Legal
Privacy Policy
Last updated: February 1, 2026
1. Who we are
Legacy Tagged Co. (“Legacy Tagged”, “we”, “us”, or “our”) operates legacytagged.com and the Legacy Tagged mobile-accessible web application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.
2. Information we collect
Account information
When you create an account we collect your email address, name (optional), and password hash. We do not store plaintext passwords.
Vehicle & build data
Information you enter about your vehicle — year, make, model, VIN (optional), mileage, build milestones, media files, and documents — is stored on our servers and associated with your account.
Payment information
Payments are processed by Stripe. We do not store full card numbers or CVV codes. We retain the Stripe customer ID and payment intent references to support order history and subscription management.
QR scan data
When someone scans a QR code linked to one of your vehicles, we log the approximate scan count and last-scanned timestamp. We do not log individual scanner identities or IP addresses.
Communications
If you contact us by email, we retain those communications to respond to your enquiry.
3. How we use your information
- To provide and operate the Legacy Tagged service
- To process orders and manage subscriptions
- To send transactional emails (order confirmations, shipping notifications, renewal reminders)
- To generate and host your vehicle's QR-linked provenance record
- To transfer vehicle records to new owners when you initiate a transfer
- To comply with legal obligations
We do not sell your personal data to third parties. We do not use your data for advertising targeting.
4. Data sharing
We share data only as necessary to operate the service:
- Supabase — database and authentication infrastructure
- Stripe — payment processing
- Resend — transactional email delivery
- Flowcode — physical QR code production
- Vercel — web hosting and infrastructure
When you initiate an ownership transfer, the recipient's email address is shared with the new owner as part of the transfer record. Public vehicle pages display only the information you have marked as public.
5. Data retention
We retain your account data for as long as your account is active. Vehicle provenance records are retained indefinitely — they are designed to outlast individual ownership and pass to new owners. If you delete your account, your personal data is removed but the provenance records (stripped of personal identifiers) may be retained as part of the vehicle's historical record.
6. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage, row-level security in our database, and service-role key isolation. No system is perfectly secure; we encourage you to use a strong, unique password and enable two-factor authentication.
7. Cookies
We use cookies for authentication session management only. See our Cookie Policy for details.
8. Your rights
Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, email us at hello@legacytagged.com.
9. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
10. Contact
Questions about this policy or your data? Email us at hello@legacytagged.com.