Back to home

Privacy policy

Last updated: 5 November 2026

This policy explains what data is collected through the Legen1 website, why, how long it is kept and what rights you can exercise, in accordance with Regulation (EU) 2016/679 (GDPR).

Data controller

ELVAZ OÜ, Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia.

Contact for any question relating to personal data: contact@legen1.com.

Data collected

The site collects the data you send us, and a few details recorded automatically when you join the waitlist:

  • Through the waitlist form: your email address.
  • When you join the waitlist, automatically: your IP address, the approximate location derived from it (country, region, city, time zone), your browser’s user agent and the page that sent you to the site.
  • If you choose to answer the optional questions: your website, the number of clients you would offer the product to and your usefulness rating.
  • Technical connection data processed by our host for security and service reliability purposes (IP address, server logs).

Purposes and legal bases

  • Managing your place on the waitlist and telling you about the launch and your early access, as you asked when joining: steps taken at your request (article 6.1.b GDPR).
  • Using your optional answers to prioritise early access: legitimate interest (article 6.1.f).
  • Understanding where signups come from and detecting abusive signups, using your IP address, approximate location, user agent and referring page: legitimate interest (article 6.1.f). You can object at any time by writing to contact@legen1.com.
  • Keeping the site secure and available: legitimate interest (article 6.1.f).

Whether answers are mandatory

Your email address is required to join the waitlist. All the other questions are optional and can be skipped. The details recorded automatically are not requested from you.

Recipients and processors

Your data is intended solely for the authorised staff of ELVAZ OÜ. It is never sold, rented or passed on to third parties for advertising purposes.

The following technical providers act as processors:

  • Vercel Inc. (United States): website hosting.
  • Airtable, Formagrid Inc. (United States): storage of the waitlist.
  • o2switch (France): email hosting.

Transfers outside the European Union

Some providers are established in the United States. Those transfers are governed by the European Commission standard contractual clauses and, where applicable, by the providers’ certification under the EU-U.S. Data Privacy Framework. You can obtain a copy of the safeguards in place by writing to contact@legen1.com.

Retention periods

  • Waitlist data, including the IP address and location recorded when you joined: until you ask to leave the list, and at most 3 years from your last contact with us.
  • Technical connection logs: 12 months maximum.

Security

The site is served over HTTPS only. Web fonts are hosted on our own servers, so no connection data is sent to a third-party provider when the page loads. Access to data is restricted to the people who need it to do their job.

Cookies

The site sets no analytics cookies and no advertising trackers. No consent is therefore required when the page loads.

Your rights

You have the following rights over your data:

  • Right of access: obtain confirmation that data concerning you is processed and receive a copy of it.
  • Right to rectification: have inaccurate or incomplete data corrected.
  • Right to erasure: request deletion of your data, including leaving the waitlist at any time.
  • Right to restriction of processing and right to data portability.
  • Right to object to processing based on legitimate interest, on grounds relating to your particular situation.

Exercising your rights

To exercise these rights, write to contact@legen1.com. You will receive an answer within one month of receipt of your request, extendable by two months where the request is complex.

If, after contacting us, you believe your rights are not being respected, you may lodge a complaint with the Estonian supervisory authority (Andmekaitse Inspektsioon, aki.ee), the publisher’s lead authority, or with the authority of your country of residence.

Changes

This policy may change to reflect a new processing activity or a new legal obligation. The date of the last update is shown at the top of the page.