PRIVACY POLICY

Effective Date: June, 2026
Last Updated: June, 2026

This Privacy Policy explains how Apothicon Software LLC, a “limited liability company” (“Company,” “we,” “us,” or “our”) collects, uses, discloses, and otherwise processes personal information in connection with:

• https://leviathancheats.xyz/;
• the Leviathan software, applications, platform, and APIs;
• customer support, sales, marketing, and business communications; and
• other services that link to this Privacy Policy.

We refer to these collectively as the “Service.”

“Personal information” means information that identifies, relates to, describes, or can reasonably be linked with an identifiable individual. It does not include information that applicable law treats as anonymous, deidentified, or publicly available.

1. Scope

This Privacy Policy applies when we determine the purposes and means of processing personal information.

Business customers may submit personal information to the Service for us to process on their behalf. For that information, the business customer generally determines why and how the information is processed, and we act as its service provider or processor.

When we process information on behalf of a business customer:

1. the customer’s privacy notice governs its processing practices;
2. questions and rights requests concerning that information should ordinarily be directed to the customer;
3. we process the information according to the customer’s instructions and our agreement with it; and
4. we may refer your request to the applicable customer.

This Privacy Policy does not govern third-party websites, services, or integrations that have their own privacy policies.

2. Personal Information We Collect

The information we collect depends on how you interact with the Service.

2.1 Account and profile information

We may collect:

• name;
• username;
• email address;
• telephone number;
• company or organization name;
• job title;
• profile image;
• account settings;
• login and authentication information;
• user role and permissions.

2.2 Subscription and transaction information

We may collect:

• selected subscription plan;
• billing address;
• transaction identifiers;
• purchase and renewal dates;
• payment status;
• invoice and tax information;
• partial payment-card details, such as card brand and last four digits;
• credits, discounts, refunds, and cancellation history.

Payments are processed by Square, Stripe, and PayPal. We generally do not receive complete payment-card numbers.

2.3 Customer Content

We collect information that you or your authorized users submit, upload, transmit, generate, or store through the Service.

Depending on how the Service is used, Customer Content may contain personal information about you or other individuals. You are responsible for ensuring that you have the necessary authority to provide that information.

2.4 Usage and device information

We may automatically collect:

• IP address;
• browser type and version;
• device type and operating system;
• language and regional settings;
• referring and exit pages;
• pages, screens, and features used;
• dates and times of access;
• session duration;
• clicks and interaction events;
• API requests;
• feature usage;
• approximate location derived from IP address;
• identifiers associated with cookies or similar technologies;
• error reports, diagnostics, and performance information.

2.5 Communications and support information

When you contact us, we may collect:

• contact details;
• the contents of messages;
• support requests and ticket history;
• attachments;
• survey responses;
• call or meeting information;
• feedback and product suggestions.

Where calls are recorded: We will provide notice before recording a call where required.

2.6 Sales and business-contact information

We may collect professional contact information relating to customers, prospective customers, vendors, partners, and their representatives, including:

• name;
• business email address;
• employer;
• job title;
• professional profile information;
• correspondence;
• meeting notes;
• sales and account-management history.

2.7 Information from integrations

When you connect a third-party integration, we may receive information that the third party makes available based on your settings and authorization.

This may include account identifiers, profile information, files, messages, calendar information, repository information, or other integration data.

2.8 Information from other sources

We may receive information from:

• business customers and authorized account administrators;
• payment processors;
• authentication providers;
• analytics providers;
• marketing and advertising partners;
• referral partners;
• fraud-prevention and security providers;
• public websites and professional directories;
• data providers, where permitted by law.

3. How We Use Personal Information

We may use personal information for the following purposes.

3.1 Providing the Service

We use information to:

• create and manage accounts;
• authenticate users;
• provide requested features;
• process subscriptions and payments;
• store and process Customer Content;
• operate integrations;
• provide customer support;
• communicate about accounts and transactions.

3.2 Maintaining and improving the Service

We use information to:

• understand how the Service is used;
• troubleshoot errors;
• test and develop features;
• monitor performance;
• conduct research and analytics;
• improve usability, reliability, and functionality;
• create aggregated or deidentified information.

We do not use Customer Content to train generalized machine-learning or artificial-intelligence models.

3.3 Security and abuse prevention

We use information to:

• protect accounts and systems;
• verify identities;
• detect suspicious activity;
• prevent fraud, spam, malware, and abuse;
• enforce usage restrictions;
• investigate security incidents;
• maintain audit and access logs.

3.4 Billing and administration

We use information to:

• process charges;
• issue invoices;
• administer renewals and cancellations;
• collect unpaid amounts;
• calculate taxes;
• maintain financial and transaction records.

3.5 Communications and marketing

We may use contact information to:

• send service announcements and security notices;
• respond to inquiries;
• provide onboarding or account-management communications;
• send newsletters, product updates, event invitations, and promotional messages;
• measure engagement with communications.

You may unsubscribe from marketing emails at any time. Unsubscribing does not prevent transactional or service-related communications.

3.6 Legal and compliance purposes

We may use information to:

• comply with laws and lawful requests;
• establish, exercise, or defend legal claims;
• enforce contracts and policies;
• respond to regulatory or law-enforcement requests;
• protect our rights, property, users, and the public;
• complete corporate transactions and audits.

4. Legal Bases for Processing

Where the GDPR, UK GDPR, or similar law applies, we process personal information under one or more of these legal bases:

Contract

Processing is necessary to enter into or perform a contract with you, such as creating your account, providing the Service, processing your subscription, and responding to support requests.

Legitimate interests

Processing is necessary for legitimate interests such as:

• operating and improving the Service;
• maintaining security;
• preventing fraud and abuse;
• communicating with business contacts;
• understanding product usage;
• protecting legal rights.

We consider the potential impact on your rights before relying on legitimate interests.

Consent

We rely on consent where required, such as for certain cookies, marketing communications, or optional data uses. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.

Legal obligation

We process information when necessary to comply with tax, accounting, regulatory, legal, and law-enforcement obligations.

Protection of vital interests

In limited circumstances, we may process information when necessary to protect someone’s life or physical safety.

5. How We Disclose Personal Information

We may disclose personal information to the following recipients.

5.1 Service providers and processors

We use providers that support:

• cloud hosting and infrastructure;
• database and file storage;
• payment processing;
• authentication;
• email and communications;
• customer support;
• analytics;
• security and fraud prevention;
• monitoring and error reporting;
• sales and customer relationship management;
• legal, accounting, and professional services.

These providers may process information only for the services they provide to us, subject to contractual restrictions where required.

5.2 Business customers and account administrators

If your account is associated with an organization, its administrators may be able to:

• access and manage your account;
• control permissions;
• view usage information;
• access or export Customer Content;
• suspend or terminate your access.

5.3 Integrations and third-party services

We disclose information to third parties when you enable an integration or direct us to interact with another service.

The third party’s privacy policy governs its independent use of the information.

5.4 Professional advisers

We may disclose information to lawyers, accountants, auditors, insurers, consultants, and other advisers who are subject to confidentiality obligations.

5.5 Legal and safety disclosures

We may disclose information when we reasonably believe doing so is necessary to:

• comply with law, legal process, or lawful government requests;
• enforce our agreements;
• investigate fraud, abuse, or security incidents;
• protect the rights, safety, and property of us, our users, or others;
• prevent serious harm.

5.6 Corporate transactions

Information may be disclosed or transferred during negotiations or completion of a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction.

Where required, we will provide notice of material changes to the handling of personal information following such a transaction.

5.7 With your direction or consent

We may disclose information when you direct us to do so or provide consent.

6. Sale, Sharing, and Targeted Advertising

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising or process personal information for targeted advertising as those terms are defined under applicable U.S. state privacy laws.

We have not sold or shared personal information for those purposes during the preceding 12 months.

7. Cookies and Similar Technologies

We and our providers may use cookies, pixels, local storage, software development kits, and similar technologies.

These technologies may be used for:

1. Strictly necessary functions, such as authentication, security, session management, and billing;
2. Preferences, such as remembering settings;
3. Analytics, such as understanding traffic, feature use, and errors;
4. Advertising, if applicable, such as measuring campaigns or delivering targeted advertisements.

Where required, nonessential cookies are used only after consent.

Browser settings may also allow you to block or delete cookies, but doing so may affect Service functionality.

We honor legally required opt-out preference signals, such as Global Privacy Control, where they apply to our processing.

The Service currently does not respond to traditional “Do Not Track” browser signals.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to:

• provide the Service;
• maintain accounts;
• comply with contractual commitments;
• maintain security and audit records;
• resolve disputes;
• enforce agreements;
• satisfy legal, tax, accounting, and regulatory requirements.

Retention periods depend on:

1. the nature and sensitivity of the information;
2. the reason it was collected;
3. account and subscription status;
4. legal obligations;
5. security requirements;
6. applicable limitation periods.

Typical retention periods include:

• Account information: 30 days;
• Customer Content: 30 days;
• Backups: 30 days;
• Transaction and tax records: 30 days;
• Security logs: 30 days;
• Support records: 30 days;
• Marketing records: until opt-out plus 30 days.

We may retain information longer when required by law, needed for a legal claim, or necessary to prevent fraud or abuse.

We may retain aggregated or deidentified information that cannot reasonably be linked to an individual.

9. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information.

Depending on the nature of the Service, safeguards may include:

• encryption in transit;
• encryption at rest;
• access controls;
• multifactor authentication;
• logging and monitoring;
• vulnerability management;
• secure development practices;
• employee confidentiality obligations;
• incident-response procedures;
• vendor security reviews.

No method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for selecting secure credentials, protecting authentication methods, configuring your account appropriately, and maintaining backups suitable for your use.

10. International Data Transfers

We and our service providers may process personal information in United States and other countries that may have different data-protection laws from your country.

Where legally required, we use recognized safeguards for international transfers, which may include:

• adequacy decisions;
• standard contractual clauses;
• the UK International Data Transfer Addendum;
• contractual and organizational safeguards;
• another legally approved transfer mechanism.

You may contact us for additional information about applicable transfer safeguards.

11. Your Privacy Rights

Depending on where you live and subject to legal exceptions, you may have the right to:

1. confirm whether we process your personal information;
2. request access to personal information;
3. request correction of inaccurate information;
4. request deletion;
5. receive a portable copy of certain information;
6. object to or restrict certain processing;
7. withdraw consent;
8. opt out of targeted advertising, sale, sharing, or certain profiling;
9. limit certain uses of sensitive personal information;
10. appeal a decision concerning a privacy request;
11. lodge a complaint with a data-protection authority;
12. receive equal service without unlawful discrimination for exercising your rights.

To submit a request, contact us at support@leviathancheats.xyz

We may need to verify your identity before completing a request. Verification may require confirming control of your account or email address and providing information that reasonably matches our records.

Authorized agents may submit requests where permitted by law. We may require proof of authorization and identity verification.

We will respond within the period required by applicable law.

12. EEA, UK, and Swiss Rights

Individuals in the European Economic Area, United Kingdom, or Switzerland may have rights to:

• access;
• rectification;
• erasure;
• restriction;
• data portability;
• objection;
• withdrawal of consent;
• complain to a supervisory authority.

Where we rely on legitimate interests, you may object based on your particular circumstances. Where personal information is used for direct marketing, you may object at any time.

Our relevant data controller is:

Apothicon Software LLC
100 East Broad Street, Suite 1350
Columbus, Ohio, 43215
United States
support@leviathancheats.xyz

13. Supplemental U.S. State Privacy Notice

This section applies only to the extent a U.S. state privacy law applies to our processing.

During the preceding 12 months, we may have collected the following categories of personal information:

Identifiers

Examples include names, email addresses, account identifiers, IP addresses, and device identifiers.

Sources include you, your organization, your device, integrations, and service providers.

Purposes include account administration, Service delivery, security, analytics, communications, and legal compliance.

Recipients may include hosting, authentication, analytics, communications, security, and professional-service providers.

Customer-record and transaction information

Examples include contact information, subscription details, billing addresses, payment status, and purchase history.

Purposes include billing, subscription administration, support, tax compliance, and recordkeeping.

Recipients may include payment processors, accounting providers, tax providers, and professional advisers.

Commercial information

Examples include plans purchased, renewal history, usage allowances, credits, and cancellations.

Purposes include providing the Service, billing, analytics, and customer support.

Internet or electronic activity

Examples include browsing activity, product interactions, log information, API usage, and diagnostic data.

Purposes include Service operation, analytics, security, abuse prevention, and improvement.

Approximate geolocation

Approximate location may be derived from IP address.

Purposes include security, fraud prevention, localization, and analytics.

Professional information

Examples include employer, job title, organization, and business contact details.

Purposes include account administration, sales, support, and business communications.

Customer Content

Customer Content may fall into one or more legally defined categories depending on what users submit.

We process it to provide the Service, follow customer instructions, maintain security, and comply with law.

Inferences

We may derive basic inferences relating to product interests, likely preferences, or account usage.

Purposes may include improving the Service, account management, and marketing, subject to applicable choices.

Sensitive personal information

We do not intentionally collect sensitive personal information beyond account credentials and information users voluntarily include in Customer Content.

We do not use or disclose sensitive personal information to infer characteristics about individuals except as disclosed and legally permitted.

14. California-Specific Information

Where the California Consumer Privacy Act applies, California residents may have rights to:

• know the categories and specific pieces of personal information collected;
• know the categories of sources, purposes, and recipients;
• request correction;
• request deletion;
• opt out of sale or sharing;
• limit certain uses or disclosures of sensitive personal information;
• receive equal treatment when exercising privacy rights.

Our disclosure regarding sale and sharing appears in Section 6.

To exercise applicable California rights, contact support@leviathancheats.xyz.

California residents may use an authorized agent. We may require written authorization and may separately verify the resident’s identity.

15. Appeals

Residents of jurisdictions providing an appeal right may appeal a denied privacy request by emailing support@leviathancheats.xyz with the subject line “Privacy Request Appeal.”

Your appeal should identify the original request and explain why you believe the decision should be reconsidered.

We will respond within the period required by applicable law and provide information about additional complaint options where required.

16. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13.

If you believe a child under 13 provided personal information to us, contact support@leviathancheats.xyz. We will investigate and take appropriate action.

Users must also meet the minimum age requirements stated in our Terms of Service.

Business customers are responsible for determining whether their use of the Service involves children’s personal information and for obtaining any legally required notices, permissions, or parental consent.

17. Automated Decision-Making

We do not use personal information to make decisions based solely on automated processing that produce legal or similarly significant effects concerning individuals.

18. Deidentified and Aggregated Information

We may create aggregated or deidentified information from personal information.

We may use and disclose this information for lawful purposes, including analytics, research, security, Service improvement, and business planning.

Where required by law, we will maintain deidentified information in deidentified form and will not attempt to reidentify it except to test whether our deidentification methods are effective.

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our practices, or applicable requirements.

The “Last Updated” date identifies the latest revision.

When changes are material, we will provide additional notice through the Service, account notification, email, or another appropriate method.

Where required, we will obtain consent before applying a new processing practice to previously collected information.

20. Contact Us

Questions, complaints, or privacy requests may be directed to:

Apothicon Software LLC
Attn: Privacy
100 East Broad Street, Suite 1350
Columbus, Ohio, 43215
United States

Email: support@leviathancheats.xyz
Website: https://leviathancheats.xyz/

You may also contact the appropriate privacy or data-protection regulator in your jurisdiction.