Privacy Policy

Effective: March 2026 · Last updated: March 2026

1. Introduction

LegacyLoop (“we,” “us,” or “our”) operates the LegacyLoop platform accessible at legacy-loop.com (the “Service”). We are committed to protecting your personal information and your right to privacy.

This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. Please read it carefully. If you disagree with its terms, please discontinue use of our Service.

2. Information We Collect

Information You Provide

• Account registration: Name, email address, and password
• Profile information: Display name, location, and preferences
• Item listings: Photos, descriptions, condition notes, and pricing information
• Communications: Messages sent through the platform, support inquiries, and feedback
• Payment information: Processed securely via Square — we do not store your credit card details

Information Collected Automatically

• Device and browser information
• IP address
• Pages visited and features used
• Referring URLs
• Cookies and similar tracking technologies

Information from Third Parties

• Facebook / Instagram: Basic profile information and page details (when you connect your account)
• eBay: Listing and pricing data for market comparables
• Square: Payment confirmation and transaction status

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the platform
• Process transactions and send related information
• Send you notifications about your account, listings, and buyer activity
• Improve and personalize your experience
• Understand how users interact with the platform
• Develop new features, products, and services
• Communicate with you for customer support and marketing purposes (with your consent)
• Process payments and prevent fraudulent transactions
• Comply with legal obligations

3a. Opt-In Data Sharing Program

LegacyLoop offers an optional data sharing program that helps improve AI accuracy and market pricing for all users. This program is:

• Explicitly opt-in: You must actively enable each data sharing category. Nothing is shared by default.
• Granular: Four independent categories — anonymized data collection, AI training data, market research, and aggregate trend reports — each controllable separately.
• Fully revocable: You can change or revoke your consent at any time in Settings → Privacy & Data Sharing.
• Anonymized: All shared data is stripped of personally identifiable information before processing.
• Incentivized transparently: Users who enable data collection receive 100 bonus credits as a one-time thank-you. Credits are never clawed back if consent is later revoked.

We never sell your data. Shared data is used solely to improve LegacyLoop pricing algorithms, market trend analysis, and AI identification accuracy.

3b. Buyer Intent Scanner

LegacyLoop offers a Buyer Intent Scanner feature that analyzes publicly visible social media posts, classified ads, and buy/sell boards to match buyer intent with your inventory. This feature:

• Requires explicit consent: You must opt in before any scanning occurs. Consent is saved to your account.
• No audio recording: This feature does not access your microphone, record audio, or perform any ambient listening.
• Public data only: Only analyzes publicly visible posts — never private messages, DMs, or protected content.
• On-demand only: Scans run only when you explicitly press the Scan button. There is no background monitoring.
• Auto-deletion: Scan results are deleted after your chosen retention period (7, 30, or 90 days).
• Fully revocable: You can revoke consent and delete all scan data at any time.

Note: This feature is currently in beta and displays simulated results for demonstration purposes. The production version will scan real public posts with the same privacy guarantees described above.

4. Sharing Your Information

We do not sell your personal information.

We may share your information in the following limited circumstances:

• Service providers: Square (payments), Resend (email), Shippo (shipping), and Supabase (infrastructure) — only as necessary to provide the Service
• Platform integrations: Facebook, Instagram, eBay, and other platforms you explicitly authorize
• Legal requirements: When required by law, subpoena, or government request
• Business transfers: In connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time (see Section 9). We may retain certain information as required by law or for legitimate business purposes such as fraud prevention.

6. Cookies

LegacyLoop uses the following types of cookies:

• Essential cookies: Required for authentication and security (e.g., JWT session token)
• Analytics cookies: Help us understand how the platform is used (aggregated and anonymized)
• Preference cookies: Remember your settings such as theme choice (light/dark/auto) and layout preferences

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

7. Facebook and Meta Platform

If you connect your Facebook or Instagram account to LegacyLoop, we access only the permissions you explicitly grant.

Our use of information received from Meta APIs complies with Meta's Platform Terms and Developer Policies.

• We only access permissions you explicitly grant during the connection flow
• Data received from Meta is used solely for posting listings on your behalf and displaying marketplace information
• We do not access your personal messages or friends list
• You can revoke LegacyLoop's access at any time via Facebook Settings → Apps and Websites

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data in a structured, machine-readable format
• Objection: Object to certain processing of your personal data
• Restriction: Request that we limit how we use your data

To exercise any of these rights, contact us at hello@legacy-loop.com.

9. Data Deletion

To request deletion of your data:

1. Send an email to hello@legacy-loop.com with the subject “Data Deletion Request”
2. Include your full name and the email address associated with your account
3. We will confirm receipt within 5 business days
4. All personal data will be permanently deleted within 30 days
5. A confirmation email will be sent upon completion

You can also submit a deletion request via our Data Deletion page.

10. Children's Privacy

Our Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us immediately at hello@legacy-loop.com and we will take steps to delete such information.

11. Security

We implement commercially reasonable security measures to protect your personal information, including encrypted password storage (bcrypt), HTTPS encryption, secure JWT tokens, and role-based access controls. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date at the top. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

Email: hello@legacy-loop.com / support@legacy-loop.com

Website: legacy-loop.com

Mailing: LegacyLoop, Maine, USA