Privacy notice

Who we are

Legworthy (legworthy.com) is run by Mushind LLC, managed by Ahmed Balogun. In this notice, "we" means Mushind LLC. It covers your Legworthy account: signing in, and the pages at legworthy.com.

Two tools have their own notices:

• Rental applications: rent.legworthy.com/privacy.
• The showing route assistant, for the addresses and routes you give it: route.legworthy.com/privacy.

What we store

• Your account: your email address. The account is created the first time you use a sign-in code or link.
• Sign-in codes and links: each sign-in email has a code and a link. We store them only in a form that can't be turned back into the code or the link.
• Sessions: while you're signed in, we keep a session with your IP address and your browser's user agent (the browser and system name it reports).
• Sign-in stats: when you last signed in, how many times you've signed in, and, if your account is blocked, when the owner blocked it.
• The owner's passkey: only the owner's account uses a passkey. We store its public key; the fingerprint, face or PIN check stays on his device.
• Limits on sign-in attempts: to stop abuse, we count recent requests by IP address and by a keyed hash of the email address, not the address itself.
• Logs: they record technical events, such as errors, and contain no personal data.

Why we store it

We use this information only to sign you in, keep you signed in, protect accounts from abuse, and block an account that breaks our terms. We don't sell it and we don't use it for advertising. Legworthy has no analytics, and the only cookies it sets are the ones that keep you signed in.

Emails we send

We send only transactional email: the sign-in codes and links you ask for, and, if you apply for a rental, the emails about your application. We send no marketing email and no newsletters. Our emails have no tracking pixels and no tracked links.

If an email to you bounces, or you mark it as spam, Amazon SES sends Ahmed Balogun a notice with your email address and the message headers, never the message body. He deletes these notices within 30 days.

An address that bounces or is marked as spam also goes on Amazon SES's suppression list, so we stop emailing it. We take an address off the list when its owner asks.

Who sees it

• Ahmed Balogun, for Mushind LLC.
• The companies that run Legworthy for us, only as needed to do so: Microsoft Azure hosts the website and its database in the United States; Amazon Web Services (Amazon SES) sends our emails; Cloudflare runs our domain's DNS, runs the check on the sign-in page that stops automated sign-ups (Turnstile), which sees technical details of your browser, and forwards email sent to hello@legworthy.com.
• Anyone the law requires us to give it to.

How long we keep it

• Your account: deleted 12 months after your last sign-in, unless you still have an unexpired session. If we have no sign-in recorded for your account, we count from when it was created. Its sessions, sign-in stats and any block are deleted with it. The owner's account is never deleted.
• Sessions: a session stops working when you sign out or when it expires: 7 days, renewed when you use it.
• Sign-in codes and links: a code or link stops working once it's used or after 5 minutes.
• Cleanup: expired session and code records are deleted daily.
• Limits on sign-in attempts: once these records are over an hour old, they're deleted during later sign-in activity, so there's no fixed deadline.
• Logs: kept for 30 days.
• Notices about bounced or spam-marked emails: deleted within 30 days, as described above.
• Backups: our database backups can still hold deleted information for up to 7 days, until those backups expire.

Deleting your account

We delete your account whenever you ask. Email hello@legworthy.com from the address on your account.

Questions

To ask what we hold about you, to correct it, or with any other question, email hello@legworthy.com.