Privacy Policy
Last updated:
Launch Auditor ("we", "us", or "our") operates launchauditor.com. This policy explains how we collect, use, disclose, and protect personal information when you use our pre-launch website audit service.
Data controller
The data controller responsible for your personal information is:
Launch Auditor
2261 Market Street #5039, San Francisco, CA 94114, United States
[email protected]
We have not appointed a separate Data Protection Officer. For privacy inquiries, contact us at the email above.
Information we collect
- Account information (email, name) when you register
- URLs you submit for auditing
- Usage data and audit results generated from your scans
- Payment information processed securely through Stripe (we do not store card details)
- Cookie and consent preferences when you interact with our cookie banner
- Optional analytics data (page views, device/browser type, approximate location) if you consent to analytics cookies — see Cookie Policy
Legal basis for processing (GDPR)
Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we process personal data on the following bases:
- Contract — to provide the audit service, manage your account, and process subscriptions you request
- Legitimate interests — to secure our platform, prevent abuse, and improve product reliability (balanced against your rights)
- Consent — for optional analytics and marketing cookies/scripts (you may withdraw consent at any time via Cookie settings)
- Legal obligation — where required for tax, accounting, or regulatory compliance
How we use your information
- To provide and improve the audit service
- To communicate about your account and scan results
- To process billing and subscription management
- To detect and prevent abuse of our platform
- To understand aggregate site usage when you opt in to analytics (Google Analytics 4)
Google Analytics
We use Google Analytics 4 (GA4) with Google Consent Mode v2. The Google tag loads on every page, but consent defaults to denied: analytics cookies are not set and no identifiable measurement occurs until you opt in through our cookie banner. After you consent, Google may collect information such as pages visited, time on site, browser type, and approximate geographic region. We configure IP anonymization where supported. Google acts as a processor/service provider on our behalf. See our Cookie Policy for cookie names and retention.
Google's privacy policy: policies.google.com/privacy. You can opt out of analytics at any time via Cookie settings in the site footer.
Data retention
Scan results are retained according to your plan tier. Account and billing records are kept as long as your subscription is active and for a reasonable period afterward for legal and accounting purposes. Cookie consent preferences are stored for 12 months unless you clear them sooner. Analytics cookies set by Google follow Google's retention schedules (typically up to 2 years for _ga). You may request deletion of your account and associated data by contacting [email protected].
Cookies and similar technologies
We use strictly necessary cookies for authentication and core functionality. Optional analytics and marketing cookies are disabled until you opt in through our cookie banner. Reject all and Accept all are presented with equal prominence — we do not use dark patterns to nudge you toward optional cookies. For a full list of cookies, categories, and retention periods, see our Cookie Policy. You can update your choices at any time from the "Cookie settings" link in the site footer.
International transfers
We are based in the United States. If you access the service from the European Economic Area, United Kingdom, or other regions with data transfer rules, your personal data may be transferred to and processed in the United States and other countries where our service providers operate (including Google and Stripe). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms offered by our providers.
Your data protection rights
Depending on your location, you may have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your personal data
- Restriction — ask us to limit how we use your data
- Objection — object to processing based on legitimate interests
- Portability — receive your data in a structured, machine-readable format
- Withdraw consent — where processing is consent-based (e.g. analytics cookies), without affecting the lawfulness of prior processing
To exercise these rights, email [email protected]. We will respond within 30 days where GDPR applies. You may also lodge a complaint with your local supervisory authority.
Right to erasure (GDPR)
If you are in the European Economic Area, United Kingdom, or another jurisdiction with data erasure rights, you may request deletion of your personal data at any time. We will delete your account, scan history, audit results, and associated profile information within 30 days of verifying your request.
To request erasure, email [email protected] from the address linked to your account with the subject line "Data Erasure Request." We may ask you to verify ownership before processing the deletion.
California privacy rights (CCPA / CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:
- Right to know — what personal information we collect, use, disclose, and retain
- Right to delete — request deletion of personal information we collected from you, subject to legal exceptions
- Right to correct — request correction of inaccurate personal information
- Right to opt out of sale or sharing — see below
- Right to non-discrimination — we will not discriminate against you for exercising your privacy rights
We do not sell your personal information for monetary consideration. We may use Google Analytics when you opt in to analytics cookies. Under CPRA, certain analytics uses may be considered "sharing" for cross-context behavioral advertising. You can opt out by rejecting analytics cookies or disabling analytics in Cookie settings — this stops GA4 scripts and cookies from loading.
To submit a California privacy request, email [email protected]. We will verify your request and respond as required by law.
Third-party services
We use Stripe for payments, Resend for transactional email, Google Analytics (with consent) for site analytics, and cloud infrastructure providers for hosting. Stripe may set cookies on their domains during checkout. Each provider has their own privacy policy governing their use of your data.
Children
Launch Auditor is not directed at children under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided us data.
Changes to this policy
We may update this policy from time to time. We will post the revised version on this page with an updated "Last updated" date. Material changes may be communicated via email or an in-product notice.
Contact
Questions about this policy? Email us at [email protected].