Privacy Policy
1. Introduction
AMB Media, LLC dba Legacybox ("Legacybox," "we," "us," or "our") oversees this website, www.legacybox.com ("Site"), our mobile applications, including the Legacybox app for iPhone ("App"), and all related services (collectively, our "Services"). We have developed this Privacy Policy to inform all users (“user(s),” “you,” or “your”) about how we collect information in the course of conducting our business, including on the Site, how we use the collected information, and a user’s rights with respect to the collected information.
Please read this Privacy Policy carefully. If you do not agree to be bound by this Privacy Policy, then do not access or use the Services. By accessing and/or using the Services, you accept and agree to be bound by this Privacy Policy. This Privacy Policy is incorporated into our Terms of Use. Your use of our Services and any Personal Information (as hereafter defined) you provide through the Services are subject to this Privacy Policy at all times.
You must be at least EIGHTEEN (18) years old to access the Site and use our services. If you are under eighteen (18) years old, you are not permitted to use any part of the Services for any reason.
If you have any questions about this Privacy Policy, please contact us at privacy@legacybox.com or at the contact information below https://help.legacybox.com/hc/en-us/requests/new.
2. Information We Collect
When you use the Site, we process certain types of Information, as described below.
a. Personal Information
“Personal Information” means any information that identifies, relates to, describes, or is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Personal Information that we collect on the Site includes, but is not limited to, first and last names, phone number, residential address, email address, and payment information.
When you access or use the Services, you may provide Personal Information to us, such as when you request to receive information or support; complete online forms and surveys; communicate with us or our representatives, whether through standard mail, email, telephone (including text messages), or otherwise by any means or manner;
Additionally, if you choose to make a purchase on or through features on the Services, you may be required to provide your Personal Information to third parties for services such as credit card or other payment processing, order fulfillment, order tracking, and address verification. In such cases, the information may be used by us and by such third party(ies), each pursuant to its own policies. You agree that we are not responsible for third parties’ processing of your Personal Information.
SMS and Mobile Messaging Information. If you voluntarily provide your mobile phone number and affirmatively opt in to receive SMS or MMS messages from us, we may collect and store your phone number, your SMS consent and opt-in status (including the date, time, and source of consent), and message interaction data (such as delivery confirmations and responses). This information is used solely to provide the messaging services you request, including transactional messages, promotional messages, customer support communications, and abandoned cart reminders.
b. Non-Personal Information
“Non-Personal Information” means information that does not identify you, but provides insights regarding your use of the Site. For example, we collect information about your use of the Site, including but not limited to Internet connections, computer equipment, browser information, websites visited before entering and after leaving the Site, IP addresses, and other information about your use of the Site that does not identify you as a user.
You may be given the option to receive push notifications while using our Services. In order to serve push notifications, we may need to collect your IP address and a persistent identifier from your device. You can turn off push notifications in your device settings.
Cookies, Pixels, and Similar Tracking Technologies. We use cookies, pixels, tags, webhooks, scripts, and similar technologies to collect Non-Personal Information about how users interact with the Site. These technologies help us maintain site functionality, remember user preferences, improve performance, prevent fraud, and support communications and marketing features.
In connection with SMS services, including abandoned cart reminders, these technologies may be used to detect when a user adds items to a shopping cart, initiates checkout, or otherwise interacts with the checkout process without completing a purchase. If you have affirmatively opted in to receive SMS messages, this information may be used to send you relevant cart reminder or follow-up messages. Tracking technologies used for these purposes do not override your communication preferences and are applied only in connection with your opted-in status.
Personal Information and Non-Personal Information are collectively referenced as “Information.” Information we collect about you may be aggregated with other users’ Information. It may also be combined with associated Personal Information that you provide to us or that we receive from third parties. If we combine or associate information from other sources with Personal Information that we collect through the Site, we will treat the combined Information as Personal Information in accordance with this Policy.
c. Geolocation Information
You may choose to allow us to access your location by granting the Site access to your location when prompted or through your device’s location services settings. You may change these settings on your device, but this will impact your use of and access to the Services.
We may also derive approximate location information (such as city or state) from IP addresses for purposes such as fraud prevention, analytics, regulatory compliance, and operational functionality.
d. Third-Party Social Networking Service(s)
If you choose to access, visit, and/or use any third-party social networking service(s) that may be integrated with our Site, we may receive your Personal Information and other information about you and your computer, mobile, or other device that you have made available to those social networking services, including information about your contacts through those services.
3. Use of Information
We use Non-Personal Information collected by cookies, web beacons, and other Internet tracking technology to store your preferences, improve website navigation, make personalized features and other services available to you, to generate statistical information, monitor and analyze user traffic and usage patterns, monitor and prevent fraud, investigate complaints and potential violations of our policies, to improve the products, services, materials, and other content that we describe or make available through the Services, and otherwise help administer and improve the Services.
We may identify you from your Personal Information and merge or co-mingle Personal Information and Non-Personal Information. Except as otherwise stated, we may use Information we collect from you for the legitimate business purpose of providing our Services to you, including, but not limited to:
- To fulfill or meet the reason you provided the Personal Information.
- To provide advertising and marketing, including SMS messages, where you have not expressed a preference otherwise.
- To send transactional and service-related messages, including order updates and abandoned cart reminders, where permitted by law and based on your communication preferences.
4. How We Share Information
We may share Personal Information with the following parties:
- Corporate affiliates, other affiliated entities, and associated entities;
- Service providers that help us administer and provide the Services;
- Authorized third parties directly authorized by you;
- As required by law or legal process;
- Pursuant to your express consent.
SMS Data Use and Sharing. We do not sell, rent, or share mobile phone numbers, SMS opt-in data, or SMS consent status with third parties for their own marketing or promotional purposes. SMS-related information is shared only with service providers that assist us in delivering text messages and related messaging services, and such providers are contractually obligated to use this information solely to provide services on our behalf and in compliance with applicable laws and carrier requirements.
5. Information Security
Legacybox uses industry standard protections for the Site, which are intended to mitigate against the loss, misuse, alteration, breach, and theft of its information and services. Although we use reasonable security measures designed to protect your Information, transmission over the Internet is not completely secure.
6. Information Retention
We retain the Personal Information we receive as described in this Privacy Policy for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and enforce our agreements.
7. Links to Third Party Sites
The Site may contain links to other sites that are not operated by us. This Privacy Policy does not apply to third-party websites.
8. Mobile Application
This Section describes how the App collects and uses Information. It supplements, and does not replace, the rest of this Privacy Policy. Where the App is not mentioned, the terms of this Privacy Policy apply to the App in the same way they apply to the Site.
a. Who can use the App
The App is available to Legacybox customers. It does not create new customer accounts. You sign in with the email address associated with your existing Legacybox order, and the App displays the digitized photos, videos, and audio recordings ("Memories") that Legacybox has already produced for you and stores on your behalf. An active Legacybox Membership is required to view Memories in the App.
b. Information we collect through the App
Account and sign-in information. When you sign in, the App receives your email address. The App does not collect your name. To show a profile picture, the App checks whether a Gravatar image exists for your email address. To do this, it sends a one-way cryptographic hash of your email address (not the address itself) to Gravatar, a service operated by Automattic Inc., which also receives your device's IP address as part of that request. If no Gravatar image exists, the App shows a placeholder. Legacybox does not store the image or receive any Information back from Gravatar. Sign-in happens on a Legacybox sign-in page (iam.legacybox.com) that opens in your device's browser and is operated for us by our authentication provider, Auth0 (Okta, Inc.). The App itself never displays a password field and never receives, transmits, or stores your password. After you sign in, the App stores only short-lived sign-in tokens in the secure storage on your device. These tokens are not synced to other devices or included in device backups.
Membership and order information. The App displays your Membership status, order dates, and order status so that you can follow the progress of a Legacybox order and manage your Membership. This Information is retrieved from our systems and is not collected anew by the App.
Usage information. We collect a limited set of named events about how the App is used, such as signing in, opening a Memory, starting playback, using a filter, opening the share menu, or viewing your order status. Where an event refers to a Memory, it includes only an internal identifier and the type of Memory (photo, video, or audio). Events also include technical details about your device, including device model, operating system version, App version, and language, and a randomly generated identifier that allows us to recognize the same installation over time. That identifier is created by the App, is not derived from your device's hardware, is not an advertising identifier, and is replaced when you sign out or reinstall the App. The App does not record your screen and does not automatically capture your taps, scrolling, or navigation. We use PostHog, Inc. to analyze this Information on our behalf. Events are sent first to a Legacybox-operated endpoint and then forwarded to PostHog.
Location information. The App does not collect your location.
Diagnostic information. If the App crashes, we receive a crash report so that we can find and fix the problem. Crash reports include technical details about the failure and the device, but never the content of your Memories or any text you have entered. Crash reporting is provided by PostHog, Inc.
What we do not collect. Usage and diagnostic Information never includes the content of your Memories, their titles or descriptions, the original file names of the media you sent to us, or the links used to play them. We do not use Information from the App to track you across other companies' apps or websites, and the App does not request permission to do so.
c. How the App uses your device
Permissions. The App does not need any device permission to sign in or to view your Memories. It does not request access to your camera, microphone, location, contacts, or local network. The one permission it may ask for is permission to add to your Photos library, and only when you choose Save Image or Save Video from the share menu. The App never reads the contents of your Photos library.
Storage on your device. To load quickly, the App temporarily stores small preview images and non-sensitive metadata about your Memories on your device, and any Memories you choose to download are kept in the App's own storage. When you sign out, the App removes your sign-in tokens, downloads, cached images, and analytics identifier from the device.
Saving and sharing. When you choose to share or save a Memory, the App uses the standard iOS share menu. If you save a Memory to your Photos library or to Files, the copy is stored on your device under your control. If you share a Memory with another person or app, that recipient receives a copy of the media file, and this Privacy Policy no longer governs their use of it.
AirPlay. If you choose to play a Memory on a television or speaker using AirPlay, the App hands that device a secure, time-limited link so it can play the Memory over your local network. No additional Information is sent to Legacybox as a result.
Web links. Some features, such as full order tracking, support, and Membership changes, open pages on our Site in your browser. Those pages are governed by this Privacy Policy. When you open our Site from the App, we may pass a short-lived, single-use sign-in token so that you do not have to sign in again.
d. Third parties
In addition to the service providers described in Section 4, the App relies on the following providers, each of which processes Information only as needed to provide its service to us: Auth0 (Okta, Inc.) for sign-in; PostHog, Inc. for usage analytics and crash reporting; Gravatar (Automattic Inc.) for profile pictures, as described in Section 8.b; and Apple Inc. for app distribution and, if you enable them, delivery of push notifications. Apple also independently collects certain Information when you download or use apps from the App Store under Apple's own privacy policy.
e. Push notifications
The App may send you push notifications, for example when the status of your Legacybox order changes. If you allow them, we collect a device token issued by Apple so that we can deliver notifications to your device. The content of a notification may include your order status but never includes the content of your Memories. You can turn notifications off at any time in your device settings.
f. Your choices
You can sign out of the App at any time, which removes your session and locally stored Information from the device. You can delete the App to remove anything that remains. You can request a password reset from the App's Settings, which sends a reset email to the address on your account. The App does not include a self-service option to delete your account. To request access to, correction of, or deletion of the Personal Information we hold about you, including your account, contact us using the details in Section 12 and we will process the request. Deleting your account will also delete your Memories from our systems, so we will confirm the request with you before acting on it.
g. App Store disclosures
The privacy details shown on the App's App Store listing summarize the practices described in this Section. If they ever differ, this Privacy Policy controls.
9. Children’s Privacy
We do not knowingly collect Personal Information from children under the age of thirteen (13).
10. Your California Privacy Rights
California residents may request information regarding disclosures of Personal Information by emailing privacy@legacybox.com. For more information, please see https://legacybox.com/pages/your-california-privacy-rights.
11. Changes in the Privacy Policy
We reserve the right to modify and update this Privacy Policy at any time by posting an amended version on our Site.
12. How to Contact Us
By e-mail: privacy@legacybox.com
By telephone: (423) 375-0000
By regular mail:
Legacybox
ATTN: Privacy Policy
1110 Market Street, Suite 318
Chattanooga, TN 37402