Privacy Policy

Overview

GetLaunchDay (“we,” “us,” or “the Company”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, and safeguard your personal information when you use our website at getlaunchday.com and our related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information you provide

• Account information: name, email address, and password when you sign up.
• Profile data: company name, role, and billing address if you upgrade to a paid plan.
• Content: landing pages, email copy, waitlist entries, survey responses, and other content you create using the Service.
• Payment information: credit card details are collected and processed by our payment processor (Stripe). We do not store card numbers on our servers.
• Communications: messages you send to us via email, chat, or support tickets.

Information we collect automatically

• Usage data: pages visited, features used, button clicks, session duration, and other interaction data.
• Device information: browser type, operating system, screen resolution, and device identifiers.
• IP address: used for approximate geolocation, security, and fraud prevention.
• Cookies and similar technologies: see our Cookie section below.

Information from third parties

• OAuth providers: if you sign in with Google or GitHub, we receive your name, email, and profile picture.
• Analytics partners: aggregated, anonymized data from analytics tools.

How We Use Your Information

• Provide, maintain, and improve the Service.
• Process transactions and send billing notifications.
• Send product updates, feature announcements, and educational content (you can opt out at any time).
• Respond to support requests and communicate with you.
• Analyze usage patterns to improve user experience and product features.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

Data Storage & Security

Your data is stored on servers located in the United States, operated by our infrastructure providers (AWS). We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Regular security audits and penetration testing.
• Access controls limited to authorized personnel only.
• Automated backups with encrypted storage.

While we take reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

Third-Party Services

We use the following categories of third-party services:

• Payment processing: Stripe
• Infrastructure: Amazon Web Services (AWS)
• Analytics: PostHog (self-hosted), Plausible Analytics
• Email delivery: Amazon SES, Resend
• Error monitoring: Sentry
• Authentication: NextAuth.js (self-hosted)

Each third-party provider operates under their own privacy policy. We only share the minimum data necessary for each service to function.

Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, security, and core functionality.
• Analytics cookies: help us understand how you use the Service (opt-out available).
• Preference cookies: remember your settings like theme and language.

We do not use advertising or tracking cookies. You can control cookie preferences through your browser settings or our cookie consent banner.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes (up to 7 years for financial records).

Anonymized, aggregated data may be retained indefinitely for analytics and product improvement purposes.

Your Rights

For all users

• Access: request a copy of your personal data.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data.
• Portability: export your data in a machine-readable format.
• Opt-out: unsubscribe from marketing communications at any time.

Additional rights under GDPR (EU/EEA residents)

• Right to restrict processing of your personal data.
• Right to object to processing based on legitimate interests.
• Right to withdraw consent at any time.
• Right to lodge a complaint with a supervisory authority.

Additional rights under CCPA (California residents)

• Right to know what personal information is collected and how it is used.
• Right to opt-out of the sale of personal information (we do not sell your data).
• Right to non-discrimination for exercising your privacy rights.

Children’s Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete it.

International Data Transfers

If you are located outside the United States, your data will be transferred to and processed in the United States. We use Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure your data is protected in accordance with applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, sending you an email notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at: