Capza Privacy Policy

Effective October 22, 2026 · Version 1.7

This Privacy Policy explains how Level Up Residential LLC, operating Capza (“Capza,” “we,” “us,” or “our”), collects, uses, discloses, and retains personal information when you use Capza or interact with our public websites.

1. Scope

This policy applies to Capza's public websites, accounts, application services, support interactions, and related online services controlled by Level Up Residential LLC.

It does not govern independent third-party websites or services that we do not control.

Capza is currently intended for users in the United States.

2. Information you provide

Depending on the features you use, we may collect:

Account information

Name, email address, Capza account identifiers, Clerk authentication identifiers, account role, subscription status, and related account information.

Authentication credentials and session management are handled through Clerk. Capza does not store your Clerk password.

Property information

Property name, city, state, ZIP code, property use, unit labels, systems and components, installation or replacement years, condition, make and model, serial numbers, notes, and other property details you choose to provide.

Capza's current structured property database does not require a street-address field. Documents or photos you choose to attach may nevertheless contain a street address or other identifying information.

Planning information

Current Reserve, reserve allocations, planning dates, replacement-cost inputs, project budgets, estimated costs, preparedness information, and other information used to produce planning outputs.

Ownership Record information

Repairs, replacements, retired systems, completed projects, actual dates and costs, notes, and other historical property information.

Documents and photos

Invoices, receipts, warranties, manuals, permits, inspection records, insurance documents, tax documents, photos, and other records you choose to attach to the property record.

Files and photos are stored as submitted. Photo files may contain embedded metadata, including device, date, or location metadata, if that information exists in the original file. Capza does not currently perform an automatic EXIF-stripping process.

These records can contain personal or sensitive information that is not apparent from the file category alone. Avoid submitting information Capza does not need, such as unnecessary Social Security numbers, passwords, or full financial-account credentials.

Communications

Information you provide when contacting support or submitting a privacy request. Support messages may be transmitted through our email provider and retained in our business email systems according to their normal retention settings.

Account deletion requests

If you request deletion of your Capza account, we create a limited deletion-authorization record designed to document that the authenticated account requested deletion. That record may include your account identifiers, email address, the acknowledgement text or version you accepted, date and time, originating IP address, authentication status, request status, and completion time.

The deletion-authorization record does not preserve your deleted property records, documents, photos, or other Ownership Record content.

3. Information collected automatically

First-party acquisition and attribution information

Capza uses limited first-party measurement to understand how people find the service and whether they sign up or subscribe. Depending on how you arrive at Capza, we may collect:

  • UTM source, medium, campaign, content, and term;
  • partner or referral source;
  • advertising click identifiers such as Google or Meta click IDs;
  • referring origin and path;
  • landing path;
  • a randomly generated Capza visitor identifier;
  • signup and plan-conversion events.

Advertising-measurement information (Meta Pixel)

On limited public acquisition and signup-related pages, Capza uses the Meta Pixel for advertising measurement and conversion reporting. When the Meta Pixel runs, Meta may receive technical and browser information and identifiers associated with the visit and the event, which may include IP address, browser and device information, the page URL, the referrer, the Meta browser identifiers _fbp and _fbc, and the event information. The events are a view of the public acquisition page, a click on Start Free, a click on Start Pro, and a completed signup.

Capza intentionally does not send Meta, through this implementation, property-record content, property addresses, reserve amounts, systems or components, Property Memory content, documents, photos, warranties, notes, property history, or your name, email address, or phone number. The Meta Pixel does not run on authenticated property or customer pages. Capza has not enabled automatic advanced matching, automatic button or page-content tracking, or the Meta Conversions API. Meta's handling of the information it receives is governed by Meta's own terms and policies.

Advertising-measurement information (Google Ads tag)

On limited public acquisition and signup-related pages, Capza uses the Google Ads tag for advertising measurement. When the Google Ads tag runs, Google may receive technical and browser information and identifiers associated with the visit, which may include IP address, browser and device information, screen size, the page URL and title, the referrer, the Google cookies and identifiers described in Section 4, and, when you arrive from a Google advertisement, the Google click identifier.

Capza uses Google Ads conversion measurement to understand advertising performance. Capza may send Google an event when a visitor clicks Start Free or Start Pro on an approved public marketing page and a separate event when a visitor completes creation of a Capza account.

The first event records that a visitor who is not signed in clicked Start Free or Start Pro. It does not mean that an account was created. Capza sends one such event for that click, from a public marketing page and never from an authenticated property or customer page. It names the Google Ads conversion action and carries no monetary value or currency, and no name, email address, phone number, or property information.

The second event is sent only when a new Capza account is successfully created, once for that account, from a signup page and never from an authenticated property or customer page. It names the Google Ads conversion action and carries a random transaction identifier that is not linked to your account. It carries no value, currency, name, email address, phone number, or property information.

Capza intentionally does not send Google, through this implementation, property-record content, property addresses, reserve amounts, systems or components, Property Memory content, documents, photos, warranties, notes, property history, or your name, email address, or phone number. The Google Ads tag does not run on authenticated property or customer pages. Capza has not configured enhanced conversions or hashed-email matching through this tag. Google's handling of the information it receives, including its use for advertising, is governed by Google's own terms and policies.

Website analytics (Google Analytics 4)

On Capza's public website pages, Capza uses Google Analytics 4, a web-analytics service provided by Google, to understand how visitors find and use those pages. These are the home page and the public product, pricing, educational, Ownership Guides, Security & Privacy, FAQ, and Contact pages. Google Analytics does not run on sign-in, sign-up, onboarding, the Pro start step, the legal pages, or any page you reach after signing in, such as your properties, Capital Plan, Property Memory, documents, reports, or account settings, and it does not run for a browser that is signed in to Capza.

When Google Analytics runs, Google may receive technical and browser information and identifiers associated with the visit, which may include IP address, browser and device information, screen size, language, the page URL and title, the referrer, the Analytics cookies and identifiers described in Section 4, and the approximate location Google derives from the IP address. Capza sends Google Analytics:

  • a page view for each public page you open, with the page address limited to its path and the campaign information in it (the utm_source, utm_medium, utm_campaign, utm_content, and utm_term parameters and Google click identifiers), the page title, and the previous public page or, for a visit from another website, only that website's address and not its path;
  • when you click Start Free or Start Pro on one of these pages and are not signed in, an event named start_free or start_pro, with no other information. These events record interest in signing up. They do not mean that an account was created;
  • how far you scroll on the page.

Capza does not send Google Analytics your name, email address, phone number, Capza or Clerk account identifiers, a user identifier, property information, or anything about your account, and it blocks the page from being measured if its address contains an identifier-like value or an email address. Capza has not turned on Google signals, advertising personalization, audience features, or a link between Google Analytics and Google Ads, and does not import Google Analytics events into Google Ads as conversions.

Capza uses Google Analytics to understand traffic sources, which public pages attract visitors, how visitors move between them, and which pages lead visitors to click Start Free or Start Pro. Reports Capza sees are based on events grouped by browser and are aggregated; they are not a record of what any identified person did, and a browser can sometimes be linked to a person by other information. Completed account creation, property creation, activation, subscriptions, and other activity inside Capza are measured by Capza's own first-party systems and are not sent to Google Analytics.

Capza uses Google Analytics 4, a service provided by Google, to measure traffic and engagement on selected public marketing and educational pages. Google processes information collected through Analytics to provide measurement and reporting services to Capza, subject to applicable Google terms and settings. Google's handling of information is also governed by its applicable privacy and data-processing terms.

Information collected through Google Analytics may be transmitted to and processed by Google in the United States and other countries where Google or its service providers operate. Privacy and data-protection laws in those countries may differ from those in your place of residence.

Engagement information

For signed-in users, Capza may record limited service-engagement information such as session identifiers and active time so we can understand whether the product is being used and how acquisition sources relate to engagement and plan selection.

Capza's current first-party engagement analytics do not store the content of your documents, photos, property records, reserve amounts, filenames, IP address, or user agent as analytics-event fields.

Email communications

Capza may send you optional emails, such as a reminder to continue setting up your record or to add a system, and, if you choose to receive them, product updates and announcements, such as news about new features, company announcements, and occasional educational information about owning a home. We keep a record of each optional email sent to you (which message, when, and whether it was delivered, bounced, or reported as unwanted) and of your email preferences. You can unsubscribe from optional emails using the link in any of them, without signing in, or change your preferences in Account Settings. Account, security, and support messages are required service messages and are not part of these preferences. Capza does not use open or click tracking in its emails.

We send reminder emails as optional service messages that you can stop at any time. We send product update and announcement emails only if you choose to receive them, and you can change that choice at any time. Unsubscribing from product updates and announcements does not change your reminder emails, and unsubscribing from reminder emails does not change product updates and announcements.

Request and infrastructure information

Our hosting, authentication, security, and infrastructure providers may process technical request information such as IP addresses, browser or device information, request logs, authentication identifiers, and similar information as part of operating and securing their services.

As described above, Capza also records the originating IP address when an authenticated user submits an account-deletion request for deletion-authorization and dispute-protection purposes.

4. Cookies and browser storage

Capza currently uses limited first-party cookies and browser storage and, on limited public acquisition and signup-related pages, cookies set by the Meta Pixel and the Google Ads tag, and, on the public website pages described in Section 3, cookies set by Google Analytics.

cz_vid

A first-party random visitor identifier used to preserve acquisition attribution. It is currently configured for a 365-day lifetime.

cz_internal

A first-party internal-owner suppression cookie used to prevent internal owner activity from contaminating acquisition tracking. It is currently configured for a 365-day lifetime.

_fbp

A cookie set by the Meta Pixel on the Capza domain that identifies the browser for Meta's advertising measurement. Its lifetime is set by Meta.

_fbc

A cookie set by the Meta Pixel when you arrive from a Meta advertisement that carries a Meta click identifier. It stores that click identifier for Meta's advertising measurement. Its lifetime is set by Meta.

_gcl_au

A cookie set by the Google Ads tag on the Capza domain that Google uses for advertising measurement and to attribute visits that follow a Google advertisement. Its lifetime is set by Google.

_gcl_aw

A cookie set by the Google Ads tag when you arrive from a Google advertisement that carries a Google click identifier. It stores that click identifier for Google's advertising measurement. Its lifetime is set by Google.

When the Google Ads tag runs, Google may also set or read its own cookies and identifiers in your browser on Google's domains. Those are governed by Google's own policies.

_ga and _ga_M1H9Y810X4

Cookies set by Google Analytics on the Capza domain on the public website pages described in Section 3. _ga distinguishes browsers so that Google Analytics can count visitors and sessions, and _ga_M1H9Y810X4 keeps session state for Capza's Analytics property. Their lifetimes are set by Google (commonly up to two years, renewed when you visit again). The lifetime of these cookies is different from how long Capza keeps the resulting event data in Google Analytics, which is described in Section 11. Google Analytics may also set or read its own cookies and identifiers in your browser on Google's domains, governed by Google's own policies.

Clerk cookies

Clerk uses cookies and related technologies necessary to authenticate users, maintain sessions, and protect account access. Cookie names and lifetimes are controlled by Clerk's production authentication configuration.

Browser storage

Capza may use localStorage or sessionStorage for preferences, temporary session identifiers, account-role information, interface state, and limited first-party engagement/session continuity.

Capza does not currently use third-party session-replay tools or third-party behavioral analytics scripts to watch activity within private property records.

5. Billing information

Payments are processed through Stripe.

Full payment-card numbers are collected and processed by Stripe and do not pass through or reside in Capza's application database.

Capza receives or maintains billing and subscription information needed to administer Pro access, which may include Stripe customer and subscription identifiers, subscription status, billing-period information, payment status, plan transitions, and consent records.

6. How we use information

We use information to:

  • create, authenticate, and secure accounts;
  • operate the Property, Capital Plan, Property Memory, and Ownership Record features;
  • generate planning calculations and reports;
  • store and display documents and photos you choose to maintain;
  • administer Free and Pro access;
  • process billing and subscription changes;
  • provide support and service communications;
  • send optional reminder emails you have not opted out of, send product update and announcement emails only if you opt in, and honor your email choices;
  • receive and process deletion and privacy requests;
  • prevent abuse, fraud, and security incidents;
  • debug, maintain, and improve the service;
  • measure acquisition, signup, plan conversion, and engagement;
  • understand advertising-source performance and aggregate advertising spend;
  • measure advertising conversions through the Meta Pixel on limited public acquisition and signup-related pages;
  • measure advertising performance through the Google Ads tag on limited public acquisition and signup-related pages;
  • measure traffic, content engagement, and public-site signup interest through Google Analytics on the public website pages described in Section 3;
  • comply with legal obligations and enforce our Terms.

7. Ownership Record information and confirmation

Information in a property record may come from you, documents and photos you provide, or calculations and organization performed by Capza using information you provide.

Information does not become independently verified, inspected, certified, endorsed, authenticated, or guaranteed by Capza merely because it is processed through the service.

The property owner remains responsible for reviewing, correcting where appropriate, and accepting information that becomes part of the owner's record.

8. Service providers

Capza currently uses service providers that include:

  • Clerk for authentication and account sessions;
  • Supabase for application database, private file storage, and related infrastructure;
  • Stripe for subscription billing and payment processing;
  • Vercel for application hosting and deployment;
  • Resend for email delivery, including support and account messages and optional reminder, product update, and announcement emails, and for delivery, bounce, and complaint reports about those messages;
  • Marker.io for product-feedback capture restricted to approved tester and administrator accounts;
  • Meta for advertising measurement and conversion reporting through the Meta Pixel on limited public acquisition and signup-related pages;
  • Google for advertising measurement through the Google Ads tag on limited public acquisition and signup-related pages;
  • Google for website analytics through Google Analytics 4 on the public website pages described in Section 3.

Capza also connects to Meta and Google Ads to import aggregate advertising-performance and spend information for internal marketing measurement.

We may disclose information to service providers as reasonably necessary for them to perform services on our behalf, subject to applicable contractual and security arrangements.

9. Advertising, attribution, and analytics

Capza advertises through channels that may include Google and Meta. Advertising links may contain campaign information or click identifiers, and Capza may preserve those identifiers to understand which source led to a visit, signup, plan selection, or later engagement.

In the current launch configuration:

  • Capza uses first-party attribution and engagement measurement;
  • Capza uses the Meta Pixel on limited public acquisition and signup-related pages for advertising measurement and conversion reporting, as described in Sections 3 and 4;
  • Capza uses the Google Ads tag on limited public acquisition and signup-related pages for advertising measurement and conversion reporting (a click on Start Free or Start Pro, and a completed account registration), as described in Sections 3 and 4;
  • Capza uses Google Analytics 4 on the public website pages described in Section 3 to measure traffic sources, page views, scroll depth, navigation between public pages, and Start Free and Start Pro clicks. It is not used for advertising conversions, is not linked to Google Ads, does not use Google signals or advertising personalization, and does not run for a signed-in browser or on any authenticated page.
  • Capza imports aggregate advertising-performance and spend data from Google and Meta;
  • Capza does not use enhanced conversions, a conversion API, hashed-email matching, or session replay, and does not transmit private in-app property activity or Ownership Record content to advertising platforms or analytics providers. Capza does not run the Meta Pixel, the Google Ads tag, or Google Analytics on authenticated property or customer pages.

If Capza later expands advertising-platform conversion measurement or enables other materially different tracking, we will review the privacy and choice requirements before enabling it and update this policy as appropriate.

10. Sale, sharing, and targeted advertising

Capza does not sell property-record data.

The current launch configuration does not disclose private Ownership Record content, property records, documents, photos, or in-app property activity to advertising platforms for cross-context behavioral advertising.

Information that Meta receives through the Meta Pixel from limited public acquisition and signup-related pages, as described in Sections 3 and 4, is limited to technical and browser information, identifiers, and event information, and does not include property-record content.

Information that Google receives through the Google Ads tag from limited public acquisition and signup-related pages, as described in Sections 3 and 4, is limited to technical and browser information, identifiers, page information, and the conversion events described in Section 3, and does not include property-record content.

Information that Google receives through Google Analytics from the public website pages described in Section 3 is limited to technical and browser information, identifiers, page information, campaign information, scroll depth, and the Start Free and Start Pro click events, and does not include property-record content or account information.

Capza uses Google Analytics to measure visits and engagement on selected public pages. Capza does not use Google Analytics to create advertising audiences, enable Google Signals, personalize advertisements, or import Analytics events into Google Ads. The information collected through Google Analytics and the available opt-out mechanism are described in this Privacy Policy.

Some state privacy laws use defined terms such as “sale,” “sharing,” or “targeted advertising” that can depend on the specific parties, data, and technical flow involved. If Capza's practices change in a way that triggers a legally required opt-out right, Capza will provide the required mechanism and honor qualifying universal opt-out signals where required.

11. Data retention

We retain information for as long as reasonably necessary to provide Capza, maintain the Ownership Record chosen by the user, administer subscriptions, protect security, resolve disputes, maintain legally appropriate business records, and satisfy legal or accounting obligations.

Downgrading to Free changes access and billing. It does not automatically delete the account or property record.

Website analytics data

Capza keeps Google Analytics event data for fourteen months and does not reset that period when a returning browser is seen again. Analytics cookies are separate: they last as long as Google sets them (see Section 4) and you can delete them in your browser at any time. Information Capza has already received in aggregated reports may be kept after the underlying events age out.

Account deletion

Account deletion is a separate process initiated through Account Settings. Once an approved deletion is completed, Capza removes the account content scheduled for deletion from its active application systems and coordinates the deletion process across its application, storage, billing, and authentication systems as appropriate.

A limited deletion-authorization record may be retained after deletion for security, fraud prevention, recordkeeping, and dispute purposes. Stripe or other service providers may retain transaction, security, or other information according to their own legal and operational retention obligations.

When your account is deleted we delete the record of optional emails sent to you and your email preferences. We keep a minimal record that an address unsubscribed, bounced, or reported an email as unwanted, in a form that does not identify your account, so that we do not send optional email to that address again.

Deleted information may also remain for a limited period in normal infrastructure backup cycles before aging out.

12. Security

We use administrative, technical, and organizational measures designed to protect information. These include authentication, row-level access controls, private file storage, restricted access, short-lived signed file links, and other application and infrastructure controls.

No system can guarantee absolute security. If we identify a qualifying security breach, we will respond and provide notifications required by applicable law.

13. Your privacy choices and rights

Capza accepts privacy requests from users nationally, even where a particular state privacy statute may not apply to Capza.

Depending on applicable law, you may have rights to:

  • request access to personal information;
  • request correction of inaccurate personal information;
  • request deletion;
  • request a copy or portable export of certain information;
  • opt out of legally defined sale, sharing, or targeted advertising if Capza engages in such processing;
  • appeal certain privacy-request decisions where applicable;
  • exercise other rights provided by applicable law.

You may submit a privacy request through Capza's Contact Support flow by selecting Privacy Request, or by emailing info@levelupresidential.com.

You can limit Google Analytics collection through supported browser privacy settings, tools that block analytics cookies or scripts, or Google's Analytics Opt-out Browser Add-on at https://tools.google.com/dlpage/gaoptout. These controls may not prevent other measurement technologies described in this Privacy Policy from operating.

We may need to verify your identity before completing a request. We will not unlawfully discriminate against you for exercising applicable privacy rights.

14. Global Privacy Control and universal opt-out signals

Capza uses the Meta Pixel, the Google Ads tag, and Google Analytics only as described in Sections 3, 4, and 9. Capza does not currently provide a separate opt-out mechanism for that processing and does not currently respond to Global Privacy Control signals through the Meta Pixel, the Google Ads tag, or Google Analytics.

If Capza later engages in processing for which applicable law requires recognition of Global Privacy Control or another universal opt-out mechanism, Capza will honor qualifying signals as required by law.

15. Children

Capza is intended for adults. Account holders must be at least 18 years old. We do not knowingly offer Capza accounts to children under 13.

16. Changes to this Privacy Policy

We may update this Privacy Policy as Capza, our providers, or applicable law changes. Material changes will be communicated in a manner appropriate to the change and applicable legal requirements.

The version and effective date displayed at the top identify the policy currently in effect.

17. Contact

Level Up Residential LLC
Email: info@levelupresidential.com