What Launchpad knows, and why.

Data we use

• Account information, including email address and authentication events.
• Workspace content you enter, such as product names, stages, summaries, and focus items.
• Essential technical records needed for security, delivery, fault investigation, and abuse prevention.

Secret Locker encrypts credential values in the browser before upload. Do not enter secrets or sensitive personal data into product summaries or focus items.

Why we use it

• To provide and secure the service and your workspace.
• To respond to support or account requests.
• To diagnose faults and protect the service from misuse.
• To meet legal obligations where they apply.

The intended legal bases are performance of the service requested by you, legitimate interests in securing and improving it, and legal obligation where applicable. Consent will be requested separately for any optional analytics or marketing technology.

Service providers

Launchpad currently relies on Supabase for database and authentication services, Hostinger for application hosting and domain infrastructure, Resend for authentication-email delivery, Paddle for checkout and subscription management, and GitHub for source and deployment workflow. Launchpad stores Paddle customer and subscription identifiers and subscription status, rather than payment-card details. These providers process only the data needed for their role and may operate infrastructure outside your country. Any international transfer must use an applicable legal safeguard.

The optional AI helper sends the prompts, conversation context, and provider key you choose through Launchpad to your selected AI provider. The provider's terms and data policies apply. Browser-saved AI keys and Studio drafts are stored in this browser; they are separate from the encrypted Secret Locker. The Tool Library opens external websites and does not connect your provider accounts.

Retention

Account and workspace data is retained while the account is active and for a limited period afterward where needed for recovery, security, dispute handling, or law. Authentication and operational logs follow provider retention settings. After a verified deletion request, we remove active workspace data unless retention is required for law or an unresolved dispute. Backup copies expire through the provider's backup cycle. Browser-only drafts and keys must also be removed from each browser you used.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing. You may also withdraw consent where consent is the basis. Use the privacy contact info@fratera.io. EU users may complain to their local supervisory authority; the Czech authority is the Office for Personal Data Protection.

Automated decisions and changes

Stage guidance is informational and does not make legal or similarly significant decisions about people. Material changes to this notice will be dated and communicated through the service when appropriate.