Transparency

Why this page exists

Legamap asks you to write down where everything you own is held, and to trust that a company you have never heard of will still be standing — and still careful — on the day that map has to reach your family.

That is a large ask. Marketing cannot carry it, and in this category it should not try. What can carry it is verifiable facts and honest answers to the uncomfortable questions: who is behind this, who can read your data, what happens if we shut down, what happens if we are sold, and what happens if the people running this become unavailable. This page answers those questions. Where a promise is contractual, we say so and point to the exact section of the Terms.

1. The company

Legamap is operated by MB Kocius, a limited liability company registered in Lithuania, European Union.

• Company code 307051502 · VAT LT100018675617
• Contact: hello@legamap.com · Data protection: privacy@legamap.com

These details are public. You can check them in the Lithuanian Register of Legal Entities (registrucentras.lt) before you trust us with anything — and we would encourage exactly that.

2. How Legamap makes money

One way: you pay for the service. Activation, then a yearly fee that keeps your map editable. All prices are shown with VAT and sales tax included.

That is the entire model. No advertising, no data sale, no "free" tier funded by your information, no investors expecting the kind of growth that eventually argues with your interests. Legamap is independently owned and built to be small, profitable, and durable — not to be a rocket.

3. Who can read your data — honestly

The trust question in this category is usually answered with encryption theater. Here is the honest version:

• Legamap is not a zero-knowledge service. Our servers can decrypt your data. This is by design: on the day your map has to reach your family, your recipients will not have your key. Any service promising both zero-knowledge encryption and automatic delivery after death is describing something that cannot exist. We would rather tell you where the trust actually sits.
• Because we hold that ability, everything else is built to constrain it: sensitive fields carry per-user encryption on top of full encryption at rest and in transit; every read of customer data is logged, including our own; routine administration cannot open your access instructions; and emergency access requires a documented procedure that automatically emails you.
• The most dangerous data never enters the system at all. We refuse passwords, PINs, full account numbers, and crypto recovery phrases — the product blocks them at the field level. A stolen copy of our database would tell a thief that assets exist, not how to take them.
• Everything is stored in the EU, under GDPR, with no transfers of stored customer data outside the EU/EEA. The details live in the Privacy Policy and the Security page.

4. What you will never hear us claim

In this category, certain phrases are red flags for either dishonesty or naivety. Our standing commitment — if you ever catch one of these on this site, hold us to this page:

• "Zero-knowledge — we can't read your data" (we can; see above)
• "Military-grade encryption" (a marketing term, not an engineering one)
• "100% safe / guaranteed secure" (no honest engineer says this)
• "It's basically a will" (it is not, and confusing the two could hurt your family — see the Terms)
• "Set it and forget it — total peace of mind" (a stale map is a bad map; the product exists to keep it current)

5. If you stop paying

The promise does not end with the subscription — that is the point of the product. Your map goes read-only, and for two years from your last payment the check-ins continue and delivery still happens, free, under the conditions in the Terms (Section 10). Before that window closes, we escalate warnings and send you a final encrypted export. This is a contractual commitment, not a marketing line.

6. If we shut down

A fair question for a small company, so the answer is engineered rather than promised:

• Your map already lives outside us. After activation, after every annual review, before a guarantee expires — and whenever you ask — we generate an encrypted export and send it to you. You hold the passphrase; we never do. If Legamap vanished overnight, your latest export would already be on your side of the fence.
• If we ever wind down, the commitment in the Terms (Section 17) is: advance notice on every channel, a final encrypted export to every account, a defined period to complete any delivery already in progress, and deletion of what remains, in that order. A quiet disappearance is not on the menu.

7. If the company is sold

The delivery guarantee is written into the Terms as an obligation that transfers to any buyer of the company as a binding condition of the sale (Terms, Sections 10 and 17). Whoever owns Legamap inherits the promise with it. We publish this here so that the commitment is loud, dated, and quotable.

8. If something happens to the people running this

Legamap is operated by a deliberately small company, and honesty requires addressing the failure domain that comes with that: the people who run it are few, and any one of them can become unavailable. Three arrangements exist for it:

• a documented operations runbook, so the service does not depend on what is in any one person's head;
• a secondary administrator with legal instructions, inactive day to day, able to keep the protocol and wind-down commitments running;
• and the same export failsafe as above — the copy you hold does not care what happened to us.

9. Security, verified rather than promised

• An independent penetration test is commissioned before we accept a single payment, and critical findings are fixed before launch, not after.
• Automated dependency and security scanning runs on the codebase from the first commit.
• A full independent security audit is committed for when revenue supports it; when the date is set, it will be published on this page. Until then we make no claims about it — a promised audit that has not happened protects no one.
• The rest of the program — mandatory 2FA, encryption layers, access logging, backups with tested restores — is documented on the Security page.

10. Where things stand today

Honesty about status, dated:

• Legamap is not open yet. Until it opens, nothing is for sale — no pre-orders, no deposits, no reserved prices. The only thing you can give us today is an email address for the launch announcement.
• The service is being built now, with the protocol, security measures, and legal reviews described above scheduled before a single payment is accepted.
• This page changes as reality changes, and its version and date are always visible at the top.

11. Verify, then trust

• Company: Lithuanian Register of Legal Entities — registrucentras.lt (search MB Kocius or code 307051502)
• Contracts: Terms of Service · Privacy Policy · Refund Policy
• Technical detail: Security page
• Questions this page did not answer: hello@legamap.com — asking hard questions before trusting us is exactly the behavior this product exists to reward.