Privacy Policy

Crown Legacy AI LLC ("Crown Legacy AI," "we," "us") operates crownlegacy.li and the associated client portal and dashboard products, providing §179D energy tax certification, R&D tax credit and cost segregation analysis, and custom AI automation builds for CPA firms and service businesses.

Information you give us directly: name, email, phone, company name, and the building/project details you submit through our free calculators, submission forms, or client portal (e.g. building type, square footage, state, HVAC and envelope specifications for §179D; research project descriptions for R&D credit assessment; project scope for custom builds).

Assessments and requests: when you take a free tool such as the AI Readiness Check, or ask for a resource or a call, we store your name, firm, work email, optional role, and your answers and score, so we can send what you asked for and follow up about it. We do not sell this information or share it with other firms.

Account and authentication data: email address and a securely hashed password (we never store or have access to your actual password), login timestamps, and session activity for security auditing.

Payment information: handled entirely by Stripe. We never see, store, or transmit your card number — Stripe's hosted Checkout collects payment details directly, and we only receive confirmation that a payment succeeded, the amount, and your billing email.

Usage and device data: standard web analytics (page views, referrer, browser type) and, on the authenticated client portal, an audit log of logins, admin actions, and data access — this exists specifically to protect your account and, for multi-user organizations, to give your organization's administrators visibility into who accessed what.

• To calculate estimated tax deductions/credits and deliver the results you requested
• To route your submission to a licensed Professional Engineer, CPA, or cost segregation specialist for review and certification
• To process payment for certification, filing, or engagement services via Stripe
• To send transactional email (submission status, certification delivery, payment receipts, password resets, account invites) — we do not send marketing email without separate consent
• To send resources you request (for example the AI Governance Kit after an AI Readiness Check) and follow up about them; every follow-up email has a working unsubscribe, and we honor opt-outs within 10 business days
• To detect fraud, abuse, and unauthorized access, including rate-limiting and audit logging described above

Application data is stored with Supabase (PostgreSQL, hosted in North America) with row-level security enforced at the database layer — meaning your organization's data is technically isolated from every other client's, not just hidden by application logic. Payment processing is handled by Stripe, Inc. Transactional email is sent via Resend. We do not sell your data to third parties, and we do not share it with anyone outside the specific reviewer (PE, CPA, or specialist) assigned to your submission and our own team.

We use a single first-party session cookie to keep you signed in to the dashboard or client portal. It is httpOnly (inaccessible to page scripts) and cannot be read by third parties. We do not use third-party advertising or tracking cookies.

We retain submission and engagement data for as long as your account is active and for a reasonable period afterward to comply with tax documentation and audit-defensibility requirements typical of this industry. Audit log entries are retained permanently and are immutable by design — including from us — as a compliance control, not a convenience.

You may request a copy of the data we hold about you, request correction of inaccurate data, or request deletion of your account and associated data (subject to the tax-documentation retention noted above). Contact us at contact@crownlegacy.li to make a request.

We'll update the effective date above when this policy changes materially, and for account holders we'll note significant changes via email.

Questions about this policy or your data: contact@crownlegacy.li