Privacy Policy

LaunchLegal is operated by Ali Ahmad, a sole trader, trading as LaunchLegal. The operator's business and legal-service address is 33 Kerris Way, Reading, RG6 5UW, United Kingdom. Privacy questions and applicable data-rights requests can be sent to support@launchlegal.uk.

Depending on how you use LaunchLegal, the service handles:

• account details, including email address, name, authentication data, and account metadata;
• workspace membership and role information;
• business identity, contact, website, operational, and compliance-profile information;
• branding files and preferences, including uploaded business logos;
• generation requests, generated documents, document versions, hosted pages, and exports;
• plan usage, purchase, subscription, and Stripe transaction identifiers; and
• technical request and error information needed to operate and secure the service.

We use information to create and protect accounts, administer workspaces and permissions, provide document-generation and export features, publish pages at a user's request, process billing, enforce plan limits, communicate about the service, prevent fraud and misuse, troubleshoot faults, and comply with applicable legal obligations.

LaunchLegal relies on the following services for the current production architecture:

• Supabase for authentication, database, and file storage;
• Stripe for hosted checkout, payments, and subscription management;
• Resend for configured authentication-email delivery;
• Vercel for hosting and delivering the frontend application;
• Render for hosting the backend API; and
• Cloudflare for DNS and, if enabled in deployment, network proxy services.

The backend also contains integrations for OpenAI and Anthropic. Relevant business and compliance-profile information may be sent to the provider selected for a document-generation request when that integration is configured. We do not claim that both providers are active in production at the same time.

Some providers may process information in countries outside the country where a user is located. Where personal data is transferred internationally, LaunchLegal relies on appropriate safeguards used by the relevant provider and applicable data-protection law. This policy does not claim a specific transfer mechanism that has not been verified.

Private workspace information is limited to authorized workspace members and backend services. A document made available as an active hosted page is intentionally public and can be viewed without signing in. Users should not publish information they do not intend to make public.

Account and business data may be retained while an account is active. After account closure, information may be retained for a reasonable period where necessary for legal, tax, accounting, fraud-prevention, security, dispute-resolution, or backup purposes. Fixed periods are not stated because the application and verified provider requirements do not establish them.

Users may request deletion where applicable by law. Some information may need to be retained despite a request where there is a lawful reason to do so.

Depending on applicable law, users may have rights to request access, correction, deletion, restriction, objection, or portability of personal data and to complain to a relevant data protection authority. Requests should be sent to support@launchlegal.uk.