Privacy Policy

Effective Date: October 3, 2026

This Privacy Policy describes how getlaunch.dev ("we", "us", or "our") collects, uses, and protects personal information when you use our AI-assisted web product and deployment platform ("Service").

By using the Service, you acknowledge the practices described in this policy. You can turn off analytics and advertising cookies at any time, as described in the Cookies section.

1. Information We Collect

1.1 Account Information

When you sign in through GitHub OAuth or Google OAuth, we collect:

• Username, account ID, and profile information provided by the authentication provider
• Email address associated with your account
• Profile avatar URL

We do not access your GitHub or Google password. Authentication is handled through the provider's OAuth flow.

1.2 Repository and Deployment Data

When you install our GitHub App, create projects, or use deployment features, we may process:

• Repository names and metadata for repositories you grant access to
• Source code during the build process (used only for building and deploying your application)
• Build logs generated during deployment
• Deployment configuration, such as environment variables, port settings, build commands, branch selection, custom domains, and storage settings
• Runtime logs, deployment history, and status information

Environment variables and other secrets you provide are used to configure your projects and deployments. You should not submit secrets unless they are needed to operate your project.

1.3 Usage and Billing Data

We collect data related to your use of the Service:

• Resource consumption — compute time, request counts, data transfer, and storage usage
• Billing information — subscription status, invoice history, and payment status
• Payment details — processed and stored by our third-party payment provider; we do not store your credit card or bank account numbers

1.4 AI Workspace and Generated Content

When you use AI Workspace or related AI features, we may process prompts, chat messages, planning notes, generated code, generated website content, preview state, task status, and AI credit usage. Your inputs and generated outputs may be processed by third-party AI service providers to provide the feature.

1.5 API Keys, OAuth Apps, and Integrations

If you create API keys, OAuth applications, or MCP-compatible integrations, we process related metadata such as names, scopes, redirect URLs, creation dates, last-used timestamps, and access status. Secret values are shown only when created and should be stored securely by you.

1.6 Technical Data

We automatically collect:

• IP address when you access the Service
• Browser type and version
• Device information (operating system, screen resolution)
• Access logs (pages visited, timestamps, request metadata)
• Consent and attribution data stored in your browser, such as cookie consent and campaign parameters

2. How We Use Your Information

We use the information we collect to:

• Provide the Service — authenticate your account, build and deploy your applications, manage your projects
• Provide AI features — process prompts, generate code and content, run previews, and calculate AI credit usage
• Process billing — calculate usage, generate invoices, process payments
• Communicate with you — send billing notifications, service updates, and support responses
• Improve the Service — analyze usage patterns, fix bugs, and develop new features
• Ensure security — detect and prevent fraud, abuse, and unauthorized access
• Comply with legal obligations — respond to legal requests and enforce our Terms of Service

We do not sell your personal information. To measure our own ads, we share limited browsing events with Meta and TikTok, described below. You can turn this off at any time.

3. Third-Party Services

We use the following categories of third-party services that may process your data:

• GitHub — for authentication (OAuth) and repository access. GitHub's privacy practices are governed by GitHub's Privacy Statement.
• Google — for authentication (OAuth). Google's privacy practices are governed by Google's Privacy Policy.
• AI service providers — for AI-powered content generation. Your inputs may be processed by third-party AI services.
• Payment provider — for processing subscription payments and billing. Your payment information is handled directly by the payment provider and is subject to their privacy policy.
• Cloud infrastructure providers — for hosting your deployed applications and our platform infrastructure. Your application code and container images are processed on their infrastructure.
• Google Analytics — for analyzing website traffic and usage patterns, unless you turn it off. Google Analytics may collect information such as your IP address, browser type, pages visited, and event data. Google's privacy practices are governed by Google's Privacy Policy.
• Meta Pixel and TikTok Pixel — for measuring our ads on Facebook, Instagram, and TikTok, unless you turn them off. They record visits to our public pages (not your dashboard) and a few steps such as signing up, starting a first web app, and opening checkout, so the platforms can tell which ads led to signups. They receive the page address, browser information, and IP address, but not what you type or build. Their practices are governed by Meta's Privacy Policy and TikTok's Privacy Policy.

4. Data Retention

• Account data is retained for as long as your account is active.
• Project, workspace, deployment, and integration data is retained while needed to provide the Service or until you delete it, subject to backup, security, and legal retention needs.
• Build and runtime logs are retained for a limited period to support debugging, security, and auditing.
• Usage and billing data is retained for the duration required by applicable tax and accounting regulations.
• Deleted accounts — upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

You may request deletion of your account and associated data by contacting us at [email protected].

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit — all communication with our Service uses HTTPS/TLS
• HTTPOnly cookies — authentication tokens are stored in HTTPOnly cookies to prevent XSS attacks
• Access controls — internal access to user data is restricted to authorized personnel
• Infrastructure security — our platform infrastructure is hosted on industry-standard cloud providers with their own security certifications

While we take reasonable measures to protect your data, no system is completely secure. We cannot guarantee absolute security of your information.

6. Cookies

We use the following cookies:

Cookie Choice

Analytics and advertising cookies are on by default. When you first visit our website, a notice at the bottom of the page lets you choose OK or Turn off. If you turn them off, the Google Analytics, Meta Pixel, and TikTok Pixel scripts stop and are no longer loaded, and any existing _ga, _fbp, _fbc, _ttp, _tt_enable_cookie, and ttcsid cookies are removed. Your choice is stored in your browser's localStorage and persists across sessions. You can change your choice at any time with Cookie settings at the bottom of our public pages.

Google Analytics uses cookies to collect anonymized usage data. You can also opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data that we hold
• Correct inaccurate or incomplete data
• Delete your personal data (subject to legal retention requirements)
• Export your data in a portable format
• Object to certain processing of your data
• Object to analytics and advertising cookies by turning them off, and withdraw consent where processing is based on consent
• Revoke OAuth access through your GitHub or Google account settings
• Lodge a complaint with a competent data protection authority where this right applies
• Exercise California privacy rights where applicable, including rights to know, delete, correct, opt out of sale or sharing, limit certain sensitive data uses, and non-discrimination

To exercise these rights, contact us at [email protected]. We will respond to your request within 30 days.

8. Children's Privacy

The Service is not intended for individuals under the age of 13 (or 16 in jurisdictions where a higher age of consent applies). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

9. International Data Transfers

Your data may be processed and stored in locations outside your country of residence, including countries where our cloud infrastructure, AI, analytics, authentication, and payment providers operate. When we transfer personal data internationally, we use appropriate safeguards where required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the email associated with your account or through a notice on the Service. The updated policy will be effective from the date specified at the top of the document.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: [email protected]