Privacy policy

Project inquiries

The form asks for your name, email address, a brief description of what you want to solve and the project type. It also records the language, submission date and the results of attempts to send the internal notification and the acknowledgment to your email. We use this information to reply, understand your inquiry and continue the conversation you requested.

The indicated fields are required to submit the form. Providing them is voluntary: you can email us directly instead. We do not need passwords, payment information or sensitive personal information to assess an inquiry.

To limit repeated submissions, we calculate a hash of the IP address using a secret value. This is a pseudonymous identifier: it can recognize submissions from the same connection and is stored with the inquiry. The contact table does not store the original IP address; infrastructure providers may process it to serve and protect the connection.

By submitting the form, you authorize Model Legacy to use your information to reply to this inquiry, understand the project and follow up on that conversation. This authorization is limited to those purposes; it does not subscribe you to the launch notice or advertising messages. You can withdraw it by emailing privacy@modellegacy.app.

If we proceed with a proposal or contract, we will separately request the information needed to identify the parties, document the agreement and handle invoicing and payments. That processing is limited to the relationship you requested and applicable legal obligations. The inquiry form does not request or process payments.

Email communications

When you email us, we receive your address and the content you include. We use this information to reply and follow up on that subject. When you submit the form, we attempt to send a transactional acknowledgment. Sending an inquiry does not add you to the launch list or an advertising list.

Launch notice

If you sign up, we store your email, language and registration date in a separate list and send an email to confirm your request. Only after confirming do you agree to receive one notice when we publish our first application. This subscription is optional, based on your consent and does not add you to other campaigns.

The confirmation link expires after 24 hours. If your request is still pending, you can request another link from the form after one hour. We store hashes of confirmation and unsubscribe tokens, dates and confirmation status, and the result of the send attempt. Full tokens are not stored in the subscription database; the links appear in emails sent through the provider.

To control repeated submissions, we store the pseudonymous IP hash and date in a separate record without your email. You can cancel your request or withdraw your subscription at any time using the unsubscribe link in the email and confirming removal on the page, or by writing to privacy@modellegacy.app.

To limit outgoing emails, we keep another record with a pseudonymous recipient identifier calculated using HMAC and a secret value, the purpose and the attempt date. This record does not include the email address or message content.

Browsing, measurement and cookies

The site integrates Vercel Web Analytics and Speed Insights to understand pages visited, general traffic sources, device types and performance. Our custom events describe actions such as viewing a section or submitting a form; they do not include names, email addresses or messages entered in the fields.

According to its privacy documentation, Web Analytics uses aggregate statistics and a temporary visitor identifier discarded after 24 hours, without analytics cookies or tracking across websites. Hosting infrastructure also processes technical request information to deliver the site and detect errors or abuse.

The site may store the NEXT_LOCALE preference cookie when you change languages or open a page directly in another language. It remembers that preference; you can remove or block it in your browser. We do not use advertising cookies or tools to build advertising profiles.

The site does not change these practices in response to a browser’s “Do Not Track” signal.

Providers and international transfers

• Supabase: stores inquiries, the launch list and submission-control records.
• Resend: sends an inquiry notification to our inbox containing the name, email, project type, language and message. It also sends the visitor acknowledgment and launch-notice confirmation email, using the recipient address, language and relevant content, including confirmation and unsubscribe links. The IP hash is not included in these emails. According to its documentation, service data is stored in the United States.
• Vercel: provides hosting, site delivery and the measurement functions described above.
• Email services: process the communications we exchange by email.

Hosting, storage and email may involve your information being processed or accessed outside Argentina, including in the United States, depending on each provider’s infrastructure and configuration. In this policy, “international transfers” refers to that processing of information in other countries. It can occur even when both you and Model Legacy are in Argentina.

Data transfers from Argentina are subject to section 12 of Law 25,326 and AAIP rules. Authorization to reply to an inquiry is not blanket authorization for any transfer or a waiver of your rights. You can email privacy@modellegacy.app to ask about the destinations, providers and safeguards applicable to your information.

We do not sell personal information or share it for targeted advertising. We may disclose it to providers needed for these purposes or in response to a valid legal obligation.

Retention and security

Inquiries are kept while the conversation is being handled, for up to 12 months from submission. If a project is commissioned or a legal retention obligation applies, necessary records are handled separately for the period required for that relationship.

Unconfirmed launch requests are deleted during manual retention review once 7 days have passed since the latest confirmation request, or registration if there was no later request. Confirmed subscriptions are deleted after the notice is sent or, if the first application has not been published, 12 months after registration. Pseudonymous outgoing-email records are deleted during manual review once 31 days have passed. Separate records that control launch requests by IP are reviewed for deletion after one day; the one-hour window used to count attempts does not mean records are deleted when that hour ends.

Deletion of inquiries and subscriptions at the end of their retention period is handled manually, rather than through automatic deletion. Using the email unsubscribe link deletes the subscription and its associated tokens. You can request earlier deletion by email. Retention of providers’ technical logs and backup copies depends on their services and configurations.

Access to form records is restricted to the server and authorized administrative access. We use controls to reduce unauthorized access and form abuse. No transmission or storage method removes every risk.

Access, correction and deletion

You can request information, access, correction, updating or deletion of your data, and withdraw consent, by writing to privacy@modellegacy.app. Include the email you used and what you need. We may request the minimum information needed to verify your identity; please do not send sensitive identity documents initially.

In Argentina, Law 25,326 provides 10 calendar days to respond to an access request and 5 business days for correction, updating or deletion, under sections 14 and 16. Access is free every six months, or sooner with a legitimate interest. Deletion may be limited by a legal retention obligation or the rights of others.

Argentina’s Agency for Access to Public Information (AAIP), the supervisory authority for Law 25,326, receives personal-data complaints. Information on exercising your rights is available on its official website.

If you live outside Argentina, you can also contact us to exercise the rights available under the laws that apply where you live.

Children’s information

The site is intended for businesses and professionals. It is not designed for children under 13 and does not knowingly request their information. If you believe we received information from a child under that age, contact us so we can review and delete it where appropriate.

Applications and policy updates

Each published application will have specific privacy and support information available from its listing. We update this policy when the site’s practices change; the date on the page identifies the current version. A new use of information requiring consent will be requested separately.