Overview and Scope
LegacyGrid AI [PLACEHOLDER — INSERT FULL LEGAL ENTITY NAME AND FORM] ("LegacyGrid AI," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information through legacygridai.com and any webpage, form, or communication that links to this Policy (collectively, the "Site"). This Policy applies to Site visitors and people who contact us about prospective services. A separate client agreement, statement of work, or data-processing addendum may govern information handled during a client engagement. If those terms conflict with this Policy, the engagement-specific terms control for the engagement data at issue. This document is v1.0 — DRAFT FOR ATTORNEY REVIEW, prepared July 19, 2026. It is not effective until reviewed, approved, and adopted by LegacyGrid AI with an attorney-confirmed effective date.
1. Information We Collect
Information You Provide
When you use the Site or contact us, you may provide: • Contact details: name, email address, telephone number, organization, role, and location. • Inquiry and assessment details: organization type, requested service, project stage, infrastructure scale, desired timeline, estimated budget range, decision urgency, referral source, site address, estimated jobs, primary challenge, questions, and additional information. • Communications and records of our follow-up, including meeting requests and correspondence. • Privacy-request details needed to verify and respond to a request. Please do not submit Social Security numbers, government identification numbers, financial-account credentials, protected health information, export-controlled information, classified information, or confidential third-party technical data through the Site unless we expressly request it through an approved secure channel.
Information Collected Automatically
When you visit the Site, we and our service providers may automatically collect, subject to your consent choices: • Standard analytics: anonymous session identifier, device category, pages viewed, referring pages, campaign parameters, and timestamps after analytics consent. • High-detail analytics: only when separately selected, a non-reversible security hash derived from the request, browser and operating-system family, language, time zone, screen dimensions, campaign attribution, and value-free journey events such as a button click, scroll milestone, or form milestone. We do not record typed form text in journey events. • Optional precise location: only when you separately select location sharing and approve the browser permission request. We do not request it passively. • Network and security information: request logs and signals used to detect abuse, fraud, or security incidents. We do not retain raw Internet Protocol addresses in our first-party visitor analytics tables. • Cookie and similar-technology information described in our Cookie and Analytics Notice.
2. How We Use Personal Information
We use personal information to: • Receive, review, route, and respond to inquiries and assessment requests. • Determine whether a potential engagement fits our services and to communicate about proposals or meetings you request. • Operate, maintain, secure, troubleshoot, and improve the Site and our business processes. • Understand Site performance and aggregate visitor patterns through Google Analytics 4, subject to applicable consent and preference requirements. • Document consent, maintain records, enforce our terms, protect rights and safety, prevent misuse, and comply with law. • Create aggregated or de-identified information that does not reasonably identify an individual. We will not attempt to re-identify information we maintain as de-identified except to test our de-identification controls or as permitted by law.
3. Legal Bases Where Required
Where a law requires a legal basis for processing, we rely on one or more of the following, as applicable: your consent; steps requested by you before entering a contract; performance of a contract; compliance with legal obligations; and our legitimate interests in responding to business inquiries, operating and securing the Site, preventing misuse, and improving our services. You may withdraw consent at any time, but withdrawal does not affect processing already completed lawfully.
4. How We Disclose Information
We disclose personal information only as reasonably necessary for the purposes described below. We do not sell personal information, rent contact lists, or disclose personal information to third parties for their own direct marketing. We do not use or disclose personal information for cross-context behavioral advertising or targeted advertising as those terms are defined by applicable privacy law. • Service providers: Vendors that support website hosting, form processing, email, scheduling, customer-relationship management, security, data storage, professional services, and analytics may process information for us under appropriate restrictions. • Professional advisers: Attorneys, accountants, auditors, insurers, and consultants may receive information when reasonably necessary to advise or protect us. • Legal and safety purposes: We may disclose information when we reasonably believe disclosure is required by law, legal process, a valid government request, or the need to protect rights, property, systems, safety, or the public. • Business transactions: Information may be reviewed or transferred in connection with a financing, reorganization, merger, acquisition, sale of assets, or similar transaction, subject to appropriate confidentiality and applicable law. • At your direction: We may disclose information when you request or authorize us to do so.
5. Google Analytics 4
We use, or intend to use, Google Analytics 4 ("GA4"), a website analytics service provided by Google LLC, to understand how visitors use the Site. When GA4 is enabled, it may process browser and device information, pages visited, interaction events, approximate location, referring information, timestamps, and identifiers stored in first-party cookies. Google states that GA4 uses Internet Protocol addresses at collection time for functions such as coarse geolocation and routing and discards raw Internet Protocol addresses after use rather than associating them with user identifiers. GA4 commonly uses the first-party cookies _ga and _ga_<container-id> to distinguish users and maintain session state. Google's default expiration for those cookies is up to two years, subject to our configuration, your consent choices, browser limits, and deletion of cookies. We do not authorize advertising cookies through this Site, and GA4 is not linked to Google Ads or configured for advertising features. Our proposed GA4 user- and event-level retention period is 14 months. [PLACEHOLDER — WEBSITE OWNER TO CONFIRM THE LIVE GA4 PROPERTY'S DATA-RETENTION SETTING BEFORE PUBLICATION.] You can decline or withdraw analytics consent through Cookie Settings in the footer. You may also delete or block cookies in your browser or use Google's Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout.
7. Retention
We retain personal information only for as long as reasonably necessary for the purpose collected, to maintain appropriate business and legal records, and to resolve disputes. We may retain information longer when required by law, litigation hold, contract, insurance requirement, security investigation, or a reasonably anticipated dispute. Deletion from active systems may be followed by deletion from backups during normal backup rotation. We may retain aggregated, de-identified, or legally exempt information where permitted. [PLACEHOLDER — ATTORNEY TO CONFIRM PROPOSED RETENTION PERIODS BEFORE PUBLICATION.]
8. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the nature of the information we handle. No transmission, storage system, or security control is guaranteed to be completely secure. You should use care when deciding what to submit through an open website form and should contact us for an approved secure channel before sending sensitive or confidential project materials.
9. Your Privacy Rights
Depending on where you live and whether a particular privacy law applies, you may have the right to request access to personal information, confirmation of processing, correction of inaccurate information, deletion, a portable copy, restriction or objection, withdrawal of consent, and an appeal of a denied request. You may also have a right to opt out of sale, sharing, targeted advertising, or certain profiling. We do not currently sell personal information or use it for targeted advertising. To submit a request, email info@legacygridai.com with the subject "Privacy Request" or write to [PLACEHOLDER — INSERT PRIVACY/LEGAL NOTICE MAILING ADDRESS]. We may verify your identity and authority before acting. We will respond within the period required by applicable law and will explain any denial or appeal right. We will not unlawfully discriminate against you for exercising a privacy right.
10. Children
The Site is intended for business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13 through the Site. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.
11. International Visitors
LegacyGrid AI is based in the United States. If you access the Site from another country, your information may be processed in the United States or other locations where our service providers operate. Those locations may have different privacy laws. Where required, we will use an appropriate transfer mechanism and provide required rights.
12. Third-Party Links
The Site may link to websites or services we do not control. Their privacy practices are governed by their own notices. A link does not mean that we endorse or are responsible for their privacy or security practices.
13. Changes to This Policy
We may update this Policy to reflect changes in law, technology, or our practices. We will post the revised version with a new effective date and provide any additional notice or consent required by law. Material changes apply prospectively unless law permits otherwise.
14. Contact
Privacy questions and requests: info@legacygridai.com, subject "Privacy Request." Mailing address: [PLACEHOLDER — INSERT BUSINESS/PRIVACY NOTICE MAILING ADDRESS] To the extent a governing-law clause is permitted for a privacy dispute and does not reduce nonwaivable statutory rights, this Policy is governed by the laws of [PLACEHOLDER — INSERT STATE/JURISDICTION], without regard to conflict-of-laws rules.