Privacy Policy
Last updated: 2026-06-21
What we collect
Account information (name, email, hashed password), the content you generate (launches, assets, leads), and the credentials you choose to connect for third-party integrations. Integration credentials (e.g., your Resend or Cloudflare API keys) are encrypted at rest and only used to perform actions you request.
How we use your data
To run the service: generate content, send the emails and posts you authorize, manage the domains and DNS you connect, and show you analytics. We never sell your data.
AI processing
Content is generated using our AI provider (our AI generation provider), which acts as a subprocessor. Prompts include the product details you provide so the model can generate relevant content. Avoid submitting data you do not want processed by an AI provider.
Cookies & sessions
We use a single essential, httpOnly session cookie so you stay signed in. We do not use advertising or cross-site tracking cookies.
Security
Passwords are salted and hashed (scrypt); API keys are hashed and compared in constant time; the app is served with CSP, HSTS, and other standard security headers; API access is rate-limited.
Your rights
You can export all of your data and permanently delete your account at any time from Settings → Danger zone, or via the data export / deletion endpoints. These actions are irreversible.
Retention
We keep your data for as long as your account is active. Deleting your account removes your content and credentials.
Contact
Questions about your data: privacy@launchxo.com.