Legal
Privacy Policy
LaunchScaler is a directory where products launch, and a scanner that reads a website from its address. This policy explains what we collect when you use launchscaler.com, why we collect it, who else handles it, how long we keep it, and what you can ask us to do with it.
Last updated:
Who is responsible for your data?
LaunchScaler runs launchscaler.com and decides how the personal data described on this page is used. For any question about it, or to use any of your rights, email support@launchscaler.com.
What do we collect?
When you browse, our analytics record the pages you visit and what you click. The next section explains how. Our servers also log each request (the page, the time and your browser type) so we can keep the site running and fix errors.
When you run a scan, we collect the web address you enter, then read that site's public pages the way a browser or a search engine would. The scanner doesn't log in, fill in forms or open private areas. To stop abuse, we keep a one-way hash of your IP address for two days. We never store the address itself.
When you create an account, we collect your email address. If you sign in with Google, Google also shares your name and profile picture, and we use them on your profile. Your profile page is public: it shows your name, handle, picture and anything you add to it.
If you've allowed analytics cookies, we note which website sent you here and any campaign tags in the link you followed when you create an account. If you tell us how you found us, we save that answer with your account. We use both only to see which channels bring makers to LaunchScaler.
When you launch or claim a product, vote, follow, save or comment, we store what you did and what you wrote. Listings and comments are public. On the site, votes show only as a count.
When you buy something, we record what you bought, for which website, and when. Dodo Payments takes the payment, so your card details go to Dodo and never reach us.
If you connect another service to a paid tool, such as Google Search Console or a publishing destination like WordPress, Ghost, Shopify, Webflow, Notion, Medium or your own webhook, we encrypt its credential before we store it and use it only for that connection.
When you give us your email for something specific, such as the newsletter, a report you asked us to send, or a message through one of our forms, we use it for what that form said it was for.
Do we email people who haven't signed up?
Sometimes. When we list or scan a product whose maker has no LaunchScaler account, we may email the maker to say it's listed or to share what the scan found. We only use an address the maker published themselves, on the product's own website (its home, contact or about page) or on a public page where they launched it. We don't buy lists or guess addresses.
A series is three emails at most, and each one has a link that stops them in one click. Replying "stop" works too. We send these emails on the basis of our legitimate interest in telling makers about their own product.
To have your address deleted, email support@launchscaler.com. We’ll delete what we hold about you except one note on our do-not-email list, which is what stops us writing to you again.
What happens when you connect Google Search Console?
If you connect Google Search Console to a website you own, we ask Google for one read-only permission: to view Search Console data for the sites you have already verified. We can't change your property, submit or remove URLs, or touch anything else in your Google account.
We read the search queries, impressions, clicks and Google-reported average position for the site you connect. We use them to show you how that site is doing and to suggest article topics based on searches you almost rank for already, which means the AI model that drafts your content plan reads those queries. We store the data against your account so the numbers and the plan stay available between visits.
Your Google credential is encrypted before we store it. It is never shown to you or anyone else, and we use it only to refresh the connection. Disconnecting deletes it. We never sell this data, never use it for advertising, and never show it to other users.
Why are we allowed to use your data?
Privacy laws such as the GDPR ask us to name a legal basis for each use of your data. Most of what we do is to provide what you asked for: your account, your listings, anything you buy, the paid tools you use and the emails that come with them. That basis is our contract with you.
Some uses rest on our legitimate interests: running and securing the site (server logs, bot checks and abuse limits), counting visits without storing anything on your device, scanning public websites, listing products, and telling a maker their product is listed. You can object to any of these (see What are your rights?).
Analytics cookies, Google Analytics and the newsletter rest on your consent. You can withdraw it at any time, and withdrawing doesn't affect anything that happened before.
We keep purchase records because tax and accounting law requires it.
Who else handles your data?
We use these services to run LaunchScaler. Each one handles data for us under its own data processing terms. We don't sell personal data to anyone.
- Vercel
- Hosts the site and runs our server code in its Singapore region. Vercel BotID checks that scans and form submissions come from a person.
- Supabase
- Our database, file storage and sign-in, hosted in Singapore.
- Cloudflare
- Runs our domain's DNS, and Turnstile, which also checks that scans and form submissions come from a person.
- PostHog
- Product analytics, as described above, processed in the United States.
- Google Analytics once you accept, Google sign-in if you use it, and Search Console if you connect it.
- Resend
- Sends our email.
- Dodo Payments
- Our merchant of record. Dodo sells our paid products to you, takes the payment and handles tax, so your payment and billing details go to Dodo directly.
- AI model providers
- Reached through Vercel's AI Gateway. They read a scanned site's public text to describe the product, and write the paid content you order, such as listing copy, reviews and articles. For a content plan, that includes your Search Console queries if you connected them.
- Scanning services
- Browserbase (a hosted browser), Jina Reader (reads page text), Google PageSpeed Insights (measures speed), Open PageRank (domain authority) and, for paid audits and content plans, DataForSEO (search and backlink data). They receive the address of the site being scanned, not information about you.
Some images on our pages load from the sites that host them, including the directory badges in the footer and some product pictures. Your browser fetches those images itself, so those sites see your IP address, as any site you visit would.
Listings are public by design: anyone can see a product's name, description, links and category.
Does your data leave your country?
Our database and servers are in Singapore, and some of our providers, PostHog and Google among them, process data in the United States. Your data may therefore be handled outside the country you live in. Where the law requires a safeguard for that, as it does when data leaves the European Economic Area or the UK, we rely on the Standard Contractual Clauses in our providers' data processing terms.
How long do we keep it?
We keep your account, and everything tied to it, until you ask us to delete it. Listings and scan results belong to a website rather than a person: a listing stays up while the product is listed, every result shows the date the site was read, and we keep a year of scan history for each website. A scan you run without an account isn't stored against you.
The IP hashes we use to limit abuse are deleted after two days, and server logs after 30 days. Newsletter subscribers stay on the list until they unsubscribe, which any issue lets you do. We keep purchase records for as long as tax and accounting law requires, and everything else only as long as we need it for the reason we collected it.
What are your rights?
Depending on where you live (under the GDPR, the UK GDPR or California's privacy law, for example), you can ask us to show you the personal data we hold about you, correct it, delete it, or give you a copy you can take elsewhere. You can also object to how we use it, ask us to restrict that use, and withdraw any consent you gave.
To do any of that, email support@launchscaler.com from the address the request is about, or tell us which address it is. We reply within one month. If a request is complicated we may need up to two more months, and if so we’ll tell you within the first month.
If you think we've mishandled your data, you can complain to the data protection authority where you live or work. You don't have to contact us first, though we'd like the chance to put it right.
How do you delete your account?
There’s no delete button in the dashboard. Email support@launchscaler.com from the address you signed up with and ask us to delete your account. We’ll delete it and the data tied to it, except purchase records the law requires us to keep. A product’s listing belongs to its website, so it can stay up as an unclaimed listing. Tell us if you want it taken down as well.
Is LaunchScaler meant for children?
No. LaunchScaler is for people who build and run websites, and it isn’t directed at children under 16. We don’t knowingly collect their data. If you think a child has given us personal data, email support@launchscaler.com and we’ll delete it.
When does this policy change?
When we change what we collect or who handles it, we update this page and the date at the top. Where the law requires it, we'll also email people who have an account.