Lever
Draft — for review before launch. This notice reflects Lever's intended processing during private beta and must be reviewed against the finalised DPIA before publication.
Privacy Notice
Last updated: July 2026 · Applies to lever.lu and the Lever platform
1. Who we are
Lever is operated by MAYDA SRL ("Lever", "we"), a company incorporated in Belgium. For any privacy question, contact privacy@lever.lu. We act as data controller for the personal data described below.
2. What data we process
- Waitlist & contact data — the email address you submit to request early access, and any message you send us.
- Public company data — Lever's diagnostic engine processes publicly filed company information from the Belgian Crossroads Bank for Enterprises (BCE/KBO) and the National Bank of Belgium (NBB). Scans do not require client passwords or portal logins.
- Product analytics — only with your consent, privacy-first usage analytics (see our Cookie Notice).
3. Why we process it (lawful basis)
- To operate the early-access waitlist and contact you about the beta — on the basis of your consent and our legitimate interest in launching the product.
- To provide the diagnostic service to accounting professionals — on the basis of contract and legitimate interest.
- To improve the product through analytics — only where you have given consent.
4. Where your data is stored
All personal data is hosted on EU infrastructure. Our primary database runs on PostgreSQL in Frankfurt, Germany. We do not transfer personal data outside the EU/EEA without an appropriate safeguard (such as Standard Contractual Clauses) documented in our records.
5. Processors we use
- Brevo (EU, Paris/Frankfurt) — transactional and waitlist email.
- PostHog EU (eu.i.posthog.com) — product analytics, only with your consent.
- Cloudflare — content delivery and hosting.
- Anthropic — AI processing for edge-case interpretation, under a data processing agreement with EU Standard Contractual Clauses.
Each processor is bound by a data processing agreement under Article 28 GDPR.
6. How long we keep it
Waitlist data is retained until the beta concludes or you ask us to delete it, whichever is sooner. Analytics data is retained for a limited period consistent with PostHog's EU retention settings.
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing and withdraw consent at any time. To exercise any right, email privacy@lever.lu. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit, dataprotectionauthority.be).
8. Changes
We will update this notice as the platform develops and will revise the "last updated" date accordingly.