Privacy Policy

Version 1.0

Effective Date: September 4, 2026

Last Updated: September 4, 2026

Legacy Baby Registry™ (“Legacy Baby Registry,” “LBR,” “we,” “us,” or “our”) is operated by Universolutions Inc., a Florida corporation.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use the LBR website, platform, Registry features, Family Legacy Blueprint, Affiliate or Agent services, communications, and related services.

Contact:

Universolutions Inc.

151 Lakeview Dr. #206

Weston, FL 33326

United States

Email: support@legacybabyregistry.com

This Privacy Policy applies to personal information processed through LBR, including information associated with:

• website visitors;
• Family accounts;
• Registry Owners;
• Registry participants;
• gift or contribution interactions;
• Affiliates;
• Legacy Baby Registry Agents/Partners;
• applicants;
• professional Service Requests;
• support communications; and
• administrative users.

Independent third-party websites, payment applications, Registry providers, insurers, professionals, retailers, and other services have their own privacy practices.

LBR accounts are intended for adults age 18 or older.

Children may not create LBR accounts.

An adult Registry Owner or other authorized adult may provide information about a child in connection with a Registry or family-planning purpose.

LBR is not intended as a service through which children independently submit personal information.

If we learn that a child has directly created an account or submitted personal information contrary to these requirements, we may restrict the account and take reasonable steps to investigate and delete information where appropriate.

A parent or legal guardian who believes information concerning a child has been submitted without proper authorization may contact us at:

support@legacybabyregistry.com

Depending on how you use LBR, we may collect the following categories of information.

A. Account Information

This may include:

• name;
• email address;
• telephone number;
• account identifiers;
• authentication records;
• account role;
• communication preferences;
• verification status; and
• account-security information.

B. Family and Registry Information

This may include:

• Registry Owner information;
• family member names;
• child’s name;
• child’s date of birth;
• due date;
• relationship information;
• photographs;
• family story;
• Registry title;
• Registry Goal;
• Registry categories;
• stated intended uses;
• contribution destinations;
• Registry visibility selections; and
• other information the Registry Owner elects to provide.

C. Family Legacy Blueprint Information

Depending on the features used, Blueprint information may include information concerning:

• guardians;
• protection planning;
• legacy planning;
• safety-net planning;
• family values;
• financial-foundation information;
• planning priorities;
• educational assessments;
• stated family goals; and
• responses to planning questions.

Blueprint information is not automatically public merely because a family has a public Registry.

D. Service Request Information

If you request contact with an insurance agent, attorney, financial professional, tax professional, or another provider, we may collect or process information such as:

• requested topic;
• state or jurisdiction;
• language preference;
• availability;
• scheduling information;
• assigned professional;
• Service Request status;
• contact information; and
• related communications or operational history.

E. Affiliate and Agent Information

For Affiliates, Agents, applicants, and Partners, we may process:

• legal name;
• contact information;
• application answers;
• professional biography;
• referral relationship;
• licensing status;
• license states;
• license expiration information;
• carrier appointments;
• credentials;
• professional languages;
• interview information;
• training completion;
• agreement acceptance;
• subscription status;
• compensation configuration;
• referral attribution;
• payment or payout records where applicable;
• compliance information; and
• administrative notes reasonably necessary to operate the Partner program.

F. Subscription and Transaction Information

We may process information concerning:

• subscription plan;
• Stripe customer or subscription identifiers;
• billing status;
• trial status;
• payments;
• refunds;
• discounts;
• waivers;
• billing events;
• payment failures; and
• related transaction metadata.

LBR generally does not need to store full payment-card numbers.

Payment information may be handled directly by the applicable payment processor.

G. Referral and Attribution Information

We may collect information necessary to understand how users were referred to LBR, including:

• referral links;
• QR-code attribution;
• Partner identifiers;
• campaign identifiers;
• landing-page information;
• referral journey events;
• first-party attribution information; and
• advertising consent status.

H. Communications

We may collect:

• support messages;
• emails sent or received through LBR workflows;
• invitation activity;
• communication preferences;
• unsubscribe status;
• consent history;
• scheduling information; and
• transactional communication records.

I. Technical Information

We may automatically process technical information such as:

• IP address;
• browser type;
• device or user-agent information;
• approximate network information;
• timestamps;
• referring page;
• requested URL;
• session information;
• authentication events;
• security events;
• consent-cookie information; and
• application logs.

We use this information for operation, security, fraud prevention, troubleshooting, attribution where permitted, and service improvement.

Unless LBR specifically creates a feature designed to securely collect a particular category of information, please do not upload or place in Registry descriptions or general form fields:

• Social Security numbers;
• account passwords;
• full bank-account numbers;
• full payment-card numbers;
• government identification documents;
• medical records;
• authentication secrets;
• private cryptographic keys; or
• other highly sensitive information not reasonably requested by LBR.

If future verification or secure-storage features require sensitive information, LBR may use specialized workflows or third-party providers and provide appropriate additional disclosures.

We may collect information:

• directly from you;
• from another adult authorized to provide family information;
• when you create or interact with a Registry;
• when you submit a form or application;
• when you use an LBR link, QR code, invitation, or campaign;
• through authentication and platform operation;
• from an LBR Affiliate or Agent in connection with a referral or Service Request;
• from scheduling, email, payment, hosting, or infrastructure providers;
• from professional-service providers where appropriate;
• through first-party cookies and technical logs; and
• where legally permitted, through other sources necessary to detect fraud, verify information, or operate the service.

We may use personal information to:

• create and administer accounts;
• create and operate Registries;
• provide the Family Legacy Blueprint;
• publish information intentionally designated for public Registry display;
• keep private information private;
• process Registry interactions;
• facilitate third-party gift destinations;
• record giver acknowledgments;
• provide Service Requests;
• match users with eligible professionals;
• administer Affiliate and Agent programs;
• manage professional eligibility;
• process subscriptions;
• calculate or administer eligible referral compensation;
• maintain referral attribution;
• deliver requested communications;
• send transactional or relationship communications;
• honor marketing preferences;
• authenticate users;
• verify accounts;
• prevent fraud and abuse;
• investigate disputes;
• enforce agreements;
• maintain security;
• troubleshoot and improve the service;
• comply with law;
• protect users and Universolutions; and
• establish, exercise, or defend legal rights.

A Registry Owner may intentionally make certain information available through a public or shared Registry.

Depending on the Registry configuration, this might include:

• Registry title;
• child or family name;
• photograph;
• family story;
• Registry Goal;
• goal description;
• intended-use category;
• progress information where enabled; and
• contribution destinations intentionally selected for sharing.

A Registry Owner should not publish information they do not want others to see.

The following categories are not intended to become publicly visible merely because a Registry is public:

• account credentials;
• password information;
• authentication information;
• private Blueprint answers;
• guardian-planning details not intentionally published;
• beneficiary information;
• private financial information;
• security information;
• identity-verification information;
• private administrative notes;
• Agent compliance information;
• private Service Request details; and
• other information designated private by platform permissions.

Access to private information is governed by platform authorization and database security controls.

We may disclose personal information as reasonably necessary to the following categories of recipients.

A. Service Providers

We use service providers to help operate LBR.

Current active service-provider categories include:

• cloud hosting and deployment;
• database and authentication infrastructure;
• payment and subscription processing;
• email delivery;
• scheduling; and
• related technical infrastructure.

These providers receive information appropriate to the services they perform.

B. Professionals and Service Request Recipients

If you request a professional connection, we may provide information reasonably necessary for the assigned or selected professional to contact you and respond to your request.

C. Affiliates and Agents

Information may be shared with an Affiliate or Agent where necessary to:

• maintain referral attribution;
• administer an LBR relationship;
• respond to a Service Request;
• operate Partner functionality; or
• calculate eligible compensation.

LBR does not authorize Partners to freely sell or independently monetize LBR family information.

D. Payment and Registry Providers

When you choose an external Registry, payment, crowdfunding, retail, banking, or contribution destination, information may be sent to or collected by that third party.

That provider’s privacy policy applies to its processing.

E. Legal, Safety, and Compliance Disclosures

We may disclose information where reasonably necessary to:

• comply with law or lawful process;
• respond to a court order;
• cooperate with regulators;
• investigate suspected fraud;
• protect account security;
• prevent unlawful activity;
• enforce contractual rights;
• protect users or the public;
• address insurance or professional compliance matters; or
• establish, exercise, or defend legal claims.

F. Business Transactions

If Universolutions or LBR participates in a merger, financing, acquisition, restructuring, sale of assets, or similar transaction, personal information may be disclosed subject to appropriate confidentiality and applicable law.

As of September 4, 2026, no third-party advertising measurement provider is configured or active on the public LBR website.

In particular:

• Meta Pixel is not currently active;
• Meta Conversions API is not currently active;
• Google gtag advertising/measurement is not currently active; and
• Google Enhanced Conversions is not currently active.

LBR currently uses a first-party consent mechanism.

Technical capability for future advertising or measurement integrations may exist in the application without the integration being active.

If LBR activates advertising or measurement technologies in the future, we may update this Privacy Policy and applicable consent controls before or when those technologies become active.

LBR may use first-party cookies or similar technologies necessary for:

• authentication;
• security;
• sessions;
• user preferences;
• consent choices;
• referral attribution; and
• basic platform operation.

Where legally required, optional advertising or analytics technologies will be subject to applicable consent choices.

You may be able to control certain technologies through browser settings or LBR consent controls.

LBR may maintain first-party attribution information to identify how a visitor or family reached the platform, including through:

• Partner referrals;
• QR codes;
• campaign links;
• invitations; or
• direct visits.

Referral attribution and advertising consent are separate concepts.

A person may be attributed to a referral without that attribution constituting consent to optional advertising tracking or marketing communications.

LBR may send transactional or relationship communications necessary to provide or administer requested services.

These may include:

• email verification;
• security notices;
• account notices;
• Registry activity;
• invitations;
• Service Request communications;
• application status;
• scheduling information;
• billing notices; and
• legal notices.

These communications are distinct from optional marketing.

Where LBR sends marketing communications, consent and preference controls are maintained separately where applicable.

You may unsubscribe from eligible marketing email through the unsubscribe mechanism provided or applicable account preferences.

Unsubscribing from marketing does not necessarily stop service messages required to administer an account or requested transaction.

We may process information for account verification, fraud prevention, risk detection, payment-ownership checks, investigation, security, and abuse prevention.

Future verification services may involve specialized third-party providers.

If LBR later introduces a Verified Family or identity-verification program, additional disclosures may be provided.

Verification does not guarantee that another user, Registry, identity, family story, transaction, financial need, or intended use is authentic or risk-free.

We use reasonable administrative, technical, and organizational safeguards appropriate to our services and the nature of information processed.

Measures may include:

• authentication;
• role-based authorization;
• database access controls;
• restricted administrative functionality;
• encrypted network transmission;
• security logging;
• verification controls;
• access-management practices; and
• vendor security controls.

No information system can guarantee absolute security.

You are responsible for protecting your credentials and promptly reporting suspected unauthorized access.

We seek to collect and retain information reasonably related to operating LBR and providing requested services.

Users should not provide highly sensitive information unless the platform specifically requests it for an appropriate secured purpose.

We retain personal information for periods reasonably necessary to:

• provide services;
• administer accounts;
• maintain Registries;
• preserve agreement and consent evidence;
• administer billing and compensation;
• meet legal, tax, accounting, insurance, regulatory, or contractual requirements;
• prevent fraud;
• resolve disputes;
• maintain security; and
• establish or defend legal rights.

Different categories may have different retention periods.

Information may be deleted, de-identified, or aggregated when no longer reasonably necessary, subject to legitimate retention requirements.

Legal acceptance, transaction, fraud-prevention, compliance, and audit records may need to be retained after an account closes.

Users may request account closure or deletion where available by contacting:

support@legacybabyregistry.com

Account deletion does not necessarily require deletion of every record.

We may retain information when reasonably necessary or legally required for:

• financial records;
• agreement evidence;
• fraud prevention;
• security;
• dispute resolution;
• compensation accounting;
• regulatory requirements;
• enforcement of rights; or
• other legitimate obligations.

Depending on your jurisdiction and applicable law, you may have rights concerning personal information, which may include rights to:

• request access;
• request correction;
• request deletion;
• obtain certain information about processing;
• withdraw certain consent;
• opt out of certain marketing; or
• exercise other privacy rights provided by law.

Requests may be submitted to:

support@legacybabyregistry.com

We may need to reasonably verify the requester’s identity or authority before responding.

We will not unlawfully discriminate against a person for exercising an applicable privacy right.

If you submit personal information concerning another person, you represent that you have an appropriate legal basis, authority, or permission to provide that information for the relevant LBR purpose.

For a Registry involving a child for whom you are not the parent or legal guardian, additional certification may be required under the Client & Family Terms.

If authorization is disputed, LBR may restrict access while the matter is reviewed.

LBR is designed for adults creating and managing family planning and Registry experiences.

LBR does not permit children to independently create accounts.

If our services or practices materially change so that LBR becomes directed to children under 13 or knowingly collects personal information directly from children under circumstances governed by the Children’s Online Privacy Protection Act and Rule, LBR will implement the notices, parental-consent processes, security practices, retention practices, and other requirements that apply.

Third-party services linked from or integrated with LBR maintain their own privacy practices.

These may include:

• payment applications;
• Registry services;
• crowdfunding platforms;
• retailers;
• insurers;
• professional firms;
• scheduling services; and
• other external destinations selected by a user.

LBR is not responsible for a third party’s independent privacy practices.

Review the third party’s policy before providing information directly to that provider.

LBR is operated from the United States.

If you access LBR from another country, your information may be processed in the United States or other locations in which our service providers operate, subject to applicable law.

LBR does not describe inactive advertising integrations as current processing.

As of the effective date of this Policy, third-party advertising measurement integrations identified in Section 10 are not active.

If LBR later engages in activity that constitutes a “sale,” “sharing,” “targeted advertising,” or similar regulated activity under an applicable privacy law, we will implement disclosures and opt-out mechanisms required by that law.

We may update this Privacy Policy as LBR evolves.

The current version will identify its effective date and last-updated date.

For material changes, we may provide additional notice through the website, account interface, email, or another appropriate method.

Where affirmative re-acceptance or consent is legally required, we may request it separately.

Historical policy versions may be retained for audit and compliance purposes.

Questions, privacy requests, or concerns may be directed to:

Universolutions Inc.

151 Lakeview Dr. #206

Weston, FL 33326

United States

support@legacybabyregistry.com