Lever UpBack to Home

Privacy Policy

Effective date: 12 November 2026

1. Introduction

Lever Up Pty Ltd (ABN 92 703 364 041), trading as Lever Up ("we", "us", or "our"), makes Lever Up Practice Manager, for Australian accounting and bookkeeping practices, and the Lever Books app, for their clients. We are committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

2. Information We Collect

We may collect the following types of personal information:

  • Name, email address, and phone number
  • Business name and role/title
  • Information you give us when you contact us
  • Information you or your practice put into our products (section 10)
  • Website usage data (pages visited, time on site, referral source)
  • Device and browser information collected via analytics tools

3. How We Use Your Information

We use your personal information to:

  • Respond to enquiries
  • Provide our products, Lever Up Practice Manager and Lever Books (section 10)
  • Send relevant updates about our services (with your consent)
  • Improve our website and understand how visitors use it
  • Measure and improve our ads
  • Show our ads to people who have visited our website (retargeting)
  • Comply with legal obligations

4. Cookies & Analytics

Our website uses two tools that set cookies:

  • Google Analytics, on every page, which counts visits and shows us how people find and use the site. Its cookie, _ga, gives your browser a random ID so a return visit is not counted as a new visitor. We have turned off Google's advertising features. Google Analytics keeps the event data it collects for 14 months.
  • The Meta Pixel, from the company behind Facebook and Instagram, which tells us whether our Facebook and Instagram ads and posts bring people to the site. Its cookies are _fbp, a random ID for your browser, and _fbc, which records the ad you clicked to reach us, if you came from one. We use one Pixel for each product: the Lever Books Pixel on our Lever Books pages, and the Lever Up Practice Manager Pixel on our other pages once we set it up.

We don't load either tool for visitors in the European Union, the European Economic Area, the United Kingdom or Switzerland, which we tell by your device's time zone, or when we can't tell where you are. When someone joins one of our email lists, our server sends Google and Meta nothing about it if your device's time zone or the country of your internet connection is in one of those places, or if we can't tell.

Both receive the address of each page you visit, including the campaign tags in it (such as utm_source, utm_medium and fbclid, which say which post or ad brought you), along with your IP address and browser details.

We use this to measure and improve our ads on Facebook, Instagram and Google, and Meta may use it to show our ads to people who have visited our site. Meta and Google also use what they receive under their own privacy policies, including to improve their ads services.

How Google uses information from sites that use its services (opens in a new tab)

When you join one of our email lists (section 9), our server also tells both providers that a sign-up happened, so we can count sign-ups from browsers that block the tools above. These messages are sent even when your browser blocks the Pixel or Google Analytics:

  • To Meta, through its Conversions API: your email address, hashed (turned into a code Meta can match to a Facebook or Instagram account, so it is not anonymous), your IP address, your browser details and the _fbp and _fbc IDs.
  • To Google, through its Measurement Protocol: the random ID from _ga and the ID of your visit. Never your email address.

This information goes overseas, to Google and Meta, in the United States. If we clear your list details (section 9), that does not remove what Google or Meta already hold.

Blocking or clearing cookies stops the tools on our pages, but when you join a list our server still sends Meta your email address in coded form and Google a sign-up event. If you don't want that, don't join, or email us and we'll stop any further use on our side. To stop Meta using activity from other websites for the ads you see, go to Meta's Accounts Center: under Your activity off Meta technologies you can disconnect it, and in Ad preferences you can turn off its use for ads. Google offers the Google Analytics opt-out browser add-on.

5. Third-Party Services

We share information with service providers who help us run our website and deliver our services, such as our website host and our email service. Google and Meta are different: they receive information from our website as section 4 describes, and they use it under their own terms and privacy policies, not only for us.

If you book a call with us, you do that on Calendly's website. Calendly collects what you enter there under its own privacy policy, in the United States.

6. Data Storage & Security

We take reasonable steps to protect your personal information from misuse, loss, unauthorised access, modification, or disclosure. Your personal information is stored in Sydney, Australia, in our databases and file storage, and our applications run there too. Some providers receive your information outside Australia, mainly in the United States: Vercel (our website and application host, and the gateway our voice dictation passes through), Resend (email), Cloudflare (the bot check on our forms), Google and Meta (section 4), Stripe (billing, for practices), Apple (sign-in and in-app purchases, for Lever Books), Expo (push notifications) and Microsoft (voice transcription, section 11). Our AI text and document requests stay in Australia (section 11). We choose them carefully and take reasonable steps, including through our terms with each of them, so that they handle your information in line with the Australian Privacy Principles.

7. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information
  • Opt out of marketing communications at any time

If you ask us to delete your details from one of our email lists (section 9), we keep only your email address, the list you joined, when and where you signed up, the share code in your link if it had one, the consent wording you saw, whether you got a founding member place, and our record of the emails we sent you, so we never email you again.

We'll acknowledge your request within 7 days and answer it within 30 days.

8. Consumer Data Right

When you connect a bank account in the Lever Books app, your banking data is collected under the Consumer Data Right (CDR) by Fiskil Pty Ltd, an accredited data recipient. Lever Up receives and uses that data as Fiskil's CDR representative.

We handle CDR data under Fiskil's CDR policy, which Lever Up has adopted:

Fiskil's CDR policy (opens in a new tab)

  • CDR data is stored in Australia.
  • We use it only to provide the features you asked for.
  • We never sell CDR data.
  • You can stop sharing at any time in the app or through your bank. When you stop sharing, or your consent expires, no new data comes in, and what was already shared stays in your Lever Books. It is deleted when the business it belongs to is deleted, or when you delete your account and no other owner keeps that business: we keep it for 90 days after that, then delete it for good.
  • If you ask our AI features about your money, the answer may use your CDR data. It is sent to Amazon Bedrock in our own Amazon Web Services account in Australia, and to no AI company outside it, as section 11 describes.

9. Campaign Email Lists

Some of our pages let you join an email list, such as the Lever Books waitlist, the Lever Up Practice Manager waitlist, the Lever Up AI Academy waitlist or a webinar. When you join one, we collect:

  • Your first name and email address
  • Your practice's name, if the page asks for it
  • Your answers to the page's questions, such as whether you would like an in-house workshop for your team
  • The version of the consent wording you agreed to
  • The page you signed up on, and the share code in its link if it had one
  • The campaign tags in the link you arrived by (section 4), which say whether you came from our own pages and posts or from a paid ad
  • Your IP address and the time you signed up, kept as the record of your consent

You join by pressing Join the waitlist, which is your consent to the sentence shown under the button; there is no further step. We email you a confirmation straight away, then only the emails the sentence under the button names: for a waitlist, its product and the day it opens, and for a webinar, its join link, reminders and replay. Some sentences also name other emails, such as our monthly webinar invitations or practice AI tips, and we send those only where the sentence you agreed to names them. If you tell us you would like an in-house workshop, we may also email you about booking one. Every email has an unsubscribe link.

On the Lever Books waitlist, the campaign tags decide whether you can get a founding member place: a sign-up from a paid ad never takes one. Our system decides that automatically from the campaign tags in your link, and from nothing else about you. If you think it got it wrong, email us and a person will check.

Your details are stored in the database of Lever Admin, our internal operations system, in Sydney, Australia. We send the emails through Resend, an email service in the United States, so your first name and email address are disclosed to Resend overseas for each email it sends.

The sign-up form uses Cloudflare Turnstile to check that you are a person, not a bot. To do that, your IP address and signals about your browser and device are sent to Cloudflare, overseas in the United States and elsewhere.

When you join, our server also tells Google and Meta about the sign-up, overseas in the United States, as section 4 describes.

We keep your first name, practice's name, answers, IP address and campaign tags while you are subscribed and for 2 years after our emails to you stop. After that we clear them, and keep your email address and the time you signed up, so we never email you again.

To unsubscribe, use the link at the bottom of any email from the list. You can also write to us at hello@leverup.com.au, and we will stop the emails and clear your name, IP address and campaign tags straight away, with your practice's name and answers.

10. Our Products

Lever Up makes two products. Lever Up Practice Manager is for accounting and bookkeeping practices, and Lever Books is an app for their clients, small businesses. Both store their data in Sydney, Australia (section 6).

Lever Up Practice Manager. A practice signs up its staff, who sign in with their work email, so we hold each staff member's name, email address and role. The practice adds its clients: their names, contact details and business details, the documents it prepares for them, and the messages and attachments it exchanges with them in the Message Centre. If the practice connects Xero, we copy its Xero data into the practice's own area of our database to run its reports. We hold all of this for the practice, which decides what goes in. If you are a practice's client and want to see or correct your details, ask your practice, or email us. Messages and attachments are kept while the practice uses Lever Up Practice Manager, and deleted when the practice deletes that client's data or leaves. Emails between a practice and its clients, and the clients' replies, pass through Resend in the United States (section 6). A practice pays through Stripe, which holds its billing contact and card details; we never see the card number.

Lever Books. You sign in with Google, Apple or a link we email you, so we hold the name and email address your sign-in gives us. The app stores the receipts and photos you add, with any location information removed from photos before we store them, the bank data you connect (section 8), and what you type. If you turn on notifications, we hold a token for your device, and each notification's text passes through Expo and Apple to reach it. A Lever Books Pro subscription is bought through Apple, which gives us a record of the purchase and your Lever Up account ID, never your payment details. If your practice invites you, the invitation carries your name and email address and the practice's details.

11. AI Features

Our products include AI features that answer questions and draft documents. When you use one, your question, the document and the information on the screen you are using are sent to Amazon Bedrock in our own Amazon Web Services account in Australia (Sydney and Melbourne). Nothing is sent to any AI company outside our Amazon Web Services account. Bedrock does not store your question or the answer, and does not use them to train any AI model. If you dictate by voice in Lever Up Practice Manager, the recording goes through Vercel's AI Gateway and is transcribed by Microsoft outside Australia; in the Lever Books app your phone transcribes it and the recording stays on your device. We remove anything that looks like a tax file number from the text we send, and no tool reads a tax file number field.

12. Complaints

If you think we have breached the Australian Privacy Principles, email hello@leverup.com.au. We'll acknowledge it within 7 days, look into it, and give you a written answer within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au. (opens in a new tab)

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

hello@leverup.com.au