Privacy Policy

1. Who We Are

LaunchNest (“we”, “us”, or “our”) is a software-as-a-service platform for IT service providers. We are based in Canada and operate in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Questions? Contact us at our contact form.

2. Information We Collect

We collect the following categories of information:

• Account information: Your name and email address, provided via Google OAuth when you sign in.
• Workspace data: Client records, service details, tasks, and files you create or upload within the platform.
• Payment information: Billing details (card number, address) collected and processed directly by Stripe. We do not store raw card data.
• Usage data: Log data such as IP address, browser type, pages visited, and timestamps, collected automatically.
• Communications: Messages you send through our contact form.

3. How We Use Your Information

• To provide, operate, and improve the LaunchNest platform
• To process subscription payments for Pro workspaces
• To authenticate users via Google OAuth
• To respond to support and contact form inquiries
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Service Providers

We use the following sub-processors to operate the platform:

• Stripe — payment processing and subscription billing
• Google — authentication (OAuth)
• Neon — database hosting (PostgreSQL)
• Cloudflare — bot protection (Turnstile) and R2 object storage for uploaded files
• Resend — transactional email delivery

Each provider has its own privacy policy governing its handling of data. We contractually require them to protect your information.

5. Data Retention

We retain your account and workspace data for as long as your account is active. If you delete your workspace or account, we will delete associated personal data within 30 days, except where retention is required by law or for legitimate business purposes such as billing records.

6. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent for certain processing activities
• Request deletion of your personal data (subject to legal obligations)

To exercise any of these rights, contact us through the contact form.

7. Cookies and Tracking

We use session cookies required for authentication and workspace switching. We do not use third-party advertising or behavioural tracking cookies. Cloudflare Turnstile may set cookies for bot protection on our contact form.

8. Security

We use industry-standard measures including encryption at rest and in transit, access controls, and regular security reviews. Stripe API keys stored in the platform are encrypted before being written to the database.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users by updating the “Last updated” date at the top of this page. Continued use of the platform after changes constitutes acceptance of the revised policy.