Effective date: September 12, 2026 | Last updated: October 30, 2026

Legit Privacy Policy

Legit is a personal networking assistant operated by Cedar AI Agents, Inc. ("we," "us," or "our"), a corporation incorporated in British Columbia, Canada. You talk to it in a chat at app.legit.io/my and, once text messaging is available, over text messages; it can connect to accounts you choose so it can find the people you know and make introductions on your behalf. This policy describes how Legit collects, uses, stores and shares information. It applies to Legit only; our platform for organizations has its own Privacy Policy.

1. Information Legit Collects

• Your sign-in details: the email address, and the phone number if you use one, that you sign in with. If you use Legit over text messages, your phone number is taken from the first text message you send; Legit does not create an account for a number that has never messaged it.
• Your messages to Legit and its replies, which are how you use the product.
• What Legit remembers about you: short notes Legit keeps between conversations so you do not have to repeat yourself, such as how you like to write and sign emails, instructions you want it to keep following ("always cc Alex", "no calls before 10"), things you told it you would do and by when, and what you told it about people in your network. Legit learns these only from what you say to it in the chat, as described in Section 2.
• Contacts and connections you import. Legit stores the contacts and connections it imports for you so it can show you the people you know and let you pick who to share with:
  • your LinkedIn connections export, once importing the full connections list is available (name, employer, title, the date you connected, and email where the connection allowed it)
  • your Microsoft contacts (names, email addresses, phone numbers, organisations)
  • contacts from your phone, if you choose to share them once texting is available (names, phone numbers, email addresses)
• Data from accounts you connect, such as Gmail, as described in Section 3.
• Public professional data about the people you import: Legit looks them up in licensed public professional data to add their current role, employer and profile photo, used to show you who they are.
• Service data: which features you use and when, usage logs, system performance data and error reports needed to run and secure the service; session replay data (a recording of the pages and interactions in the Legit web account, where enabled), used to diagnose errors and support you; and aggregated, anonymized statistics about how the service is used. Aggregated statistics are never derived from Google user data.

2. How Legit Uses Information

• To show you the people you know and let you choose who to share your network with
• To answer what you ask about the people you know, and to find the email address of a person you name, using the Google accounts you connected
• To make introductions by email from your Gmail, as part of the tasks you give Legit
• To send emails from your Gmail as part of the tasks you give Legit, and to read and answer the replies on their threads as part of those tasks
• To reply to you and to follow up on things you asked Legit to do
• To remember what you told it, so it can follow your preferences and instructions in later conversations and remind you of what you said you would do
• To keep the service secure and to prevent abuse

Information about other people that you import is held as your data: it is used only inside your own Legit network and for the tasks you give Legit, such as introductions; it is never sold and never used for advertising; and other users see it only as Section 5 describes. Legit does not use your data to train general-purpose AI or machine learning models, to build profiles for advertising, or for any purpose other than delivering Legit to you.

What Legit remembers. Legit learns what it remembers about you only from what you say to it in the chat. To understand each of your messages it also reads, as context, the Legit message just before it and Legit's reply to it; such a message can pass on news, including part of an email someone sent you, but Legit only remembers what your own words say, never something because a message from Legit said it. It starts with the messages you send from October 5, 2026, and never reads earlier ones. It saves something straight away when you ask it to ("remember that...") or give it a clear instruction to keep following, and tells you when it does; it also reads your recent messages in the background to keep its notes tidy and up to date. It never learns what it remembers from your email, your calendar, your contacts, other people's messages or other users' agents. What it remembers is used only to serve you: it is never shown to other users, never sold and never used for advertising. You can see everything Legit remembers about you, and delete any of it, under Preferences at app.legit.io/my, or tell Legit in the chat to forget something.

AI and machine learning. Legit uses AI to understand your messages, find people you know and compose introductions. Our AI processes your data as follows:

• Inference only: your data is used to generate results for your benefit, not to train or improve our models for other users
• No general model training: we do not use your data to train, fine-tune, or update any general-purpose AI or machine learning model
• Google (Gemini): we use Google's Gemini models for AI inference under the applicable Google service terms, which prohibit Google from using your data to train its models
• OpenAI and Anthropic: we also use OpenAI and Anthropic for AI inference; under their API terms, your data is not used to train their models
• Voice providers: AI-led voice conversations are delivered through third-party voice providers, which process call audio and transcripts on our behalf
• You own outputs: all AI-generated content relating to your use of Legit belongs to you

3. Google User Data

When you connect a Google account, Legit asks for one permission to use your Gmail, plus your name, email address and profile picture so it knows who you are. It does not ask for your Google Contacts or your Google Calendar. With that permission, Legit will:

• Gmail (send and drafts): send email from your address as part of the tasks you give Legit, such as an introduction, and replies on the threads Legit is handling, or place an email in your Drafts for you to send. When Legit places an email in your Drafts, it checks whether you have sent it: it asks Gmail whether the draft is still there, looking only at its recipients, and once it is gone, it looks in your Sent folder at the messages sent to the same person since the draft was made, reading only their recipients, subject and message ID (the identifier every copy of an email shares), not their bodies, to find the one you sent. Legit then handles that thread like one it started
• Gmail (read): read the email threads Legit is handling for you, and only those: the threads of the emails Legit sent for you, and your copy of a thread another person's Legit started that Legit took over for you (see "taking over a thread" below), so it can tell you when someone replied and what they said, such as the times they proposed, and reply on the thread for you. Legit does not read through your mail, and it does not open any other thread or message, including one you ask it about
• Gmail (taking over a thread): when another person's Legit sends an email that you are on, such as the introduction you asked for, it gives your Legit that email's message ID. Your Legit looks up that one message in your mailbox by its message ID, including in Spam and Trash, and reads only its headers (sender, recipients, subject and message IDs), not its body, to check that someone on it is a Legit user whose Legit has exchanged messages with yours; if no one is, it refuses and goes no further. If someone is, Legit takes over your copy of that thread: it moves the message out of Spam into your inbox if Gmail put it there, applies the "Legit" label, and from then on reads and replies on the thread as described under Gmail (read). It reads nothing else in your mailbox to do this, and keeps the same for this thread as for one it started (see below)
• Gmail (labels, read status and Spam): create a "Legit" label, apply it to the threads Legit reads for you, mark a reply as read once Legit has handled it, and move your copy of a thread Legit takes over out of Spam into your inbox
• Gmail (new-mail notifications): when you connect Gmail, Legit asks Gmail to notify it when new mail arrives in your inbox, and renews that request once a day while Gmail stays connected; while Legit is handling a thread or waiting for you to send a draft, it also checks once an hour in case a notification was missed. A notification carries only your email address and a marker of how far your mailbox has changed. On each one, Legit lists the IDs of the messages added to your inbox since its last check and which thread each is on. It looks further only at a message on a thread Legit is handling: it reads that message's headers (sender, recipients, subject, date and message IDs), not its body, to tell the part of Legit handling that thread that a new email arrived, which then reads the thread as described under Gmail (read). Legit does not open any other message
• Gmail (headers): search your email headers (sender, recipient, date, subject), not message bodies, to find the email address of one person by name, such as someone you were asked to introduce, or to find LinkedIn's email saying the data archive you requested is ready, when you are importing your LinkedIn connections; each search reads a small number of headers, and the search and what it finds are kept only in Legit's conversation history (see "What Legit keeps in its conversation history" below)

What Legit keeps from a connected Google account. From a connected mailbox Legit keeps: for the threads Legit started or took over on your behalf, the thread itself and what Legit pulled out of the reply (that the other person answered, and the times they proposed); and, for new-mail notifications, a marker of how far it has checked your mailbox, when its notification request expires, and the IDs of the messages it has already passed on, so it does not pass the same message on twice. Outside its conversation history (below), it keeps no copy of the threads it reads or the searches it runs, and nothing from the rest of your mailbox. What Legit remembers about you (Section 2) is never taken from a connected Google account: it comes only from what you say in the chat.

What Legit keeps in its conversation history. When Legit reads something from your Google account to do a task, what it works with goes into the history of the Legit conversation doing that task: your chat with Legit, or the part of Legit handling one thread or task for you. That includes the messages of a thread Legit reads, the results of a header search, and the sender and subject of a new reply. Legit keeps that history, encrypted, so it can carry on the task, and deletes it when you delete your Legit account; disconnecting a Google account does not delete it.

How Google user data is stored and shared. Google user data is stored encrypted and kept only as described in Section 6: the items Legit keeps (the threads Legit started or took over and the facts it pulled out of the replies, and the new-mail markers above) are kept while your account exists; what Legit reads to do a task is kept in that conversation's history until you delete your Legit account, as described above; Gmail labels and read status, and email headers Legit reads only to check a message and does not work with in a conversation, are deleted within 30 days; and connected account tokens are removed when you disconnect that account, or within 30 days of deleting your Legit account (Section 7). It is shared only with the service providers listed in Section 5, and only as needed to provide the features above. It reaches other people only as Section 5 describes, as part of the tasks you give Legit: in the emails Legit sends for you, in what your Legit says to another person's Legit, and, when your network is shared with someone, as the name, role, employer and public profile (the profile photo from licensed public professional data) of the people in it they may see. Email addresses and phone numbers from your Google account are never shown to other users, except as an address on an email Legit sends for you.

AI and machine learning. Google Workspace APIs are not used to develop, improve, or train non-personalized AI and/or ML models. Google user data is not used to train or improve foundational AI models. Legit may send Google user data to AI model providers only to do the tasks you give Legit, such as reading a reply to tell you which times were proposed, under terms that prohibit those providers from training on it.

Legit's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. The policy is at developers.google.com/terms/api-services-user-data-policy. In plain terms: Google user data is used only to provide the Legit features you turned on, it is never used for advertising, never sold, never transferred to data brokers, and no person at our company reads it except with your permission, to investigate abuse or a security problem, or where the law requires it.

4. Text Messages

Text messaging is not yet available in Legit. When it is: by texting Legit you agree to receive replies and follow-ups from Legit about the things you asked it to do. Message frequency depends on your use. Legit does not send marketing messages. Message and data rates may apply. Reply STOP at any time to stop all messages, or HELP for help. You can also tell Legit in your own words.

5. Sharing and Sub-Processors

Legit does not sell personal information. We share information only as necessary to deliver Legit, with sub-processors bound to use it only to provide their service to us. Legit's sub-processors are:

• Google Cloud Platform — infrastructure, hosting, data storage, and AI inference (United States)
• OpenAI — AI inference; no training on your data (United States)
• Anthropic — AI inference; no training on your data (United States)
• Slack Technologies — primary user interface (United States)
• Clerk — authentication and session management for our web application, and secure storage of the Google account connections you approve for Legit (United States)
• Neo4j, Inc. (AuraDB) — managed graph database storing relationship data (United States)
• Vapi.ai — voice call handling and transcription; call recordings are retained by Vapi under our account configuration and accessed by us on demand (United States)
• ElevenLabs — conversational voice agent for AI-led meetings (United States)
• Bland AI — outbound voice calling (United States)
• Granola — meeting notes and transcript capture (United States)
• SendGrid (Twilio) — transactional email delivery (United States)
• Linq — iMessage and SMS messaging between you and Legit, once texting is available (United States)

We do not sell, rent, or share your information with third parties for their own purposes. Information is disclosed to others in these cases, as part of the tasks you give Legit: when Legit sends an email for you, the people on it see that email, as Section 3 describes (for an introduction, the person being introduced sees what Legit sends them); when Legit messages another person's Legit, which it can do only with someone you are connected to, when neither of you has blocked the other, and only inside an open request between you or when they share their network with you, that person's Legit, and through it that person, sees what the message says; when your network is shared with someone, by you or by Legit; and where the law requires it. When your network is shared with someone, they see the name, role, employer and public profile (the profile photo from licensed public professional data) of the people in it they may see, and nothing else. Your contacts' phone numbers and email addresses are never shown to other users, except as an address on an email Legit sends for you. Legit uses them as part of the tasks you give it: to find a person you name and how to reach them, to check that you already know someone before telling you they use Legit, to recognise a contact who is already in your network so they are not added twice, and to address the introductions it sends.

6. Retention

• Email content Legit reads, and the other Google data it works with to do a task (such as header search results), is kept, encrypted, in the history of the Legit conversation doing that task until you delete your Legit account; for threads Legit started or took over, Legit also keeps the thread and the facts it pulled out of the reply (that the other person answered, and the times they proposed) while your account exists
• The new-mail markers (how far Legit has checked your mailbox, when its notification request expires, and the IDs of the messages it has already passed on) are kept while your account exists
• Gmail labels and read status, and email headers Legit reads only to check a message and does not work with in a conversation, are kept for no more than 30 days, encrypted, then deleted
• Imported contacts and connections are kept while your account exists
• What Legit remembers about you is kept while your account exists, until you delete it or tell Legit to forget it; something you said you would do by a date is dropped, with its earlier versions, after that date passes. When you delete something Legit remembers, Legit deletes it with its earlier versions and anything Legit worked out from it, and does not learn it again from your old messages
• Introduction requests and the messages Legit sent on your behalf are kept while your account exists so you can see your history
• Public professional data about the people you import is kept while your account exists and the person remains in your network
• Session replay data is deleted automatically within 30 days of capture; other service data is kept only as long as needed to operate, secure and support the service

When you delete your account. Within 30 days we delete everything listed above that relates to you from our own systems: your account, messages, your conversations with Legit (including what it read to do your tasks), what Legit remembers about you, imported contacts and connections, the public professional data retrieved for your network, email and other Google data, connected account tokens, introduction history, and session replay data. The only exceptions are aggregated, anonymized statistics that no longer identify you, and technical and security logs, which are kept only as long as needed to secure the service or as required by law and are then deleted. We provide written confirmation of deletion on request and instruct our service providers to delete data they hold on our behalf. Some service providers delete or expire content on shorter schedules of their own, so content may be removed sooner than the periods above.

7. Your Account and Deletion

When you sign in at app.legit.io/my, you can disconnect accounts, see and delete what Legit remembers about you, export your data, and delete your account. The export holds what Legit remembers about you, your conversation with Legit as you saw it, the tasks Legit is working on for you and what you decided for them, the notices Legit received for you that you did not type (from its own parts, reminders, and other people's Legit), the emails Legit sent or drafted for you, your introductions, your connected accounts, and your network and who you share it with. It does not include the conversation history of what Legit read from your Google account to do a task (Section 3). To delete your account and everything it holds, use that page, or email legit@getcedar.ai; we delete your account, what Legit remembers about you, your imported contacts and connections, your introduction history and any connected account tokens within 30 days. If you are not a Legit user and someone you know imported your contact details, email legit@getcedar.ai and we will remove them from every Legit account and block them from being re-imported.

8. Security

We protect Legit data using industry-standard security measures, including:

• AES-256 encryption at rest and TLS 1.2+ encryption in transit
• Private VPC network isolation on Google Cloud Platform
• Role-based access controls and IAM authentication; access inside our company is limited to the people who operate the service and is logged
• Connected Google account tokens are held by Clerk, our authentication provider (see Section 5), and requested by Legit's backend only when a feature you turned on needs them; they are never stored in Legit's application code, database or logs
• Infrastructure is managed as code and deployed through a CI/CD pipeline that requires manual approval for production changes
• SOC 2 Type II audit in progress (target completion Q4 2026)

In the event of a security incident affecting your data, we will notify affected users within 72 hours of confirmed discovery.

9. Your Rights

Depending on where you live you may have the right to access the personal information we hold about you, correct it, request its deletion, object to or restrict certain processing, and receive it in a portable format. Contact legit@getcedar.ai and we will respond within 30 days.

10. International Data Transfers

We are incorporated in Canada, which the European Commission recognizes as providing an adequate level of data protection for commercial organizations. Your information may be processed in the United States by the service providers described in Section 5. For those transfers, we rely on the transfer mechanisms in our agreements with those providers, including Standard Contractual Clauses or equivalent frameworks, as required under applicable data protection law.

11. Cookies and Tracking

Legit does not use cookies or tracking technologies for advertising. The Legit web app at app.legit.io/my uses cookies to keep you signed in, set by our sign-in provider Clerk, and first-party product analytics to understand which features are used and to diagnose errors; legit.io may use minimal analytics to understand visitor behavior. Where session replay is enabled on the web app, it is used to diagnose errors and support you, not for advertising or profiling. No personal data is sold or shared with advertising networks.

12. Age

Legit is for adults. You must be at least 18 to use it, and we do not knowingly collect information from anyone under 18.

13. Changes

We may update this policy. Material changes will be announced to active users by email or a notice in the app, and by text where you use Legit over text messages, at least 30 days before they take effect. The current version is always available at getcedar.ai/legit-privacy.

14. Contact

legit@getcedar.ai

Cedar AI Agents, Inc., Suite 2700, The Stack, 1133 Melville St, Vancouver, BC V6E 4E5, Canada