Terms of Service

1. Acceptance of These Terms

These Terms of Service (the “Terms”) constitute a legally binding agreement between you (“you,” “your,” or “User”) and LEGITLY and its affiliates (“LEGITLY,” “we,” “us,” or “our”) governing your access to and use of the legitly.com websites, subdomains, mobile and web applications, holographic authentication labels, verification codes, application programming interfaces, and all related products and services (collectively, the “Services”).

By accessing or using the Services, creating an account, clicking “I agree,” or otherwise indicating acceptance, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, our Anti-Counterfeit Agreement, and our Indemnification Agreement, each of which is incorporated by reference. If you do not agree, you must not access or use the Services.

If you use the Services on behalf of an organization, you represent and warrant that you have authority to bind that organization, and “you” refers to that organization.

2. Definitions

• “Authentication Code” means a unique identifier, QR code, scratch-off code, or other credential issued or generated through the Services for the purpose of verifying the authenticity of a product or item.
• “Holographic Label” means a physical security label, sticker, seal, or tag supplied by LEGITLY that incorporates an Authentication Code and tamper-evident features.
• “Brand Customer” means a business User that registers a product catalog and uses the Services to authenticate its goods.
• “End User” means any person who scans, enters, or otherwise uses an Authentication Code to verify a product.
• “Content” means any text, images, logos, data, files, or other materials made available through the Services.

3. Description of the Services

LEGITLY provides a brand-protection and product-authentication platform. The Services may include the issuance of Authentication Codes and Holographic Labels, scan-based verification (including single-scan technology designed so that a given code registers as used after its first valid scan), dashboards, certificates of authenticity, reporting, and related tools.

Label rolls and denominations. Holographic Labels are supplied in physical rolls, currently offered in two denominations: rolls of 500 labels (volume-tiered pricing) and rolls of 100 labels (a flat-priced starter denomination). An order may combine denominations, and each roll denomination may be produced and delivered as a separate production run. Each roll carries a roll-level activation code on its exterior; rolls and their Authentication Codes remain inactive until the purchasing Brand Customer activates (claims) the roll to its account and the claim is approved, and unactivated or unassigned labels will not verify.

Multi-scan (“infinite scan”) code type. By default, Authentication Codes use single-scan technology. A Brand Customer may elect, for a given product, a multi-scan code type under which a code continues to return a verification result after its first scan. This election requires an express in-product affirmation (typing “I agree”), and the Brand Customer acknowledges that multi-scan codes do not provide the copy-detection protection of single-scan technology and can be duplicated onto unauthorized goods without triggering a “previously verified” result. LEGITLY monitors scan activity on multi-scan products, may contact the Brand Customer to confirm the election, and may flag, suspend, convert, or deactivate multi-scan codes or products where we reasonably suspect misuse, abuse, or facilitation of counterfeiting. If a Brand Customer later converts a multi-scan product back to single-scan technology, codes that were scanned while the product was in multi-scan mode remain recorded as scanned, and single-scan copy-detection protection is not retroactively restored for those codes; conversion applies prospectively to unscanned codes only.

Scan location data and Activity Map. When an End User scans an Authentication Code, the Services automatically derive an approximate scan location from network information (such as IP address). If — and only if — the End User expressly grants permission through their device or browser prompt, the Services may also record the precise (GPS-level) location of that scan; declining precise location does not affect the verification result. Scan data, including timestamps, scan counts, approximate and (where granted) precise locations, is made available to the relevant Brand Customer through dashboards and an activity map, together with related tools such as filtering, trust indicators, exports, and mapping or turn-by-turn direction links. Location data is inherently imprecise, may be inaccurate, incomplete, or spoofed, and may correspond to private locations such as an End User’s residence; it is provided “as is” for anti-counterfeiting purposes only. Brand Customers may use scan and location data solely for product authentication, counterfeit detection and investigation, supply-chain and distribution analysis, and directly related internal business purposes, in compliance with applicable privacy and data-protection laws; Brand Customers are solely responsible for their handling of any scan or location data they view, export, or download, and must not use such data to identify, locate, contact, surveil, harass, or intimidate any individual, or for any purpose unrelated to brand protection.

Verification results are provided for informational purposes to assist in assessing authenticity and are based on the data registered with us and the integrity of the physical label. A verification result is not a guarantee, warranty, certification, appraisal, or legal determination of authenticity, ownership, quality, safety, or fitness of any product. We reserve the right to add, modify, suspend, or discontinue any feature of the Services at any time.

Automated assistant. The Services may include an automated chat assistant powered by artificial intelligence. Its responses are generated automatically, may be incomplete or inaccurate, do not constitute legal, financial, or professional advice, and do not create any commitment, representation, or warranty by LEGITLY. For binding information, contact us directly.

Voice transcripts and tool outputs. Certain tools (such as Voice) generate transcripts, certificates, or other outputs from content you supply. These outputs are produced by automated processing, may contain errors, and are records of processing only — they are not certified, notarized, or sworn documents, and LEGITLY does not attest to the accuracy of their contents or their admissibility for any legal, judicial, or official purpose. You are responsible for verifying any output before relying on it.

White-label subdomains. A Brand Customer may be issued a branded subdomain (e.g., yourbrand.legitly.com) on which its verification pages are presented under its own branding. The Brand Customer is solely responsible for all names, logos, images, product information, and other content displayed on or through its subdomain, and represents that it holds all necessary rights to that content. Subdomains remain part of the Services, are licensed — not sold — for the duration of the applicable subscription, may be reclaimed on termination or non-payment, and may be suspended or removed if used in violation of these Terms or the Anti-Counterfeit Agreement.

4. LEGITLY AI (SCOUT, SAGE, and SUPER)

The Services include LEGITLY AI, an optional conversational artificial-intelligence tool offered both at ai.legitly.com and within Brand Customer dashboards. LEGITLY AI is presented under service tiers of increasing capability — LEGITLY SCOUT (a fast, everyday tier), LEGITLY SAGE (a deeper-reasoning tier), and LEGITLY SUPER (a premium, frontier-reasoning tier) — and is made available in free and paid tiers as described below. LEGITLY may introduce additional tiers over time, including a future LEGITLY SUPER+ tier that may operate on a proprietary model owned or hosted by LEGITLY. This Section applies in addition to the “Automated assistant” provisions of Section 3 and, in the event of a conflict regarding LEGITLY AI, controls.

How LEGITLY AI works; third-party models. LEGITLY AI combines third-party artificial-intelligence language models — currently provided by Anthropic, PBC, which acts as a sub-processor — with LEGITLY’s proprietary verification data, anti-counterfeiting intelligence, and domain knowledge. When you use LEGITLY AI, the text and other content you submit may be transmitted to and processed by such third-party providers to generate a response, subject to their applicable terms and usage policies. In their current form, LEGITLY AI’s tiers are augmented by LEGITLY data and expertise but are not separately trained or independently owned language models; the designations “SCOUT,” “SAGE,” and “SUPER” denote LEGITLY service tiers and configurations layered over third-party models, not distinct proprietary models. If and when LEGITLY offers a tier that operates on its own trained or hosted model (such as a future “SUPER+” tier), LEGITLY will update these Terms to reflect that. We may change the underlying providers, models, or tier configurations at any time.

No reliance; not a verification result. Responses from LEGITLY AI are generated automatically and may be inaccurate, incomplete, outdated, or misleading. They do not constitute legal, financial, regulatory, professional, safety, or authentication advice, and they do not create any commitment, representation, guarantee, or warranty by LEGITLY. You should independently verify any information before relying on it, and you are solely responsible for decisions you make based on LEGITLY AI. Any statement by LEGITLY AI regarding a product, code, or brand is informational only and is not an authentication or verification result; authenticity is determined only by a valid scan of an Authentication Code as described in Section 3 and the Authentication Disclaimer.

Free and paid access; plans, allowances, and usage-based charges. LEGITLY AI is offered in tiers with usage limits that we may set and change at our discretion. Unregistered (anonymous) use is limited to a set number of messages; a free registered account (“LEGITLY FREE”) raises that limit to a set number of messages per calendar month; and paid subscription plans — currently offered under the names LEGITLY SCOUT, LEGITLY SAGE, and LEGITLY SUPER, with monthly and discounted annual billing options — provide larger included allowances across the corresponding tiers. LEGITLY may in the future offer a LEGITLY SUPER+ plan as the highest plan in the lineup. Where a Brand Customer exceeds the allowance included in its plan, additional usage may be charged on a pay-as-you-go basis at the per-message or per-use rates then displayed in the Services, and such charges may be deducted from the Brand Customer’s stored account balance (including gift-card or wallet credit) or charged to a payment method on file. Current tiers, allowances, features, per-use rates, and prices are those displayed in the Services and are subject to change. We meter usage to enforce these limits, and you must not circumvent, evade, or artificially inflate usage allowances (for example, by clearing identifiers, using multiple accounts, or automated access). We may throttle, gate, suspend, or terminate access to LEGITLY AI, in whole or in part, to enforce limits, prevent abuse, or protect the Services. Fees for LEGITLY AI are otherwise governed by Section 7 (Fees, Billing, Renewal, and Refunds).

Your inputs and generated outputs. You retain such rights as you hold in the prompts, questions, and other content you submit to LEGITLY AI (“AI Inputs”), and you grant LEGITLY the license described in Section 9 to process AI Inputs to operate, secure, and improve the Services, subject to the data commitments below. As between you and LEGITLY, and subject to the terms of the third-party providers and applicable law, LEGITLY does not claim ownership of the responses generated for you (“AI Outputs”); however, AI Outputs are provided “as is,” may not be unique, and similar or identical outputs may be generated for other users. You are solely responsible for your use of AI Outputs and for ensuring that your AI Inputs and your use of AI Outputs comply with these Terms and applicable law. You must not submit AI Inputs that are unlawful, infringing, or that contain another party’s confidential information or personal data that you do not have the right to provide.

Data use, de-identification, and Brand isolation. To operate and improve LEGITLY AI and our anti-counterfeiting intelligence, LEGITLY may use aggregated and de-identified data derived from the Services, such as scan patterns, counterfeit indicators, and anonymized interaction data. LEGITLY does not use identifiable End-User personal information — such as precise (GPS) location or unhashed network identifiers — to train or tune any model, and personal identifiers are removed, hashed, or aggregated before any such use. The public LEGITLY AI tool responds only from general, public, or de-identified LEGITLY knowledge and does not expose any Brand Customer’s confidential data. Brand-specific intelligence is available only within a Brand Customer’s authenticated dashboard and is logically partitioned so that one Brand Customer cannot, through LEGITLY AI, access another Brand Customer’s confidential or End-User data. Our processing of personal information in connection with LEGITLY AI is further described in, and governed by, our Privacy Policy and Section 15 (Data Processing and Sub-processors).

Prohibited uses of LEGITLY AI. In addition to Section 6, you must not use LEGITLY AI to: (a) generate or disseminate unlawful, infringing, deceptive, harassing, or harmful content; (b) reverse engineer, extract, or attempt to derive the underlying models, system prompts, weights, or any other Brand Customer’s data; (c) develop, train, or improve a competing artificial-intelligence model, product, or dataset; (d) circumvent or disable usage limits, safety systems, or access controls; or (e) submit malware, injection attacks, or content designed to cause the tool to exfiltrate data or behave contrary to its intended operation. The acceptable-use policies of the underlying third-party providers also apply to your use of LEGITLY AI.

Optional; changes and availability. LEGITLY AI is an optional convenience feature provided “as is” and “as available.” We may add to, modify, limit, suspend, or discontinue LEGITLY AI, the SCOUT, SAGE, or SUPER tiers (or any future tier), or any underlying provider or model at any time and without liability. We will make commercially reasonable efforts to maintain the tiers we offer but do not guarantee the availability of any specific provider, model, tier, or feature.

5. Eligibility and Account Registration

You must be at least 18 years old and capable of forming a binding contract to use the Services. By registering, you agree to provide accurate, current, and complete information and to keep it updated. We may refuse, suspend, or terminate any account at our discretion.

You are responsible for maintaining the confidentiality of your account credentials and for all activity occurring under your account. You agree to notify us immediately at info@legitly.com of any unauthorized access or suspected breach. We are not liable for any loss arising from unauthorized use of your account.

6. Acceptable Use and Prohibited Conduct

You agree not to, and not to permit any third party to:

• copy, reproduce, counterfeit, simulate, forge, clone, or re-encode any Authentication Code or Holographic Label, or create any product, label, or page intended to imitate the Services or a verification result;
• tamper with, remove, transfer, reuse, or interfere with any Holographic Label or the single-scan functionality;
• reverse engineer, decompile, disassemble, scrape, or attempt to derive source code, algorithms, or trade secrets from the Services, except to the extent such restriction is prohibited by applicable law;
• access the Services through automated means, circumvent rate limits, security, or authentication, or probe or test the vulnerability of any system;
• upload or transmit malware, or use the Services to infringe intellectual property, defame, harass, or violate any law or third-party right;
• resell, sublicense, or commercially exploit the Services except as expressly permitted in a written agreement with us;
• use scan or location data made available through the Services (including the activity map, exports, or direction links) to stalk, surveil, harass, threaten, or physically locate any individual, or for marketing, profiling, or any purpose unrelated to product authentication and brand protection; or
• misrepresent your identity or affiliation, or use the Services to deceive End Users.

Violation of this Section is a material breach and may result in immediate suspension or termination, forfeiture of fees, and referral to law enforcement, in addition to all remedies in our Anti-Counterfeit Agreement.

7. Fees, Billing, Renewal, and Refunds

Certain Services are offered on a paid or subscription basis. You agree to pay all applicable fees, taxes, and charges in accordance with the pricing and billing terms presented at purchase. Unless stated otherwise, subscriptions automatically renew for successive periods of the same length at the then-current rate until you cancel, and you authorize us (and our payment processors) to charge your payment method on each renewal. Auto-renewal disclosure: the term length, renewal frequency, and renewal price are presented to you clearly and conspicuously before you purchase, and enrollment in automatic renewal requires your affirmative consent at checkout. Before a renewal, where required by law, we will send a reminder to the email on your account.

Free trials. Certain Services include a free trial — for example, a 30-day trial of a hosting plan included with a label purchase. At checkout you select the plan that will apply after the trial, and the plan’s price and first billing date are disclosed before you complete your purchase. Unless you cancel before the trial ends, the payment method on file will be charged automatically for the selected plan when the trial period expires, and the plan then renews as described above. You may cancel at any time before the trial ends to avoid being charged.

Gift cards and account credit. Gift cards and promotional or account credits issued by LEGITLY are redeemable only for the Services, are not cash and have no cash value, cannot be resold or transferred for value, are not redeemable for cash except where required by law, do not expire except as permitted by law, and are void where prohibited. Lost or stolen card codes will not be replaced except as required by law, and we may suspend or cancel credits obtained fraudulently.

You may cancel automatic renewal at any time through your account dashboard—using the same method you used to enroll, without having to call or write to us—or by emailing info@legitly.com; cancellation takes effect at the end of the current billing period. We provide a simple online mechanism to cancel in accordance with the California Automatic Renewal Law and similar laws. Except where required by law, all fees are non-refundable and are not prorated upon cancellation, downgrade, or termination. We may change fees prospectively upon notice. Failure to pay may result in suspension or termination. Physical goods (such as Holographic Labels) are subject to our Returns & Refund Policy and any separately stated sales and shipping terms. Label pricing is presented at purchase by denomination: 500-label rolls are volume-tiered, and 100-label starter rolls are flat-priced per roll with no volume discount; mixed-denomination orders are charged as the sum of each denomination's price.

8. Intellectual Property Rights

The Services, including all software, designs, holographic and label technology, Authentication Code systems, single-scan methodology, text, graphics, the “LEGITLY” name and logo, and all related intellectual property, are owned by LEGITLY or its licensors and are protected by United States and international copyright, trademark, patent, trade secret, and other laws. All rights not expressly granted are reserved.

Subject to these Terms and your payment of applicable fees, we grant you a limited, revocable, non-exclusive, non-transferable, non-sublicensable license to access and use the Services solely for your internal business or personal authentication purposes. This license does not permit you to replicate, manufacture, or generate Authentication Codes or Holographic Labels outside of the Services. You may not use our trademarks without our prior written consent.

9. Your Content and Brand Materials

You retain ownership of Content you submit (including product data, logos, and brand assets). You grant LEGITLY a worldwide, non-exclusive, royalty-free license to host, store, reproduce, display, and process your Content as necessary to operate, provide, secure, and improve the Services, and to generate Authentication Codes, labels, and certificates on your behalf.

You represent and warrant that you own or have all rights necessary to grant this license and that your Content does not infringe or violate any third-party right or applicable law. You are solely responsible for your Content and for ensuring you have the right to authenticate the products you register.

10. Digital Millennium Copyright Act (DMCA) Policy

LEGITLY respects intellectual property rights and responds to clear notices of alleged copyright infringement. If you believe content available through the Services infringes a copyright you own or control, please send a written notice to our designated agent that includes: (a) your physical or electronic signature; (b) identification of the copyrighted work claimed to be infringed; (c) identification of the material claimed to be infringing and information reasonably sufficient to locate it; (d) your contact information; (e) a statement that you have a good-faith belief the use is not authorized by the copyright owner, its agent, or the law; and (f) a statement, under penalty of perjury, that the information in your notice is accurate and that you are the owner or are authorized to act on the owner’s behalf.

Designated Copyright Agent: LEGITLY.COM L.L.C., Attn: Copyright Agent, 3921 E. Livingston Drive #2, Long Beach, California 90803, United States · Email: info@legitly.com.

If you believe your material was removed or disabled by mistake or misidentification, you may submit a counter-notice to the same agent containing the information required by 17 U.S.C. § 512(g). In appropriate circumstances we will terminate the accounts of users who are repeat infringers.

11. Authentication Disclaimer

12. Third-Party Services and Links

The Services may integrate with or link to third-party products, payment processors, websites, or content that we do not control. We provide these for convenience only and are not responsible for, and do not endorse, any third-party services, and your use of them is governed by their own terms and policies.

13. Privacy

Our collection and use of personal information in connection with the Services is described in our Privacy Policy. By using the Services, you consent to our data practices as described there.

14. Electronic Communications, Calls, and Text Messages

Electronic communications and e-signatures. By using the Services, you consent to receive communications from us electronically—including agreements, notices, disclosures, and other records—by email, by posting within the Services, or by other electronic means, and you agree that electronic records and signatures have the same legal effect as handwritten signatures and paper records to the fullest extent permitted by law. You may withdraw this consent by closing your account, though doing so may prevent continued use of the Services.

Calls and monitoring. We and our service providers may place and receive calls in connection with your account, support, and the Services. Calls to or from LEGITLY may be monitored or recorded for quality, training, security, and recordkeeping. Because California is a two-party-consent state, you will be notified before a call is recorded, and by continuing the call after that notice you consent to the recording. If you do not consent, please do not continue the call and instead contact us in writing at info@legitly.com.

Text-message (SMS) program. If you provide your mobile number and opt in, you agree that LEGITLY and its messaging providers may send you recurring service and account-related text messages (such as verifications, alerts, appointment confirmations, and support replies) and, where you separately consent, promotional messages. Consent to receive texts is not a condition of any purchase. Message frequency varies. Message and data rates may apply. Reply STOP to cancel or HELP for help. Carriers are not liable for delayed or undelivered messages. We process your number as described in our Privacy Policy, and we do not share mobile opt-in or consent data with third parties for their own marketing.

15. Data Processing and Sub-processors

Depending on the data and your relationship with us, LEGITLY may act as a controller (for example, for our own account, billing, and site-analytics data) or as a processor / service provider on behalf of a Brand Customer (for example, for End-User verification data the Brand Customer controls). Where we act as a processor or service provider, we process personal information only on the Brand Customer’s documented instructions and do not “sell” or “share” it.

For Brand Customers who require one, a Data Processing Addendum (DPA) is available on request and, once executed, forms part of these Terms. We use vetted sub-processors to provide the Services—including cloud hosting, payment processing, telephony and SMS, AI-assisted call handling, AI language-model processing (such as Anthropic, PBC, for LEGITLY AI), and transactional email—each bound by contractual data-protection obligations. A current list of sub-processors is available on request.

16. Term, Suspension, and Termination

These Terms remain in effect while you use the Services. We may suspend or terminate your access at any time, with or without notice, for any reason, including suspected violation of these Terms or the Anti-Counterfeit Agreement, non-payment, or risk to the Services or others.

Upon termination, your license ends and you must cease using the Services. Sections that by their nature should survive (including intellectual property, disclaimers, limitation of liability, indemnification, dispute resolution, and governing law) will survive termination. We may retain and use data as permitted by the Privacy Policy and applicable law.

17. Disclaimer of Warranties

18. Limitation of Liability

19. Indemnification

You agree to defend, indemnify, and hold harmless LEGITLY and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to: (a) your use or misuse of the Services; (b) your Content or the products you authenticate; (c) your violation of these Terms, the Anti-Counterfeit Agreement, or any law or third-party right; or (d) any dispute between you and an End User or other third party. We may assume the exclusive defense of any matter subject to indemnification, in which case you agree to cooperate.

20. Dispute Resolution, Arbitration, and Class Action Waiver

Please read this Section carefully—it affects your legal rights. Except for claims for injunctive or equitable relief or claims regarding intellectual property or counterfeiting, any dispute, claim, or controversy arising out of or relating to these Terms or the Services will be resolved by final and binding arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules, conducted in Los Angeles County, California (or by remote means), before a single arbitrator.

Small-claims and injunctive relief. Either party may bring an individual claim in a small-claims court of competent jurisdiction instead of arbitration, and either party may seek injunctive or equitable relief in court to protect intellectual property or to stop counterfeiting or unauthorized use of the Services.

Your right to opt out of arbitration. You may opt out of this arbitration agreement within thirty (30) days of first accepting these Terms by emailing written notice with your name and account email to info@legitly.com using the subject line “Arbitration Opt-Out.” Opting out will not affect any other part of these Terms.

21. Governing Law and Venue

These Terms and any dispute arising hereunder are governed by the laws of the State of California, United States, without regard to its conflict-of-laws principles. Subject to the arbitration provisions above, you consent to the exclusive jurisdiction and venue of the state and federal courts located in Los Angeles County, California for any matter not subject to arbitration.

22. Changes to These Terms

We may revise these Terms from time to time. We will post the updated Terms with a new effective date and, where required, provide additional notice. Your continued use of the Services after changes become effective constitutes acceptance of the revised Terms. If you do not agree, you must stop using the Services.

23. Miscellaneous

These Terms, together with the Privacy Policy, Anti-Counterfeit Agreement, and Indemnification Agreement, constitute the entire agreement between you and LEGITLY regarding the Services and supersede all prior agreements. If any provision is held unenforceable, the remaining provisions remain in full force, and the unenforceable provision will be modified to the minimum extent necessary. Our failure to enforce any right is not a waiver. You may not assign these Terms without our prior written consent; we may assign them freely. Neither party is liable for delays or failures due to causes beyond its reasonable control (force majeure). Notices to you may be provided by email or through the Services. The Services are controlled from the United States, and you are responsible for compliance with applicable export and local laws.