Privacy Policy

Scope and data controller

This Privacy Policy applies to Leggo.dev, the website, free browser-based tools, audit request forms, and related communications operated by Leggo Commerce LLC (“Leggo,” “we,” “us,” or “our”).

Leggo Commerce LLC is the controller responsible for the personal information described in this policy:

Information we collect

Information you provide

• Email address, website or competitor URL, and any information submitted with an audit or project request.
• Project requirements, business details, correspondence, feedback, and support communications.
• Contract, invoice, transaction, and payment status information. Full payment-card details are processed by the selected payment provider and are not stored by Leggo.

Information collected automatically

When analytics or advertising technologies are enabled with any consent required by law, we may collect IP address, approximate location, device and browser information, pages viewed, referring URLs, interaction events, cookie identifiers, and advertising measurement data.

Free tools

How we use information

• Respond to audit and project requests and prepare proposals.
• Provide, manage, support, and improve contracted services.
• Operate, secure, troubleshoot, and prevent abuse of the website and forms.
• Measure website performance and understand how visitors use the site.
• Measure and improve advertising campaigns where you have provided required consent.
• Maintain business, accounting, tax, fraud-prevention, and legal records.
• Establish, exercise, or defend legal claims and enforce our agreements.

We do not currently operate a newsletter, user accounts, public comments, or user file uploads. If these features are introduced, this policy will be updated before they are used to collect additional information.

Legal bases for processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Steps before a contract and contract performance: responding to requests, preparing proposals, and delivering agreed services.
• Legitimate interests: operating and securing the site, managing client relationships, improving services, and preventing fraud, where those interests are not overridden by your rights.
• Consent: non-essential analytics, advertising cookies, and similar technologies. You may withdraw consent at any time.
• Legal obligations: tax, accounting, regulatory, and lawful disclosure requirements.

How information is shared

We do not sell personal information for money. We disclose information only as needed to operate our business, deliver services, comply with law, or with your direction.

We may also disclose information to professional advisers, authorities when legally required, or a successor in connection with a merger, financing, acquisition, or sale of all or part of our business.

International data transfers

Leggo is a United States company and serves clients in the United States, European Union, and United Kingdom. Information may therefore be processed outside your country. Where required, we rely on appropriate safeguards such as adequacy decisions, contractual protections, Standard Contractual Clauses, or a provider’s valid participation in an approved data-transfer framework.

Third-party services operate under their own privacy terms. See the privacy information published by Google , Meta , Cloudflare , and Tuta .

How long we retain information

• Audit and prospective-client requests: up to 24 months after the last meaningful interaction.
• Client, contract, invoice, and transaction records: generally up to 7 years after the relationship ends, or longer when required by law or needed for legal claims.
• Security and server logs: only for the period reasonably necessary for security, troubleshooting, and abuse prevention.
• Analytics, advertising, and consent records: according to our configured retention settings, applicable law, and the relevant provider’s controls.

We may delete or anonymize information earlier when it is no longer needed. A deletion request does not require us to erase information that must be retained for legal obligations, fraud prevention, or legal claims.

Your privacy rights

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or a copy of your personal information; object to certain processing; and withdraw consent.

Residents of jurisdictions with applicable US state privacy laws may also have rights to know, delete, correct, or obtain personal information and to opt out of certain targeted advertising, sale, or sharing. We do not sell personal information for money. Where legally required, we will honor recognized browser-based opt-out preference signals.

To exercise a right, email hello@leggo.dev . We may need to verify your identity. EU and UK residents may also lodge a complaint with their local data protection authority.

Security and children’s privacy

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No online service can guarantee absolute security, and you provide information at your own risk.

The site is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has submitted information, contact us so we can review and delete it where appropriate.

Changes and contact

We may update this Privacy Policy as our services, providers, or legal obligations change. The effective date at the top identifies the current version. Material changes will be communicated where required by law.

Questions or requests may be sent to hello@leggo.dev or to the postal address listed in Section 1.