Privacy policy

Last updated 2 November 2026

This policy explains what personal data Leverpoint collects, why, who receives it and what you can ask us to do with it. It covers this website, booked calls, messages and our business outreach. If a client shares data with us during a workshop or paid project, we agree how that data is handled with the client before the work starts.

Who we are

Leverpoint is run by [Legal company name], [company type and place of registration], registered at [Registered address]. We decide how and why your personal data is used for the activities in this policy, which makes us the controller under data protection law. You can reach us at [Contact email].

Our representative in the EU: [EU representative, if the company needs one].

What we collect

  • When you visit the site: the pages you view, the links and buttons you click, the page you came from, your browser and device type, and your IP address, which your browser sends with every request.
  • When you watch the video: the technical details Mux needs to deliver it, such as your IP address and device type.
  • When you book a call: your name, your email address, the time you choose and anything you add to the booking form, such as notes, guests or answers to questions. Cal.com also records your IP address, browser, device and the page you came from.
  • When you contact us: your contact details and your message.
  • When we talk: our notes on your role, your team's work and what you'd like help with. We'll tell you first if we ever want to record a call.

If we contact you or might contact you

We look for people at companies we think we could help. We collect names, job titles, employers, public professional profile links and our own notes on why a conversation might be useful. This comes from public sources, such as company websites, professional directories and LinkedIn. We use it to decide who to contact and to make our message relevant.

If you'd rather not hear from us, tell us. We'll stop and keep only what we need to avoid contacting you again.

Why we use it

The law requires us to name a legal basis for each use.

  • Running, securing and fixing the site: our legitimate interest in a site that works and is safe.
  • Understanding how the site is used overall: our legitimate interest in improving it. You can object at any time.
  • Arranging calls and replying to messages: steps you ask us to take before a possible contract, or our legitimate interest in answering business enquiries.
  • Contacting people at companies we may be able to help: our legitimate interest in finding customers. You can object at any time.
  • Keeping business, tax and legal records: our legal obligations.

We don't sell your personal data or use it for advertising, and we don't make decisions about you by automated means that have legal or similarly significant effects.

Who receives it

  • Vercel, United States: hosts this website.
  • PostHog, EU servers in Frankfurt: website analytics.
  • Cal.com, United States: booking calendar.
  • Mux, United States: delivers the video.
  • Anthropic (Claude) and OpenAI (ChatGPT), United States: AI assistants that help us research companies and prepare for conversations.
  • The email, calendar and document tools we use to run the business.
  • LinkedIn and Instagram, when we message you there. They handle those messages under their own privacy policies.
  • Professional advisers and authorities, when we need advice or the law requires it.

Transfers outside Europe

We work from [Countries the company and team work from], and some of the providers above are in the United States. Where data leaves the European Economic Area, we rely on the EU-US Data Privacy Framework, the European Commission's standard contractual clauses or another mechanism the law allows. You can ask us for details.

How long we keep it

  • Bookings, messages and call notes: up to 24 months after our last contact, or longer if we start working together.
  • Research on people we might contact: up to 12 months after we add it, unless you object sooner.
  • Website analytics: PostHog keeps events for one year on our plan.
  • Technical logs at our providers: for as long as each provider needs them under its own policy.
  • Business, tax and legal records: as long as the law requires.

Your rights

You can ask us for a copy of your data, or ask us to correct it, delete it, limit how we use it or send it to you in a portable format. You can also object to any use based on our legitimate interests. Email [Contact email] and we'll reply within one month. We don't link website analytics to individual people, so we may not be able to find your analytics data.

You can complain to the data protection authority where you live or work. In Spain, that's the Agencia Española de Protección de Datos. If you live outside Europe, you can make the same requests and we'll handle them as the law where you live requires.

Cookies and browser storage

We don't use advertising or analytics cookies, so we don't show a cookie banner. This website doesn't set any cookies of its own.

PostHog runs in cookieless mode, so it stores nothing in your browser. It counts visitors using a hash calculated on its servers, and your browser still sends the usual request details, such as your IP address and browser type. We don't use it to identify you or build a profile of you.

[Analytics opt-out control, added with PostHog]

The video player is set up not to track viewers or store anything in your browser.

The booking calendar loads when you scroll close to it or tap a booking button, and then Cal.com adds two items:

  • __cf_bm: a security cookie from Cloudflare, on behalf of Cal.com, that helps tell people from bots. It lasts about 30 minutes.
  • reserverUid: an item in browser storage that the calendar uses to handle the time slot you pick. It stays until you clear it.

If you open the calendar on Cal.com's own site, its privacy policy and cookie choices apply.

Changes to this policy

We'll update this page when something changes and change the date at the top.