Privacy policy.
Data controller
Legacy Industries, Inc. (Delaware, United States) is the controller for the data collected via runyourlegacy.com, sign-up and the client account. Contact: [email protected]. For people located in the EU/EEA, the GDPR applies; clients located in other countries benefit from the same protection commitments.
Data, purposes & legal basis
Data: account & identity (email, name, hashed password, optional phone), usage & technical (logs, IP, browser), the content you enter in the service (which remains yours, Legacy then acting as processor), billing (card details are handled by Stripe, never seen or stored by Legacy), exchanges with support.
Purposes: to provide, operate and improve the service, bill, communicate with you, ensure security, and meet our legal and accounting obligations.
Legal bases: performance of the contract, legitimate interest (security, improvement, B2B outreach), legal obligation (accounting), consent (analytics, revocable at any time).
Outreach: Legacy may contact professionals using publicly accessible business data; you can object and request deletion at any time by email.
Processors & recipients
Your data is never sold. It is shared only with the providers necessary to run the service, bound by contract: Hetzner (hosting, EU), Stripe (payments), Google Workspace (email), Google and Anthropic (AI features). Authorities may be recipients where legally required.
Transfers outside the European Union
Legacy is established in the United States and some providers may process data outside the EU. These transfers are governed by the European Commission's Standard Contractual Clauses. Data at rest is hosted within the European Union (Germany).
Retention period
Account: for the duration of the contract, then 30 days (export). Business content: erased 30 days after termination. Invoices: 10 years (legal obligation). Technical logs: 12 months maximum.
Your rights
You have the rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. To exercise them: [email protected] (reply within one month). If our response is unsatisfactory, you may lodge a complaint with the CNIL (www.cnil.fr) or the data protection authority of your country.
Cookies
This site uses only strictly necessary cookies and an anonymous, cookieless analytics measure subject to your consent. Details and preferences: Cookie policy.