LEGAL

PRIVACY POLICY

Last updated: March 2026

1. OVERVIEW

Launchabl ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data. By using the Platform, you agree to the practices described here.

2. DATA WE COLLECT

A. When you browse (no account required):

  • — Anonymous usage data (pages visited, interactions) via standard server logs
  • — No personally identifiable information is collected from anonymous visitors

B. When you sign in with Google:

  • — Your name and email address (provided by Google)
  • — Your Google profile avatar URL
  • — Account creation date and last sign-in timestamp

C. When you interact with the Platform:

  • — Projects you like or save (stored against your user ID)
  • — Projects you submit (URL, name, description, category, tags)

3. HOW WE USE YOUR DATA

We use collected data to:

  • — Provide and operate the Platform
  • — Display your saved and liked projects in your profile
  • — Process and review project submissions
  • — Identify and attribute submissions to your account
  • — Maintain platform security and prevent abuse
  • — Improve the quality of project curation

We do not sell your personal data. We do not use your data for advertising or share it with third-party marketing services.

4. GOOGLE SIGN-IN

We use Google OAuth for authentication, powered by Supabase. When you sign in with Google:

  • — Google handles password management — we never see or store your Google password
  • — We only receive the basic profile information you authorise (name, email, avatar)
  • — You can revoke our access at any time via your Google account settings

5. DATA STORAGE & SECURITY

Your data is stored securely in Supabase (PostgreSQL), hosted on infrastructure in the EU or US depending on your region. We use Row Level Security (RLS) to ensure users can only access their own data. All connections are encrypted via HTTPS/TLS.

6. THIRD-PARTY SERVICES

We use the following third-party services:

  • — Supabase — database, authentication, and infrastructure
  • — Google OAuth — sign-in authentication
  • — OpenAI — AI-powered project enrichment (project URLs are sent to OpenAI for description generation; no user data is sent)
  • — Vercel — hosting and deployment

Each of these services has its own privacy policy. We encourage you to review them.

7. COOKIES

We use only essential cookies required to operate the Platform — specifically, an authentication session cookie to keep you signed in. We do not use tracking, advertising, or analytics cookies.

8. DATA RETENTION

We retain your account data for as long as your account is active. If you delete your account, your personal data (name, email, avatar, likes, saves) is deleted from our systems within 30 days. Submitted projects that have been published may remain on the Platform in anonymised form.

9. YOUR RIGHTS

You have the right to:

  • — Access the personal data we hold about you
  • — Request correction of inaccurate data
  • — Request deletion of your account and associated data
  • — Withdraw consent for data processing at any time
  • — Object to processing of your personal data

To exercise any of these rights, please contact us via the submission form on the Platform. We will respond within 30 days.

10. CHILDREN'S PRIVACY

The Platform is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The date at the top of this page reflects when it was last revised. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

12. CONTACT

For any privacy-related questions or requests, please contact us via the submission form on the Platform.