Privacy Policy

Who we are

Launchable is operated by Ethan Weily ("we"). Contact us at reedsstack@gmail.com.

What we collect

• Account information: your name and email address, and a securely hashed password if you use one. If you sign in with Google, we receive your Google name, email address, and profile picture. We never get access to your Gmail or other Google data.
• Business information: your answers about your business idea, the plan and grade we generate, tool results, checklist progress, and financial estimates.
• "How did you hear about us": your optional answer during setup.
• Usage and security records: a log of AI requests (type, size, and cost, used for your monthly credits), and short-lived sign-in records that include your email address and IP address, used to block password-guessing.
• Payment information: handled entirely by Stripe. We never see or store your card number.

How we use it

• To run the service: grade your idea, write and save your plan, manage your credits and subscription.
• To send account emails: welcome, email confirmation, and password reset.
• To keep the service secure and stop abuse.
• To understand which channels bring new users, using the optional "how did you hear about us" answer.

AI processing

To grade your idea and write your plan, your business answers are sent to our AI provider, Anthropic, which processes them under its commercial terms to return a response. Under those terms Anthropic doesn't use our customers' content to train its models, and it may keep requests and responses for a limited period (generally up to 30 days) for safety and abuse prevention. We store only the type, size and cost of each request, never the text of your prompts. Don't enter passwords, bank or card numbers, Social Security numbers, or anything confidential.

Service providers

We share data only with the companies that help us run Launchable, and only what each needs: - Vercel: hosting. Its server logs can include IP addresses and the pages requested. - Supabase: database. - Anthropic: AI processing. - Stripe: payments. - Resend: account emails. It keeps delivery records, including the recipient address and subject, under its own policy. - Google: sign-in, if you choose it. We keep only your name, email address and picture from it, never its access tokens. - Cloudflare: the anti-bot check on sign-up.

Who can see your data

Only you can see your account and business information in the app; every page and request is limited to the signed-in account. Our team accesses stored data only when needed to provide support you ask for, keep the service secure, or comply with the law.

Cookies

We use only the cookies needed to keep you signed in. We don't use advertising or tracking cookies.

How long we keep it

• Your account and business information: until you delete your account.
• Sign-in and anti-abuse records: deleted automatically once they expire, within about a day.
• Password-reset and email-confirmation links: deleted automatically after they're used or expire.
• Backups: deleted data may remain in database backups for a limited period before they're overwritten.
• Payment records: Stripe keeps billing records as required for tax and accounting.

Security

Passwords are stored as one-way hashes, connections are encrypted (HTTPS), sign-in attempts are rate-limited, and our secret keys are never sent to your browser. No system is perfectly secure; if a breach affects your data, we'll notify you as required by law.

Your choices and rights

• Download your data: Settings → Download your data.
• Delete your account: Settings → Danger zone. This cancels any subscription and deletes your account and business information.
• Correct your information: edit it in the app, or email us.

Children

Launchable isn't intended for anyone under 13, and paid plans require you to be at least 18.

Changes

We'll update this page and its effective date if our practices change, and email you about significant changes.