Privacy Policy

Last updated: November 3, 2026

Welcome to Legwork. This Privacy Policy describes how Legwork Systems, Inc., a Delaware public benefit corporation (“Legwork,” “we,” “us,” or “our”) collects, uses, and shares personal information through our website(s), applications, and services (collectively, the “Services”). This Privacy Policy is part of our Terms of Service.

By accessing or using the Services, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not use the Services.

1. Information We Collect

Information You Provide

The information we collect depends on how you use the Services — whether as a supporter, an organization administrator, or both.

Account information, such as your first and last name, email address, password, and phone number.

Profile information, such as a biographical description, profile photograph, and any other information you choose to add to your account profile.

Payment information. If you are a supporter purchasing a membership, you must provide payment information to our payment processor, Stripe. Legwork does not store your full payment card number or bank account number. Instead, Stripe creates a token that represents your payment method, and Legwork stores only limited payment details such as the last four digits of your card or bank account, card expiration date, bank name, and billing postal code. You can view Stripe’s Privacy Policy at https://stripe.com/privacy.

Organization information. If you create or manage an organization on Legwork, you may provide information about the organization, including its name, description, mission, tax status, tax identification number, and banking information (through Stripe Connect). You may also provide information about your membership tiers, pricing, and benefits.

CRM and imported contact information. Organizations may import contact records into the platform, including names, email addresses, phone numbers, and other contact details of individuals associated with the organization. Organizations represent that they have the necessary rights and consents to import and use this information as described in our Terms of Service.

Communications. When you contact us for support, send messages through the platform, post comments, or otherwise communicate through the Services, we collect the contents and metadata of those communications.

User-generated content, such as images, videos, photos, links, comments, organizational descriptions, membership tier descriptions, benefit listings, and other content that you create, post, or make available through the Services.

Information Collected Automatically

When you access or use the Services, we automatically collect certain information, including:

Device and browser information, such as your device type, operating system, browser type, screen resolution, language settings, and unique device identifiers.

Usage information, such as pages or screens you viewed, how long you spent on a page, navigation paths, the website you visited before the Services, and access times.

Network information, such as your IP address, mobile carrier, and general location information (typically derived from your IP address, such as city or region).

Cookie information. We use cookies and similar technologies to operate the Services. See Section 7 (Cookies and Tracking Technologies) below for more information.

Information from Third Parties

Payment processors. Our payment processor, Stripe, may provide us with limited information about your transactions, such as payment confirmation, failure status, and card metadata.

Organizations on Legwork. If an organization imports your contact information into Legwork, we will receive and store that information on behalf of the organization.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Services;
Create and manage your account;
Process membership payments, transfers, and payouts;
Send you transactional communications, including payment receipts, billing confirmations, membership status updates, security alerts, and support messages;
Send you SMS text messages if you have opted in, including authentication codes, membership notifications, and invitation messages;
Enable organizations to communicate with their members and contacts through the platform;
Personalize your experience on the Services, including recommending organizations;
Understand and analyze how the Services are used, and improve the Services;
Detect, prevent, and address fraud, abuse, and security issues;
Comply with legal obligations, including tax reporting requirements;
Enforce our Terms of Service and other policies; and
Respond to your requests, questions, and feedback.

3. How We Share Your Information

We never sell your personal information to third parties.

We share your information only under the following circumstances:

With Organizations

When you join an organization on Legwork, purchase a membership, or otherwise engage with an organization, you agree to share certain personal information with that organization, which may include:

Your name and email address;
Your profile information, including your avatar;
Your phone number, if you have consented to receive communications from the organization;
Information about your membership, including tier, amount, and start date (but not your full payment card information);
Your shipping address, if applicable to a membership benefit; and
Any other information you choose to provide to the organization through the platform.

Organizations may use your information in accordance with their own privacy policies. Legwork is not responsible for an organization’s use of your information once it has been shared with them.

Legwork maintains an Organization Data Processing Agreement governing how organizations are permitted to process the information that is shared with them through the Services. This agreement details an organization’s obligations to protect the privacy of their members during and beyond their relationship with Legwork.

With Supporters

When supporters join your organization or interact with your organization through the platform, certain information about your organization is shared with them, including your organization name, description, membership tiers, benefits, and other content you have made available on the platform.

With Service Providers

We share information with third-party service providers that perform services on our behalf, subject to confidentiality obligations and on the condition that they use your information only as directed by Legwork. These service providers include:

Stripe — payment processing (see Stripe’s Privacy Policy);
Twilio — SMS text message delivery (see Twilio’s Privacy Policy);
PostHog — product analytics (see PostHog’s Privacy Policy); and
Postmark — transactional and marketing email delivery (see Postmark’s Privacy Policy).

We also engage other service providers that assist with cloud hosting and infrastructure, transactional email delivery, product analytics, error monitoring, infrastructure observability, and internal administration. These service providers access your information only as necessary to perform their functions and are contractually obligated to protect it.

With Law Enforcement and Regulators

We may disclose your information if we believe it is reasonably necessary to:

Comply with a law, regulation, legal process, or governmental request (e.g., subpoenas, court orders);
Protect the rights, property, or safety of Legwork, our users, or the public;
Enforce our Terms of Service or other agreements;
Detect, prevent, or address fraud, security, or technical issues; or
Respond to an emergency involving danger of death or serious physical injury.

In Connection with a Business Transfer

If Legwork is involved in a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

4. Information Shared with the Public

Certain information may be publicly visible on the Services, including:

Your public profile information, such as your display name, avatar, and any biographical description you have added;
Content that you or your organization have made publicly available on the platform, such as organization profiles, membership tier descriptions, and public posts; and
Aggregated and anonymized data that cannot be linked back to any individual user.

5. SMS Communications

Legwork may send SMS text messages to users who have opted in to receive them. We may also facilitate SMS communications sent by organizations to their members and contacts through the platform.

Data collected. In connection with SMS services, we may collect your cell phone number, your mobile carrier’s name, and the date, time, and content of messages, as well as other information you provide.

Opt-out. You may opt out of non-transactional SMS messages at any time by replying STOP to any message or by updating your notification preferences in your account settings. You may text HELP for assistance.

Message and data rates may apply depending on your mobile carrier and plan. Neither Legwork nor your mobile carrier is liable for delayed or undelivered messages.

Organization-sent communications. When organizations send communications through Legwork to their members or imported contacts, Legwork acts as a platform providing the communication channel. Organizations, not Legwork, are responsible for the content of those communications and for obtaining any required consents. Please refer to the applicable organization’s privacy policy for information about how they use your data.

For more information about SMS communications, please see Section 5 (Communications from Legwork) of our Terms of Service.

6. Data Shared Between Organizations and Their Contacts

Legwork serves as a platform that facilitates the relationship between organizations and their members and contacts. This creates a three-way data relationship:

Information shared from supporters to organizations. When you join an organization or purchase a membership, certain information is shared with that organization as described in Section 3 above. Organizations may use this information to manage their membership programs, communicate with you, and fulfill membership benefits.

Information imported by organizations. Organizations may import contact records (such as names, email addresses, and phone numbers) into Legwork’s CRM tools. Legwork stores and processes this imported data on behalf of the organization. The organization, not Legwork, is responsible for ensuring they have the right to import and use this data.

Your rights regarding organization-held data. If you wish to have your contact information removed from an organization’s records on Legwork, you may request this through your account settings or when canceling a membership. This removal applies only to data stored on the Legwork platform and does not affect data that organizations maintain outside of Legwork.

For more information, please see Section 9 (Data Portability and Deletion) of our Terms of Service.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. Cookies are small text files stored on your device by your browser.

Cookies we use. We currently use only first-party cookies that we create and control, including:

Essential cookies that are necessary for the Services to function, such as session cookies that keep you logged in and remember your preferences; and
Analytics cookies used through PostHog to understand how the Services are used and to improve the user experience.

We do not currently use third-party advertising cookies or retargeting pixels.

If we add third-party cookies in the future, we will update this Privacy Policy accordingly.

Your choices. You can configure your browser to reject cookies or to alert you when cookies are being sent. However, disabling essential cookies may prevent you from using certain features of the Services.

8. Data Security

We use reasonable technical, administrative, and physical measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit, secure cloud hosting, and access controls on internal systems.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials.

9. Data Retention

Legwork retains your personal information in accordance with the following timelines:

Account data (name, email, profile information): retained while your account is active and for up to 180 days after account deletion to allow for account recovery and to resolve any pending issues.
Payment and transaction records: retained for 7 years after the transaction date, as required for tax reporting and financial record-keeping obligations.
Backups: retained for up to 90 days after deletion from production systems, after which they are permanently purged.
Anonymized and aggregated data: retained indefinitely for analytics, reporting, and product improvement purposes. This data cannot be linked back to any individual user.

We may also continue to retain some information after you delete your account where necessary to resolve disputes, enforce our agreements, or prevent fraud and abuse. When personal information is no longer needed for any of these purposes, we will delete or anonymize it.

10. Your Rights and Choices

Access, Correct, or Update Your Information

You may access, review, and update your account information at any time by logging in to your account and navigating to your settings.

Delete Your Account

You may request deletion of your account at any time through your account settings or by contacting us at support@legwork.so. Upon deletion, your personal information will be deleted as described in Section 9 (Data Portability and Deletion) of our Terms of Service.

Data Portability

You may request a copy of the personal information we hold about you by contacting us at support@legwork.so.

Opt Out of Marketing Communications

You may opt out of marketing-related emails by following the unsubscribe instructions in any marketing email you receive from us, or by updating your communication preferences in your account settings. You will continue to receive transactional and service-related communications.

Opt Out of SMS

You may opt out of non-transactional SMS messages at any time by replying STOP to any message or by updating your preferences in your account settings.

Do Not Track Signals

Some browsers may transmit “Do Not Track” signals to websites. There is no industry-standard approach to responding to these signals. Accordingly, Legwork does not currently monitor or respond to “Do Not Track” signals.

11. Organization Data Processing Agreement

Organizations that use Legwork to manage memberships and contact data act as data controllers with respect to the personal information of their members and imported contacts. Legwork acts as a data processor on behalf of those organizations for this data.

Legwork maintains an Organization Data Processing Agreement (“DPA”) that governs how organizations are permitted to process the personal information that is shared with them through the Services. By creating an organization on Legwork, you agree to the terms of the DPA, which includes obligations to:

Process member and contact data only for the purposes of managing your membership program and communicating with your members and contacts;
Implement appropriate security measures to protect personal information;
Honor data deletion and opt-out requests from individuals;
Not sell, rent, or otherwise disclose member personal data for purposes unrelated to your membership program; and
Comply with all applicable data protection laws.

The full Organization Data Processing Agreement is available at /legal/dpa.

12. Children’s Privacy

The Services are not directed to children, and you may not use Legwork if you are under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18 without appropriate consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at support@legwork.so.

13. International Data Processing

Legwork is operated from the United States, and our primary servers are located in the United States. Some of our service providers may process personal information in other countries as part of providing their services to us; they are contractually obligated to protect it. If you access the Services from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States and in other countries where our service providers operate.

By using the Services, you consent to the transfer of your information to the United States and to other countries where our service providers operate. We strive to comply with applicable laws in the jurisdictions in which we operate, but we make no representations that the practices described in this Privacy Policy are compliant with laws outside of the United States that may apply to the collection, security, use, and disclosure of personal information.

14. State-Specific Privacy Notices

California Residents

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California residents certain rights regarding their personal information. At this time, Legwork does not meet the revenue or data volume thresholds that trigger CCPA compliance obligations. We will update this Privacy Policy if and when we become subject to the CCPA.

Regardless of CCPA applicability, Legwork provides all users with the ability to access, update, and delete their personal information as described in Section 10 above.

Under California’s “Shine the Light” law (Civil Code section 1798.83), California residents may request information about the disclosure of personal information to third parties for their direct marketing purposes. Legwork does not share your personal information with third parties for their direct marketing purposes.

Nevada Residents

We do not transfer personal information for monetary consideration. If you are a Nevada resident and would like to submit a request regarding the future sale of your information, please contact us at support@legwork.so.

15. Third-Party Links and Services

The Services may contain links to third-party websites or services that are not owned or controlled by Legwork. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party site or service that you visit or use.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes that we determine, in our sole discretion, are material, we will notify you by email or by posting a prominent notice on the Services before the changes take effect. Your continued use of the Services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices.

17. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Legwork Systems, Inc.
Email: support@legwork.so