Protection Commission at pdpc.gov.sg.
If something goes wrong
If we become aware that personal data we hold has been accessed without authorisation, we will assess it promptly and, where the Personal Data Protection Act 2012 requires, notify the Personal Data Protection Commission and the people affected.
Contact
Our Data Protection Officer can be reached at [email protected]. Use that address for any question, request or complaint about personal data. For anything else, see the contact page.
We will update this notice when what we collect changes. The date at the top tells you when that last happened.