What we never collect
No Social Security number, no bank or card details, no tax documents, no account or password. The form has no field for any of them.
What we collect, and when
Three answers about the tax debt, with nothing that identifies anyone. Name, phone, email and state come only after the person has qualified, and they are stored only in the same step as their consent. Someone who leaves before agreeing leaves no contact details behind.
In transit
Every page is served over HTTPS, and browsers are told to refuse plain HTTP for a year. Leads are sent to a firm over HTTPS with a credential issued for that firm.
In the browser
A strict Content-Security-Policy lets only our own scripts run, each page load with a fresh one-time code, so injected script is blocked. The page cannot be framed by another site. Nothing about a lead is kept in the browser’s storage: one signed, script-proof cookie names the session and holds no data.
On the server
Every answer is validated again on the server, and the server alone decides who qualifies. Each submission passes Cloudflare’s human check, and each session is rate-limited. The server refuses to start in live mode without those protections in place.
At rest
Leads are stored in a managed Postgres database, encrypted at rest by the provider and reachable only with the application’s own credentials: the database’s public API roles have no access to any table.
Proof of consent
With each lead we keep the exact consent wording and its version, the firm named in it, the time, the IP address and the browser. A second, independent certificate of the consent screen can be attached from TrustedForm.
Retention
Visits that never become a lead are deleted after 30 days; only anonymous daily counts are kept. To ask what we hold about you, or to have it deleted, write to hello@levellanding.com.
Reporting a problem
If you believe you’ve found a security issue, email hello@levellanding.com. We’ll reply, and we won’t pursue anyone who reports in good faith.