Privacy Policy
Last updated: January 1, 2025
Legaci Labs, Inc. ("Legaci Labs," "we," "us," or "our") operates Sequence, a compliance automation platform for commercial space launch operators. This Privacy Policy describes how we collect, use, disclose, and protect your information when you use our services.
As a company serving the aerospace and defense industry, we maintain rigorous data protection standards aligned with SOC 2 Type I requirements and are committed to achieving FedRAMP authorization.
1. Information We Collect
1.1 Information You Provide
We collect information you provide directly to us, including:
- Account Information: Name, email address, company name, job title, and contact information when you create an account or request a demo.
- Compliance Data: Technical documentation, flight safety analysis data, telemetry records, and other regulatory compliance materials you upload to the platform.
- Communications: Information you provide when you contact us for support, submit inquiries, or participate in surveys.
1.2 Automatically Collected Information
When you use our services, we automatically collect:
- Usage Data: Information about how you interact with our platform, including features accessed, actions taken, and time spent.
- Device Information: Browser type, operating system, device identifiers, and IP address.
- Log Data: Server logs including access times, pages viewed, and system activity for security and audit purposes.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our compliance automation services
- Process and manage your regulatory submissions and documentation
- Generate audit trails and compliance reports
- Respond to your requests and provide customer support
- Send important notices about your account or changes to our services
- Monitor and analyze usage patterns to enhance platform performance
- Detect, prevent, and address security incidents and technical issues
- Comply with legal obligations and regulatory requirements
3. Data Security
We implement comprehensive security measures designed to protect your information, consistent with aerospace industry standards and SOC 2 Type I requirements:
- Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
- Access Controls: Role-based access controls with multi-factor authentication for all system access.
- Audit Logging: Comprehensive audit trails for all data access and system activities.
- Infrastructure Security: Hosted on SOC 2 compliant cloud infrastructure with continuous monitoring.
- Incident Response: Documented incident response procedures with defined notification timelines.
4. Data Retention
We retain your information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law or regulation. For compliance documentation, we maintain records in accordance with FAA requirements and industry standards, typically for the duration of your license plus three years.
Upon account termination, we will securely delete or anonymize your data within 90 days, except where retention is required for legal or regulatory compliance.
5. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- Service Providers: With vendors who assist in operating our platform, subject to contractual confidentiality obligations.
- Regulatory Authorities: When required to comply with applicable laws, regulations, or legal processes.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
- With Your Consent: When you have explicitly authorized the disclosure.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information, subject to legal retention requirements
- Object to or restrict certain processing activities
- Export your data in a portable format
To exercise these rights, please contact us at vinay@getlegaci.com.
7. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses or other approved transfer mechanisms.
8. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Legaci Labs, Inc.
Email: vinay@getlegaci.com