Privacy Policy

This Privacy Policy explains how Launchpadly ("we", "us") collects, uses, and protects your personal data when you use launchpadly.co. It applies to visitors and users worldwide, and includes specific disclosures for the European Economic Area (EEA), the United Kingdom (GDPR / UK GDPR), and the United States (including the California Consumer Privacy Act, as amended by the CPRA).

Who is responsible for your data

Launchpadly is the data controller for personal data processed through this site. For any privacy request or question, contact us at [email protected].

What we collect

• Account data — your email address and, optionally, name and profile details (bio, headline, location, links, avatar).
• Submission data — startup name, tagline, description, website URL, category, and optional media you upload.
• Authentication data — sign-in sessions and, if you connect them, Google or GitHub OAuth identifiers.
• Usage & device data — upvotes, page views, a randomly generated visitor identifier stored on your device, coarse device signals (timezone, language, screen size, platform), and a truncated/hashed IP address used for security and abuse prevention.
• Analytics data (consent-based) — referring website, UTM campaign parameters, and visited paths. Collected only if you opt in via our cookie banner.
• Payment data — if you purchase a paid tier, billing is handled by Stripe; we do not store full card numbers.

How and why we use it (legal bases)

• To provide the service — display your profile and listings, run authentication, process upvotes and views. Legal basis: performance of a contract.
• Security & anti-fraud — rate-limiting, upvote de-duplication, and abuse prevention using a hashed device/IP signal. Legal basis: legitimate interests.
• Transactional email — magic-link sign-in and service notifications via Resend. Legal basis: contract / legitimate interests.
• Payments — processing paid launch tiers via Stripe. Legal basis: contract.
• Analytics — understanding traffic and listing performance. Legal basis: your consent.

We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising.

Cookies & local storage

We use a small number of strictly necessary cookies and local-storage items to keep you signed in and protect against abuse. Analytics storage is optional and only used after you opt in. You can accept, reject, or change your choice at any time using the banner or the “Your privacy choices” link in the footer. Full details are in our Cookie Policy.

Third parties & processors

• Stripe — payment processing for paid launch tiers.
• Resend — transactional email delivery (magic links, notifications).
• Google / GitHub — optional OAuth sign-in, only if you choose to connect them.
• Self-hosted PostgreSQL — application data stored on our own server infrastructure.

International transfers

Our processors may handle data in the United States and other countries. Where data leaves the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and provider data processing agreements.

How long we keep it

We keep account and submission data for as long as your account is active. Analytics events are retained in aggregate. Security/rate-limit signals are short-lived. When you delete your account, we remove your personal data within 30 days, except where we must retain limited records for legal, tax, or fraud-prevention purposes.

Your rights in the EEA & UK (GDPR)

You have the right to:

• Access a copy of your personal data;
• Rectify inaccurate data;
• Erase your data ("right to be forgotten");
• Restrict or object to certain processing;
• Data portability;
• Withdraw consent at any time (e.g. for analytics) without affecting prior processing;
• Lodge a complaint with your local supervisory authority.

To exercise any right, email [email protected]. We respond within one month.

Your rights in the United States (California / CPRA)

California residents may request to know, access, correct, or delete the personal information we hold, and to not be discriminated against for exercising these rights. Because we do not sell or share personal information or use it for targeted advertising, no “Do Not Sell or Share My Personal Information” opt-out is required; however, you can still disable optional analytics via “Your privacy choices.” To make a request, email [email protected]. You may use an authorized agent, and we will verify your identity before responding.

Children

Launchpadly is not directed to children under 16, and we do not knowingly collect their personal data.

Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where required, a refreshed consent prompt.

Contact

Privacy questions or requests: [email protected] · General: [email protected]