Privacy Policy
Last updated: 2026-05-29
1. Who we are
LaunchLift ("we", "our", "us") operates the LaunchLift platform, which helps founders run campaign-based launch and feature rollout campaigns. For privacy requests, contact us at privacy@launchlift.app.
2. Data we collect and why
| Data | Purpose | Retention |
|---|---|---|
| Email address | Login, account communication, privacy requests | Until account deletion |
| Name | Account display and workspace ownership | Until account deletion |
| Password hash | Authentication (never stored in plaintext) | Until account deletion |
| Workspace name | Product operation and multi-tenancy | Until workspace deletion |
| Campaign content | Hosted public campaign pages | Until campaign or workspace deletion |
| Subscriber name / email | Campaign signup and referral tracking | Until campaign or workspace deletion, or on request |
| Subscriber answers | Campaign qualification (optional, feature rollouts only) | Until deletion |
| Session ID | Authentication session management | 30 days or until logout |
| Internal events / logs | Analytics, debugging, security | Short retention period |
We do not collect data beyond what is needed for signup, login, billing, security, or core campaign operation.
3. Cookies
LaunchLift uses only strictly necessary cookies: a session cookie for authentication. No advertising, tracking, or analytics cookies are used. No cookie consent banner is shown unless optional tracking is introduced in the future.
- session_id — HttpOnly, Secure in production, SameSite=Lax. Expires in 30 days or on logout.
4. Third-party processors
We share personal data with the following processors to operate the platform. A full processor register is maintained internally.
- Hosting provider — hosts the application and may process IP addresses and logs.
- Database provider — stores user, workspace, campaign, and subscriber data.
- Email provider — sends verification and password reset emails, processing email addresses and metadata.
We review data processing agreements with each provider before launch. No personal data is sold or shared for advertising.
5. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Request a portable export of your data
- Withdraw consent where processing is consent-based
To exercise any of these rights, email privacy@launchlift.app. We will verify your identity before acting on any request.
6. Account deletion
To delete your account, email privacy@launchlift.app from the address associated with your account. We will:
- Verify account ownership
- Invalidate all active sessions
- Delete or anonymize your profile, credentials, workspace, campaigns, and subscriber data
- Confirm completion within a reasonable timeframe
Some records may be retained where legally required (e.g. billing history). We will document any retained data and the reason.
7. Data export
To request an export of your data, email privacy@launchlift.app. Exports include: user profile, workspace, campaigns, subscriber lists, referral data, and relevant events in JSON or CSV format.
8. Security
Passwords are hashed using bcrypt. Sessions are stored server-side and transmitted only via secure HttpOnly cookies. Production deployments use HTTPS and encrypted backups. Database access is restricted by least privilege.
9. Changes to this policy
We may update this policy as the platform evolves. Material changes will be communicated via email or in-app notice. The "last updated" date at the top reflects the most recent revision.
10. Contact
Privacy requests, questions, or concerns: privacy@launchlift.app