Privacy Policy

1. Introduction

Legaci Labs ("we", "us", "our") operates Mosaic (mosaic-gen.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Mosaic, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, and authentication credentials when you create an account.
• Company Information: Company name, domain, and type provided during onboarding.
• Usage Data: Website URLs and product catalog files you submit for landing page generation, generated designs, and session activity.
• Payment Information: Billing details processed securely through Stripe. We do not store credit card numbers on our servers.
• Technical Data: IP address, browser type, device information, and cookies necessary for authentication and service operation.

3. How We Use Your Information

• To provide, maintain, and improve the Mosaic platform
• To generate landing pages and microsites based on your input
• To process payments and manage subscriptions
• To send transactional emails (account verification, license codes, billing receipts)
• To enforce our Terms of Service and protect against misuse
• To analyse usage patterns and improve our services (aggregated, anonymised data only)

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Google Cloud Platform (hosting, database), Stripe (payments), Firebase (authentication) — each bound by their own privacy policies.
• Agency Partners: If you were referred by an agency, your agency may see your account status and license code redemption. They do not have access to your generated content.
• Legal Requirements: When required by law, regulation, or legal process.

5. Cookies and Tracking

We use a session cookie (__session) for authentication purposes. We use Microsoft Clarity for anonymised usage analytics. We do not use advertising cookies or cross-site tracking.

6. Data Retention

We retain your account data for as long as your account is active. Generated designs and microsites are retained until you delete them or close your account. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate information
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us at the email below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at vinay@getlegaci.com.