Privacy Policy

Legatus.team · Last updated: 2026

This Privacy Policy explains how personal data is processed on the Legatus.team website while the product is in its early-access phase. We keep it focused and accurate: today this website only lets you join the founding-member waitlist, so the only personal data involved is your email address.

§1. Data controller

We have not appointed a Data Protection Officer; in any data-protection matter you can contact us directly at the address above. The same address serves as our contact point under the Digital Services Act (DSA) for users and authorities; languages of communication: Polish and English.

§2. Scope of this policy

This policy covers only the Legatus.team marketing website and its waitlist form. The Legatus application (the product you will sign in to) processes more data and is governed by its own separate privacy policy presented at sign-up.

§3. What we collect - and what we do not

From the founding-member form we collect only the email address you enter, together with the fact and time of your consent. We do not ask for your name, and we do not collect payment data or special categories of data. To understand how the website is used we use Google Analytics, but only if you accept analytics cookies in our cookie banner - see §10. We use no advertising pixels.

§4. Purposes and legal basis

We process your email solely to contact you about Legatus early access, founding-member benefits and launch updates. The legal basis is your consent (Article 6(1)(a) GDPR), given when you submit the form. Providing your email is voluntary, but without it we cannot add you to the list. You may withdraw consent at any time, which does not affect the lawfulness of processing carried out beforehand.

§5. Electronic communications and unsubscribing

Sending commercial information by electronic means also requires your separate consent under Polish electronic-communications law (Article 398 of the Electronic Communications Law), which you give via the consent checkbox on the form. Every email we send includes a one-click unsubscribe link, and you can also withdraw consent by writing to hello@legatus.team.

§6. Recipients and processors

Your data is processed on our behalf, under data processing agreements compliant with Article 28 GDPR, by Cloudflare, Inc. (website hosting and email routing), Resend (transactional email delivery) and - only if you accept analytics cookies - Google Ireland Ltd. / Google LLC (website analytics via Google Analytics 4). They may process your data only to provide their service to us and on our instructions. We never sell your data or share it with third parties for their own marketing.

§7. International transfers

Cloudflare, Resend and Google may process data in the United States. All are certified under the EU-US Data Privacy Framework, so transfers rely on the European Commission adequacy decision (Article 45 GDPR), with the European Commission Standard Contractual Clauses (Article 46 GDPR) as a fallback safeguard.

§8. Retention

We keep your email until launch and for as long as you want to receive updates, and we delete it promptly after you withdraw consent, unsubscribe or ask us to remove it. We retain a minimal record of your consent for as long as needed to demonstrate compliance.

§9. Data security

We apply technical and organizational measures appropriate to the risk, including encryption in transit and limited, controlled access to the list. No method of transmission or storage is completely secure, but we work to protect your data.

§10. Cookies and analytics

This website uses Google Analytics 4 to understand how visitors use the site. We use Google Consent Mode v2: by default all analytics and advertising storage is disabled, so no analytics cookies are set until you accept them in our cookie banner. If you accept, Google Analytics sets cookies to measure traffic; if you reject, it stays in cookieless mode. We set no advertising or marketing cookies and do not profile visitors for advertising (ad personalization is disabled). You can change or withdraw your choice at any time via the "Cookie settings" link in the footer. The legal basis for analytics cookies is your consent (Article 6(1)(a) GDPR); essential storage needed for security is used on the basis of our legitimate interest. Data collected through Google Analytics is processed by Google as described in §6 and §7.

§11. Your rights

You have the right to: access your data; have it rectified; have it erased; restrict its processing; receive it in a portable format; object to processing; and withdraw consent at any time. To exercise any of these, email hello@legatus.team and we will respond without undue delay.

§12. Right to lodge a complaint

If you believe your data is processed unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

§13. No selling, profiling or automated decisions

We never sell your data, we do not profile you, and we do not carry out automated decision-making within the meaning of Article 22 GDPR.

§14. Children

The waitlist is intended for adults and is not directed to children. Please do not submit your email if you are under 16.

§15. Changes and contact

As Legatus grows beyond early access, the scope of processing will expand and this policy will be updated; the version published here always applies. For any privacy question, contact hello@legatus.team.

← Back to homepage