Privacy Policy

1. Overview. This Privacy Policy explains how Legitize, operated by Jak Alwaz, collects, uses, and shares personal information. We handle personal information in accordance with Canada’s PIPEDA (and Quebec’s Law 25 where it applies), and we describe below additional rights for users in other regions.

2. Information we collect. Content you submit (links/URLs you paste and questions you ask); account information (if you sign up — email address and authentication identifiers, for example via Google sign-in); payment information (if you subscribe, payment is processed by Stripe — we do not store full card numbers; Stripe handles card data and shares limited details such as last 4 digits and status with us); usage data (pages viewed, features used, approximate counts including for anonymous sessions, device/browser info, and IP address); and cookies / local storage (used to keep you signed in, remember free-tier usage, and measure usage — where required, we ask for your consent to non-essential cookies).

3. How we use information. To provide and operate the Service (including generating analyses); to enforce free-tier limits and process subscriptions; to improve the Service and develop features; to communicate with you about your account or the Service; and to comply with law and protect against misuse. We rely on your consent and/or our legitimate or legal interests as the basis for these uses, as applicable.

4. AI processing and third parties. To generate analyses, content you submit may be sent to third-party AI/model providers and other providers that help us operate. We share information with AI/model providers (to produce outputs), Stripe (payments), Vercel and other hosting/infrastructure providers, analytics providers, and authorities where required by law. We do not sell your personal information.

5. Data retention. We keep information only as long as needed to provide the Service and for legitimate or legal purposes, then delete or anonymize it.

6. Your rights. Depending on where you live, you may have rights to access, correct, delete, or port your data, withdraw consent, or object to certain processing — for example under PIPEDA / Quebec Law 25 (Canada), the EU/UK GDPR, or California’s CCPA/CPRA. To exercise these, contact hello@legitize.app. You may also complain to your local privacy regulator (in Canada, the Office of the Privacy Commissioner).

7. Children. The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

8. International transfers. Your information may be processed in countries other than your own, including wherever our providers operate. We take steps to protect it as required by applicable law.

9. Changes. We may update this Policy and will post the new effective date.

10. Contact. hello@legitize.app.