Privacy Policy

Last Updated: August 18, 2026

IT Cloud & On-Prem Solutions LLC, a Georgia limited liability company that operates LegaciLink ("LegaciLink," "we," "us," or "our"), respects your privacy and is committed to handling personal information responsibly.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit legacilink.com, communicate with us, purchase or use LegaciLink services, or otherwise interact with us.

LegaciLink provides subscription-based business software and related services. From time to time, LegaciLink may also agree to provide separately contracted custom or professional services for specific Clients.

Those engagements are governed by a separate written agreement in addition to this Privacy Policy.

1. Scope and Our Role

The way LegaciLink handles personal information depends on whose information it is and why we are processing it.

Visitor and Client Information

When you visit our website, request information, book a consultation, purchase a subscription, communicate with support, or otherwise interact directly with LegaciLink, we determine how and why your personal information is processed.

This Privacy Policy governs that information.

Client Customer Data

LegaciLink Clients may store and process information relating to their own customers, prospects, leads, employees, contractors, or other contacts within their LegaciLink account.

Depending on how a Client uses the platform, Client customer data may include names and contact information, email addresses and telephone numbers, form and survey submissions, appointment and calendar information, CRM records and notes, pipeline and opportunity information, email and text message communications, conversation histories, call information, call recordings or transcripts where enabled, website or funnel submissions, workflow and automation activity, AI chat or voice interactions, and other information a Client chooses to collect or store.

For this information, the Client determines what information is collected, from whom, and for what purpose.

LegaciLink processes Client customer data to provide the services requested by the Client and, depending on applicable law, acts as a processor, service provider, or similar service-provider role on the Client's behalf.

Clients are responsible for obtaining any consent required to collect or use their customers' information, maintaining their own legally appropriate privacy notices, honoring applicable privacy rights, and ensuring that their use of LegaciLink complies with applicable law.

LegaciLink does not independently determine how a Client should use its customer data and cannot make a Client's business legally compliant simply by providing access to the platform.

2. Information We Collect

Information You Provide Directly to Us

We may collect information that you voluntarily provide, including your name, business or organization name, email address, telephone number, mailing or billing address, account information, information submitted through forms, information disclosed during consultations or onboarding, support communications, billing contact information, and information provided in connection with separately contracted custom projects.

Account and Service Information

When you use LegaciLink, we may process information relating to your account and use of the services, including account users and permissions, login and security information, subscription and plan information, configuration information, support history, service activity, integrations and connected services, and usage information necessary to operate, maintain, secure, or support your account.

Information Collected Automatically

When you visit our website or use certain online services, we may automatically collect information such as IP address, browser type, device type, pages viewed, referring website or URL, date and time of access, website interactions, and cookie and similar technology information.

Information From Third Parties

We may receive information from third parties that help us operate our business and services, including payment confirmations and transaction information, analytics information, platform and integration information, communications service information, and information generated by services you connect to LegaciLink.

Payment Information

Payments are processed through third-party payment processors such as Stripe.

Full payment card numbers and card security codes are processed by the payment processor and are not stored by LegaciLink. We may receive limited payment and transaction information, such as payment status, transaction amount, card type, expiration information, or the last four digits of the payment method, where made available by the processor.

3. How We Use Personal Information

We may use personal information to respond to inquiries, schedule consultations, create and administer accounts, provide the Services, deliver onboarding, training, and support, authenticate users, maintain account security, process payments, issue invoices and receipts, provide customer service, configure and maintain requested services, and perform separately contracted custom or professional services.

We may also use personal information to operate email, telephone, text messaging, automation, and AI functionality, communicate service, billing, security, or account notices, send marketing communications where permitted and subject to your communication preferences, analyze and improve our website and services, and diagnose technical problems.

We may further use personal information to prevent fraud, abuse, or unauthorized activity, enforce our Terms of Service and other agreements, maintain business, financial, accounting, and tax records, comply with legal and regulatory requirements, and establish, exercise, or defend legal claims.

We do not use Client customer data for our own independent marketing purposes.

4. How We Share Information

We do not sell, trade, rent, or otherwise transfer personal information to outside parties for their own marketing or promotional purposes.

We share personal information only as described in this Policy: with the service providers and subprocessors that help us operate our business and deliver the Services, with professional advisors where reasonably necessary, where required by law or to protect legal rights, and in connection with a business transfer as described below. We do not disclose personal information to third parties for those parties to market their own products or services to you.

Service Providers and Subprocessors

LegaciLink relies on third-party service providers, infrastructure providers, and subprocessors to operate our business and deliver our services.

Depending on the features used, these providers may support software platform infrastructure, website hosting, data storage, payment processing, telephone and voice services, SMS and MMS messaging, email delivery, calendar and appointment functionality, artificial intelligence functionality, automation services, analytics, security, customer support, and internal business operations.

Providers used in connection with LegaciLink may include HighLevel, Inc., which provides underlying platform infrastructure and functionality; Stripe, for payment processing; Google Workspace, for business email, documents, and internal file storage; communications and email providers or subprocessors, which may include providers such as Twilio and Mailgun; artificial intelligence providers and subprocessors used to deliver AI-enabled functionality; website analytics providers, where enabled; and other providers necessary to deliver a feature requested by a Client.

The specific providers supporting the platform may change over time as services, integrations, and underlying infrastructure evolve.

These providers process information as necessary to provide their respective services and are subject to applicable contractual, privacy, security, or legal obligations governing their processing of personal information.

Artificial Intelligence Providers

Where AI-enabled functionality is used, AI providers and subprocessors may process information only as necessary to perform the requested function. These providers are expected to limit processing to that purpose, maintain appropriate security measures, comply with applicable data-protection law, and refrain from using Client customer information to train their own general-purpose or publicly available models except where expressly permitted by the applicable provider arrangement. LegaciLink does not use Client customer data to train a generalized artificial intelligence model owned by LegaciLink.

Underlying Platform

The LegaciLink environment operates on infrastructure provided by HighLevel, Inc. LegaciLink configures, maintains, and supports your account within that environment, but does not own or control the underlying platform and is not responsible for the independent security practices, availability, or operation of that platform or of other third-party providers.

Professional Advisors and Legal Disclosures

We may also disclose information to accountants, attorneys, insurers, consultants, and other professional advisors where reasonably necessary for legitimate business purposes.

We may disclose information to governmental, regulatory, law enforcement, or judicial authorities where required by law or where reasonably necessary to protect our legal rights or the rights and safety of others.

5. Artificial Intelligence Features

The Services may include access to AI-enabled functionality that assists with activities such as customer conversations, lead follow-up, appointment scheduling, voice or receptionist functions, content assistance, and workflow automation.

When an AI-enabled feature is used, information necessary to perform the requested function may be processed by LegaciLink, the underlying platform, and applicable AI service providers or subprocessors.

Depending on the feature, this information may include messages, conversation history, prompts, contact information, appointment information, CRM information, call audio, call transcripts, AI-generated responses, and instructions and configuration information.

LegaciLink does not use Client customer data to train a generalized artificial intelligence model owned by LegaciLink.

Client customer information submitted to AI features may, however, be processed by platform and AI subprocessors as necessary to provide the requested functionality and in accordance with the applicable provider arrangements.

Clients determine whether and how AI functionality is used within their business and remain responsible for the information they provide to AI systems, the configuration of those systems, and compliance with applicable laws governing their interactions with customers.

Where call recording, transcription, automated calling, or similar functionality is enabled, the Client is responsible for providing legally required notices and obtaining any legally required consent.

6. Text Messaging

Messages Sent by LegaciLink

Where you provide a mobile telephone number and consent or otherwise request text communications from LegaciLink, we may use that number to send communications such as appointment and consultation reminders, account or service notices, onboarding and support communications, billing and payment notices, requested information, and marketing communications where you have elected to receive them.

Consent is obtained where you submit your mobile telephone number through a LegaciLink form, checkout page, or other request that includes a text messaging consent disclosure, or where you otherwise ask us to contact you by text. Consent to receive marketing text messages is not a condition of purchasing any product or service.

Message frequency varies. Message and data rates may apply.

Reply STOP to opt out of text messages or HELP for assistance. You may also contact [email protected].

Carriers are not liable for delayed or undelivered messages. Delivery and delivery speed are subject to carrier and provider conditions outside our control.

Opting out of text messages does not prevent us from sending non-marketing communications through other appropriate channels when necessary to administer your account or provide services.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.

Text messaging originator opt-in data and consent information are not shared with any third parties, other than the aggregators, carriers, and communications providers necessary to deliver the messages you have requested. Those providers may process this information solely as needed to transmit or support the messages and may not use it for their own purposes.

Mobile telephone numbers, text messaging opt-in records, and consent information are not sold or shared with third parties or affiliates for their own marketing purposes.

Communications providers may process this information solely as necessary to transmit or support messages on our behalf.

Messages Sent by LegaciLink Clients

LegaciLink Clients may use their accounts to send text messages to their own customers or contacts.

Those communications are controlled by the applicable Client, not by LegaciLink.

Each Client is responsible for determining who receives its communications, obtaining appropriate consent, maintaining evidence of consent where required, providing required notices, honoring opt-out requests, and complying with applicable communications, telemarketing, and privacy laws.

If you receive a message from a business using LegaciLink and have questions regarding that business's use of your information, you should contact that business directly.

7. Email Communications

We may send administrative or service-related emails necessary to operate your account or respond to your requests.

We may also send promotional or marketing email where permitted by law and consistent with your communication preferences.

You may unsubscribe from marketing email by using the unsubscribe link contained in the message.

Unsubscribing from marketing email will not prevent us from sending transactional, billing, security, account, or service communications that are reasonably necessary in connection with your relationship with LegaciLink.

8. Cookies and Similar Technologies

We may use cookies and similar technologies to operate website functionality, maintain preferences, improve website performance, understand how visitors use our website, measure marketing effectiveness, and maintain security.

You may control certain cookies through your browser settings and, where available, through website cookie controls.

Disabling cookies may affect the operation of certain website functionality.

If we use advertising, cross-site tracking, or other technologies that require additional disclosure, consent, or opt-out mechanisms under applicable law, we will provide those controls where required.

9. Sale and Use of Personal Information

We do not sell Client customer data.

We do not use Client customer data for LegaciLink's independent advertising or marketing purposes.

We do not sell mobile messaging opt-in information or consent records or provide them to third parties or affiliates for their own marketing purposes.

LegaciLink does not sell, trade, or rent personal information.

If our practices materially change in a manner that triggers additional notice or opt-out requirements under applicable privacy law, we will update this Privacy Policy and provide any legally required rights or controls.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or processed, including to provide and support services, maintain active Client accounts, complete account transfers or closures, resolve billing or payment disputes, maintain financial, accounting, and tax records, maintain security and fraud-prevention records, enforce agreements, resolve disputes, establish or defend legal claims, and satisfy applicable legal obligations.

The length of time information is retained may vary based on the nature of the information, the services involved, contractual requirements, applicable law, and whether an account remains active.

Client Account Data

Following cancellation or account closure, Client account data may remain available for a limited period to facilitate account closure, transfer, recovery, or export.

Specific cancellation, transfer, and export provisions are described in the LegaciLink Terms of Service.

If an account is transferred or released to a Client or another service provider, information remaining within the transferred account may continue to exist within that account but will no longer be controlled by LegaciLink after our access and responsibility for the account end.

We may retain limited business records relating to the former Client relationship as reasonably necessary for billing, accounting, fraud prevention, contractual, dispute-resolution, or legal purposes.

Deletion Requests

Where legally permitted and operationally feasible, information may be deleted earlier upon verified request.

Certain information may be retained where necessary to comply with law, complete transactions, maintain required business records, prevent fraud or abuse, protect legal rights, resolve disputes, or enforce agreements.

11. Your Privacy Choices and Rights

You may contact us to request access to, correction of, or deletion of personal information that LegaciLink maintains about you directly.

You may also request to update inaccurate information or change your marketing communication preferences.

Depending on where you reside and whether an applicable privacy law applies to LegaciLink, you may have additional legal rights relating to your personal information. Such rights may include, where applicable, the right to know or access certain personal information, correct inaccurate personal information, request deletion, obtain a portable copy of certain information, opt out of certain uses or disclosures, appeal certain decisions regarding a privacy request, and exercise privacy rights without unlawful discrimination.

We will process verified privacy requests in accordance with applicable law.

We may need to verify your identity before completing a request. We may also decline or limit a request where permitted or required by law and will provide any explanation or appeal process required by applicable law.

To submit a privacy request, contact:

[email protected]

Requests Concerning a LegaciLink Client's Customer Data

If your information was collected by a business that uses LegaciLink, that business is generally responsible for responding to your privacy request.

You should first contact that business directly.

Where appropriate, LegaciLink may assist a Client in fulfilling a valid privacy request involving information stored within its LegaciLink account.

12. Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, or misuse.

Safeguards may include measures such as secure connections, account authentication, access controls, multi-factor authentication, restricted administrative access, platform security controls, and internal account-management practices.

No information system, communications network, or method of electronic storage can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

Clients are also responsible for maintaining the confidentiality of their credentials, appropriately controlling access to their accounts, and following reasonable security practices.

13. Children

LegaciLink's website and subscription services are intended for businesses and for individuals who are at least 18 years old.

We do not knowingly solicit personal information directly from children for LegaciLink's own purposes.

A Client may independently collect or store information relating to individuals under 18 within its account depending on the nature of the Client's business. In those circumstances, the Client is responsible for ensuring that its collection, use, and processing of that information complies with applicable law.

If we learn that LegaciLink has directly collected personal information from a child in circumstances where doing so was not permitted, we will take reasonable steps to delete or otherwise appropriately address that information.

14. Business Transfers

If LegaciLink or substantially all of its business or assets are sold, merged, reorganized, financed, acquired, or otherwise transferred, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.

Any successor that receives personal information through such a transaction will be subject to applicable privacy obligations governing that information.

15. Processing Locations

LegaciLink is based in the United States.

Because we use cloud infrastructure, communications providers, software platforms, and other service providers, personal information may be processed or stored in the United States or in other locations where those providers operate.

Where applicable law requires safeguards governing cross-border transfers of personal information, the responsible parties will apply appropriate measures as required by law.

Clients that collect information from individuals outside the United States remain responsible for determining whether their own use of LegaciLink is appropriate under the privacy and data-protection laws applicable to their business.

16. Third-Party Websites and Integrations

LegaciLink may connect to or integrate with third-party websites, applications, platforms, or services.

Your use of a third-party service is also subject to that provider's own terms and privacy practices.

LegaciLink is not responsible for the independent privacy practices of third parties that you choose to connect to or use with your account.

17. Custom Project Services

From time to time, LegaciLink may, in its discretion, agree to provide custom or professional services for a particular Client under a separate written agreement.

Personal information processed in connection with such an engagement will be handled in accordance with this Privacy Policy and the applicable written agreement.

Custom Project Services are separate from the standard LegaciLink subscription services and are not included with a subscription unless expressly stated in a written agreement signed or otherwise accepted by LegaciLink and the Client.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, providers, business practices, or legal requirements.

The Last Updated date at the top of this Policy identifies the current version.

Where required by law or where a change materially affects how we handle personal information, we may provide additional notice through our website, account communications, email, or another appropriate method.

19. Contact Us

Questions regarding this Privacy Policy or LegaciLink's privacy practices may be directed to:

IT Cloud & On-Prem Solutions LLC

LegaciLink

Email: [email protected]