Privacy Policy

LegitShield™ (legitshield.com) is operated by Modular Technology Solutions ("LegitShield," "we," "us"). This policy explains what information we collect, how we use it, who can see it, and the choices you have.

LegitShield is a portable Deal History service. Your Passport shows deals that you and another member both confirmed, and what the other person said about each deal. LegitShield records and presents that history; it doesn't judge people. Proving who you are is optional (see "Getting verified"). You decide.

• Account: your member record, Passport ID, display name and membership date.
• Facebook login: when you log in with Facebook we receive your Facebook account ID for this app, your name, profile photo and email address (if Facebook provides it). We never get your friends list, posts or messages, and we never post to Facebook. Your name and photo from Facebook are the name and photo on your Passport. Your email address is used for your account only and is never shown to another member. A Facebook profile link is stored only if you add it yourself.
• Other accounts you connect: you can connect another account, such as Google, Apple, LinkedIn, X, TikTok or Instagram, to your Passport by signing in to it. When you do, that service sends us the account's ID, the name on it, its profile photo and, for some services, its email address. We keep the ID, the name and the photo, so your Passport can show the account is connected and, if you choose, who it belongs to. We don't keep that account's email address. For TikTok and Instagram we also keep the username, so your Passport can link to that profile. For Facebook, LinkedIn and X you can add your profile link yourself; we don't check it, and your Passport says so. We don't keep access to the account once it is connected, we don't read your contacts, connections or posts, and we never post to it.
• Who sees a connected account's details: by default, only its logo shows on your Passport. For each account you can choose to show the name, photo and profile link it gave us to people you have a deal with, or to every logged-in member. You can change this at any time on your Passport, under Connected accounts, and disconnecting an account takes all of it off. A profile link that was already on your Passport before this choice existed stays on show until you change it.
• Deals: that you and another member confirmed a deal, its category (one of 11 broad types, such as "Repair & Construction"), who was the Client and who the Provider, and when. We don't ask for amounts or descriptions of what was exchanged.
• Feedback: after a deal, each person may say whether their experience was Positive or Negative and whether they'd deal with the other person again. There is no free-text review.
• Settings: your choices, such as whether you can be found by name and whether your deal details are shared.
• Usage analytics: which screens are viewed and actions taken (for example, that a Passport was viewed or a deal created), with your device type, an approximate location (country, region and city, from your connection; never GPS), how you arrived (e.g. from a shared link), and a random visitor ID kept in a cookie so we can count visitors. Analytics events are deleted after 13 months. If your browser sends a Global Privacy Control signal and you're not logged in, we don't record analytics for you.
• Push notifications: if you turn them on, your browser's notification subscription for that device, so we can tell you when someone accepts, rejects or completes a deal with you. You can turn them off in Your account, and they stop when you log out.
• Security signals: technical information such as IP address and device/network signals, used only to detect fraud and abuse. Never shown to other members.

• Anyone, including people who aren't logged in and link previews: your name, profile photo, Passport ID and membership date. That's all; your record is blurred for them.
• Logged-in members: your Passport summary: number of deals, Positive and Negative counts, recent experiences and streak, the share who would deal with you again, your Client and Provider percentages, how many different people you've dealt with, your deal types, whether your Facebook account is connected, which other accounts you connected (and, only where you chose to show them, the name, photo and profile link of each), and the country you usually use LegitShield from (shown as a flag, worked out from where your visits come from; never more precise than the country).
• Only you: your deal-by-deal history (each deal's date, type, roles, the other person and what they said), your settings and your own account details.
• People you choose: you can show your deal-by-deal history on your Passport, or give a private link to specific people. When others see it, the other people in your deals are shown by first name and initial only. You can stop sharing, or replace the link, at any time.
• The two people in a deal: that deal's page, its history and each other's feedback once both have responded.
• LegitShield only: security signals and analytics, which are never shown to other members and never sold.

Logged-in members can search for a Passport by name. Results show your name, photo, the country you usually use LegitShield from, membership date, number of deals and Passport ID, to help tell people with the same name apart. Searches are limited to prevent collecting members' details. This is on by default; you can turn off "Let people find me by name" in Your account, and then you can only be found by your Passport ID or link.

On another member's Passport, logged-in members can ask LeSA, our AI assistant, how to read it. To answer, we send the AI provider your question, the conversation so far and that Passport's summary (as described under "Logged-in members" above). We never send deal-by-deal details, messages, email addresses or security signals. The provider is chosen by LegitShield and is currently DeepSeek; it may change to another provider such as OpenAI, Anthropic, Google, Zhipu (GLM) or Alibaba (Qwen), which may process data outside your country. We don't store your questions or the answers; we keep only counts (for example, how many questions were asked and how long answers took) to run and limit the service.

If you choose to, your Passport shows signed-in members the ways you accept payment. If you add a payment QR, your phone reads it and sends us what the QR says, not the picture; we store that text and the account name in it. A payment QR can contain your mobile number or account number. Your QR is shown only to your contacts and to members with an open offer or deal with you, and anyone it is shown to can scan or save it. You can remove a QR or a method at any time; copies someone already saved keep working until you change the QR in your payment app.

You can ask another member to be your contact; they see your name, photo, membership date and Passport, and can accept or decline (we don't tell you if they decline). Contacts can message each other. A message is seen only by the two people in the conversation. We store messages to deliver them and show your chat history; they are encrypted in transit and at rest, but not end-to-end encrypted, so LegitShield could access them, which we do only to investigate abuse you or someone else reports, or where we're legally required to. Removing a contact stops new messages but keeps your past ones. Blocking someone ends the contact, hides their messages and requests from you and stops new ones; they aren't told. We limit how many requests and messages can be sent, to prevent spam.

"Share a deal tip" in your account lets you film a short video of yourself, up to a minute, in a LegitShield frame. The camera and microphone are used only on that screen, only while it is open, and nothing is recorded or sent until you choose to.

• When you send a tip, we store the video (your face and voice), its title, and whether you chose to show your name and Passport ID in it. Only the LegitShield team can watch it. It isn't shown on your Passport and other members can't see it.
• You agree, each time you send one, that we may post it on LegitShield's social media pages (such as Facebook, Instagram, TikTok and YouTube). We may trim it and add captions. Once posted there, it is public and those services' own policies apply.
• You can see whether each tip was featured, and withdraw one until it has been: withdrawing deletes the video. To have a posted tip taken down, write to us (below) and we'll remove it from our pages and our files.

Where it is offered, you can ask for a Verified mark on your Passport. It is optional, free, and never needed to sign up or to make deals. It shows that a real, identified person is behind your Passport, and how and when that was checked. It doesn't change your deal record.

• With a government ID: you send a photo of your ID and a photo of yourself holding it. Someone on the LegitShield team looks at both to check that the ID is genuine and yours, which can include checking it with the government service that issued it. The photos are stored privately: no other member can see them, each time our team opens them is recorded, and the ID is never shown on your Passport.
• What we keep: whether you are verified, how, for which country and when, and who on our team decided. We don't keep your ID number. To stop one ID being used for two members, we keep a scrambled fingerprint of the number that can't be turned back into it.
• How long the photos are kept: the screen where you send them says how long, and you agree to that before sending. It is either removed as soon as we decide, or kept for a stated number of days after that so we can identify you to the authorities if you are reported for fraud. If you take your request back, or nobody reviews it within 30 days, the photos are removed.
• With Singpass (in Singapore, while you are logged in): you approve in Singpass, which sends us your name as registered with Singpass and a random ID for you. We show you the name beside your profile name, and save nothing unless you confirm. We keep that name and a scrambled fingerprint of the random ID, so one Singpass can verify only one account, and delete both when you remove the mark or delete your account. Nothing is uploaded, and we never receive or keep your NRIC or FIN. Questions about this go to us, not to Singpass.
• You can remove your Verified mark at any time from "Verified" in your account. We may remove a mark if we find the ID wasn't yours, and we tell you why.

• To run your account and Passport, and show them as described above.
• To deliver your messages and contact requests.
• To record deals and feedback, and send the notifications you've turned on.
• To answer questions asked to LeSA.
• To detect and prevent fraud, impersonation and abuse, including rate limits.
• To understand how LegitShield is used and improve it.

We don't sell your personal information. We share it only with:

• Service providers that run LegitShield for us: Supabase (database and login), Vercel (hosting, including approximate location from your connection), the AI provider for LeSA (above), and your browser's push service (Apple, Google or Mozilla) for notifications you've turned on (a new message's notification includes the sender's name and the start of the message).
• Facebook, only as part of the login you start.
• Other members, only as described in "Who can see what."
• Law enforcement or regulators, only where we're legally required to.

Analytics events are kept for 13 months. Raw security signals are kept for up to 90 days, and signals derived from them for up to 2 years. Account, deal, feedback, contact and message records are kept while your account is open. ID photos sent to get verified are kept only as long as "Getting verified" says. We are still finalizing retention schedules for other data against the law in the countries we operate in, and will update this section.

• Turn off being found by name, and choose whether and how to share your deal details (Your account).
• Turn notifications on or off for each device, and log out on any device.
• Request deletion of your account and personal data: see our Data Deletion Instructions. Deals that other members' history depends on are anonymized (your identifying information removed) rather than deleted, so their confirmed history isn't erased.

LegitShield is not directed at, and may not be used by, anyone under 18.

We'll update the date at the top of this page when this policy changes, and post material changes here before they take effect.

Questions or requests about this policy or your data: privacy@modulartechnologysolutions.com