Privacy

Privacy policy

Last updated 10 July 2026. A plain-spoken description of how Legal.id handles data; formal counsel-reviewed language follows before general availability.

Who we are

Legal.id is an identity service operated by Lextronica, Inc. ("we"). It lets you hold a Legal.id handle and sign in to other applications ("relying parties") using OpenID Connect.

What we collect

  • Your email address, and whether you've verified it.
  • A handle you choose, and an optional display ("holder") name.
  • If you choose to add them: your name parts, birthday, language, time zone, where you live, your citizenship, your status where you live (for example a visa), and where you were born and your name at birth. We don't verify any of it.
  • Authentication credentials: a password hash (never the password), and/or passkey public keys, and/or a Google account identifier if you link one.
  • A per-account decentralized identifier (DID) and its key material.
  • Security logs: sign-ins, consents, token grants and revocations, verification changes — with IP address and browser user-agent, for account safety.

What we do NOT collect

We do not store passwords in the clear. For the Verified tier we record that an organization checked your government ID: the document type and issuing country, how and when it was checked, the name as shown, and who recorded it. Never images of your documents, document numbers, or your Social Security number. When you confirm a work email by signing in with that organization's Google account, we record the address and the date.

What relying parties receive

When you sign in to an app with Legal.id, that app receives only the claims within the scopes you approve: your subject identifier (an opaque UUID), and — with your consent — your name, handle, assurance tier, DID, email and its verification status, your birthday, language and time zone if you added them (with a yes/no for whether you're 18 or older). Where you live, your citizenship, your immigration status and your birth details are sensitive: an app gets them only if it asks, and only after you've seen them on the consent screen and agreed — our own apps included. Apps never receive your password, your passkeys, or your Google tokens. You can review and revoke any connected app in Settings.

Retention

We keep account data while your account exists. Security log entries are retained for up to 24 months. If you delete your account we remove your profile and credentials; minimal records required for legal or fraud-prevention purposes may be retained as required by law.

Your choices

You can enable privacy mode to hide your name from your card and the public verify page, revoke connected apps and other sessions, and request account deletion by contacting us.

Contact

Privacy questions: privacy@legal.id · Lextronica, Inc.