Privacy Policy

LaunchPal.io ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our B2B lead generation and email outreach platform (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2.1 Information you provide

• ■Account information: name, email address, phone number, company name, job title, and password when you register.
• ■Business information: company website, product details, brand information, and onboarding questionnaire responses.
• ■Campaign data: target industries, geographic preferences, campaign settings, and email templates.
• ■Payment information: billing details processed through our payment processor (we do not store full credit card numbers).

2.2 Information collected automatically

• ■Usage data: pages visited, features used, actions taken within the platform.
• ■Device information: browser type, operating system, IP address.
• ■Analytics: we use Vercel Analytics to understand how users interact with our Service.

2.3 Third-party lead data

Our Service generates leads from publicly available business information. This includes:

• ■Business names and addresses from public directories.
• ■Professional email addresses from company websites.
• ■Job titles and professional roles from public profiles.
• ■Company information from business registries.

When you connect your email account (Gmail or Microsoft Outlook), we access specific data to provide our services. We are committed to minimal data access.

Request documentation: you can request technical documentation proving our OAuth scope limitations at any time. Contact support@launchpal.io.

We use the information we collect to:

• ■Provide, maintain, and improve our Service.
• ■Generate and verify leads for your campaigns.
• ■Send campaign emails on your behalf.
• ■Track campaign performance and analytics.
• ■Process payments and manage subscriptions.
• ■Communicate with you about your account and updates.
• ■Detect and prevent fraud, abuse, and security issues.
• ■Comply with legal obligations.

We do not sell your personal information. We may share data with:

• ■Service providers: Supabase (database), Vercel (hosting), payment processors, email verification services.
• ■Legal requirements: when required by law, court order, or government request.
• ■Business transfers: in connection with a merger, acquisition, or sale of assets.
• ■With your consent: when you explicitly authorize sharing.

We implement appropriate technical and organizational measures to protect your data:

• ■Data encrypted in transit (TLS/HTTPS) and at rest.
• ■OAuth tokens encrypted with AES-256-CBC.
• ■Row-level security (RLS) ensuring users can only access their own data.
• ■Regular security audits and monitoring.
• ■Limited employee access on a need-to-know basis.

We retain your data for as long as your account is active or as needed to provide services. After account deletion:

• ■Account data is anonymized or deleted within 30 days.
• ■Campaign data and leads are permanently deleted.
• ■Email integration tokens are immediately revoked.
• ■Audit logs may be retained for compliance (up to 2 years).

Depending on your location, you may have the following rights:

• ■Access: request a copy of your personal data.
• ■Correction: update or correct inaccurate information.
• ■Deletion: request deletion of your personal data.
• ■Portability: receive your data in a portable format.
• ■Objection: object to certain processing activities.
• ■Withdraw consent: revoke previously given consent.

To exercise these rights, contact us at support@launchpal.io.

You can disconnect your email account at any time:

1. 1Go to your Account Settings in LaunchPal.
2. 2Click "Disconnect" next to your email account.
3. 3Optionally, revoke access directly in your email provider's security settings:
   • Gmail · myaccount.google.com/permissions
   • Outlook · account.live.com/consent/Manage

Upon disconnection, we immediately delete your OAuth tokens and can no longer access your email account.

Your data may be processed in countries other than your country of residence. Our service providers may operate globally. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

Our Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and changing the "Last updated" date. We encourage you to review this policy periodically.