Privacy Policy

Who we are

LaunchPanda is operated by Welsenes Brothers V.O.F., registered at Nieuwe Prinsengracht 92-2, 1018VW Amsterdam, The Netherlands (KVK 77647157). When we say “we”, “us”, or “LaunchPanda”, we mean this entity.

What data we collect

We collect the minimum data needed to provide the service:

• Account information — when you sign in with Google, we receive your name, email address, and profile picture from Google. We use this to identify your account.
• Launch Kit data — the product information you enter (tool name, descriptions, category, etc.). Stored to pre-fill directory submissions.
• Submission progress — which directories you've marked as completed. Stored to track your launch progress per kit.
• Feedback — if you submit feedback via the feedback widget, we store your message, the page you were on, and your user ID (if logged in).
• Waitlist emails — if you join the Pro waitlist, we store your email address to notify you at launch.

Legal basis for processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract performance — processing your account data and Launch Kit information is necessary to provide the service you signed up for.
• Legitimate interest — we process usage data to improve the service, fix bugs, and personalize directory recommendations.
• Consent — for optional communications like launch tips and product updates. You can withdraw consent at any time by unsubscribing.

Where your data is stored

Your data is stored on servers operated by our third-party providers. These servers may be located outside the European Economic Area (EEA), primarily in the United States:

• Convex (database) — servers in the United States. Convex complies with industry-standard security practices.
• Vercel (hosting) — global edge network with primary infrastructure in the United States.
• Google (authentication) — Google OAuth handles sign-in; Google's privacy practices apply to the authentication process.

Where data is transferred outside the EEA, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards as provided by our service providers to ensure an adequate level of data protection.

How we store your data

Your data is stored in our database (hosted on Convex) and is encrypted in transit (HTTPS/TLS) and at rest. Authentication tokens are stored securely in your browser's local storage.

Data retention

We retain your data for as long as your account is active. Specifically:

• Account data — retained until you request account deletion.
• Launch Kit data — retained until you delete the kit or request account deletion.
• Submission progress — retained until you reset progress or delete your account.
• Feedback — retained for up to 2 years for product improvement purposes, then deleted.
• Waitlist emails — retained until the Pro launch, after which you'll be notified and the waitlist data will be deleted.
• Payment data — Stripe retains payment records as required by financial regulations. We only store your subscription status and Stripe customer ID, never your card details.

How we use your data

• To provide and improve the LaunchPanda service
• To pre-fill your product information for directory submissions
• To send you launch tips and product updates (you can unsubscribe anytime)
• To personalize directory recommendations based on your product category and launch stage
• To process payments and manage subscriptions

What we never do

• We never sell your personal data to third parties
• We never share your product information with directories on your behalf without your explicit action
• We never use your data for advertising or profiling
• We never store your payment card details — all payment processing is handled by Stripe

Third-party services

We use the following third-party services that may process your data:

• Convex — database and backend (stores your account and kit data). Servers in the US.
• Google OAuth — authentication provider. Google's privacy policy applies to the sign-in process.
• Stripe — payment processing (for Pro tier). We never see or store your card details. Stripe's privacy policy applies.
• Vercel — hosting, deployment, and analytics (page views and web vitals only, no personal data).

Cookies

We use essential cookies and local storage for authentication and session management only. We use Vercel Analytics for anonymous page view tracking (no cookies, no personal data). We do not use tracking cookies or third-party advertising cookies.

Your rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — you can request a copy of all personal data we hold about you.
• Right to rectification — you can update or correct your personal data at any time through your account settings or by contacting us.
• Right to erasure — you can request deletion of your account and all associated data.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interest.
• Right to withdraw consent — you can unsubscribe from emails at any time using the link in any email we send.

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you via email or by placing a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

Contact

If you have any questions about this privacy policy, your data, or wish to exercise your GDPR rights, contact us:

• Welsenes Brothers V.O.F.
• Nieuwe Prinsengracht 92-2, 1018VW Amsterdam, The Netherlands
• Email: thomasvanwelsenes@gmail.com