Privacy Policy

Effective 29 March 2026

1. Who controls your data

LaunchHQ is the data controller for personal data collected through this platform. We are based in the United Kingdom and process data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

To exercise any of your rights or ask questions about how we handle your data, contact us at support@launchhq.co.uk.

2. What data we collect

We collect the following data when you use LaunchHQ:

  • Account data: your email address, password (stored encrypted — we cannot see it), and the date you agreed to our terms
  • Profile data: your name if you choose to provide it
  • Payment data: billing information is handled directly by Stripe — we only store a reference ID, not your card details
  • Usage data: which tools you use, pages you visit, and when — used to improve the platform
  • Technical data: your IP address, browser type, and device type, collected automatically when you use the platform

3. Why we collect it and our legal basis

PurposeLegal basis (UK GDPR)
Creating and managing your accountContract (Art. 6(1)(b))
Processing payments and subscriptionsContract (Art. 6(1)(b))
Sending account and security emails (e.g. confirm email, reset password)Contract (Art. 6(1)(b))
Improving the platform and fixing issuesLegitimate interests (Art. 6(1)(f))
Complying with legal obligations (e.g. VAT records)Legal obligation (Art. 6(1)(c))
Sending optional product updates and tips (if you opt in)Consent (Art. 6(1)(a))

4. Who we share your data with

We only share your data with third parties where necessary to run the platform:

  • Supabase — our database and authentication provider. Data is stored in the EU.
  • Stripe — our payment processor. They are PCI-DSS compliant.
  • Anthropic — powers AI features within the platform. Only the data needed for a specific AI request is sent.
  • Ionos — our email provider, used to send transactional emails.

We do not sell your personal data to anyone, ever.

5. International data transfers

Some of our service providers are based outside the UK or EEA. Where this is the case, we ensure appropriate safeguards are in place — such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses — to protect your data.

6. How long we keep your data

  • Account data: kept for as long as your account is active, plus up to 90 days after deletion
  • Payment records: kept for 7 years to comply with HMRC requirements
  • Usage and technical data: kept for up to 12 months

7. Your rights

Under UK GDPR, you have the right to:

  • Access — ask for a copy of the personal data we hold about you
  • Correction — ask us to fix inaccurate or incomplete data
  • Erasure — ask us to delete your data (“right to be forgotten”), subject to legal obligations
  • Portability — receive your data in a machine-readable format
  • Object — object to processing based on legitimate interests
  • Restrict processing — ask us to pause how we use your data in certain circumstances
  • Withdraw consent — where we rely on consent, you can withdraw it at any time

To exercise any of these rights, email support@launchhq.co.uk. We will respond within 30 days.

If you are not happy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use cookies to keep you logged in and to understand how the platform is used. We use only essential cookies and analytics cookies. We do not use advertising cookies. You can control cookies through your browser settings, but disabling essential cookies will prevent you from logging in.

9. Security

We take security seriously. Your password is stored using industry-standard encryption. All data is transmitted over HTTPS. We regularly review our security practices. However, no system is completely secure — if you believe your account has been compromised, contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on the platform. The effective date at the top of this page shows when it was last updated.