Privacy Policy

1.1 Information You Provide

• Account Information: Name, email address, phone number, profile details
• Identity Verification: Government-issued ID, address verification documents
• Payment Information: Stripe account details, bank information (processed by Stripe)
• Business Listings: Business descriptions, financial data, asset files
• Communications: Messages, support requests, feedback

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Transaction Data: Purchase history, escrow activities, payment processing
• Technical Data: Log files, error reports, performance metrics

1.3 Third-Party Information

• Authentication Services: Information from Clerk authentication system
• Payment Processors: Transaction data from Stripe
• Verification Services: Identity confirmation from third-party providers

2.1 Platform Operations

• Create and manage your user account
• Process business listings and transactions
• Facilitate escrow and payment processing
• Provide customer support and assistance
• Verify identity and prevent fraud

2.2 Communication

• Send transaction notifications and updates
• Provide important account and security information
• Respond to support requests and inquiries
• Send marketing communications (with consent)

2.3 Platform Improvement

• Analyze usage patterns to improve our services
• Develop new features and functionality
• Conduct research and analytics
• Optimize platform performance and security

2.4 Legal and Safety

• Comply with legal obligations and regulations
• Detect and prevent fraud and abuse
• Enforce our Terms of Service
• Protect user safety and platform integrity

3.1 Service Providers

• Clerk: Authentication and user management services
• Stripe: Payment processing and financial services
• AWS: Cloud hosting and file storage services
• Resend: Email delivery services
• Vercel: Website hosting and deployment

3.2 Business Transactions

• Share necessary information between buyers and sellers
• Provide contact details for post-sale support
• Facilitate business asset transfers
• Process escrow and payment activities

3.3 Legal Requirements

• Comply with court orders and legal processes
• Respond to government investigations
• Report suspected illegal activities
• Protect our rights and the rights of others

3.4 Business Transfers

In the event of a merger, acquisition, or sale of LaunchPad Market, your information may be transferred to the new entity with appropriate notice and privacy protections.

4.1 Security Measures

• Encryption: All data transmitted using SSL/TLS encryption
• Secure Storage: Sensitive data encrypted at rest
• Access Controls: Limited access to personal information
• Regular Audits: Security assessments and vulnerability testing
• Malware Scanning: ClamAV integration for file security

4.2 Asset Protection

• 4-stage S3 bucket security architecture
• Quarantine and scanning of all uploaded files
• Presigned URLs for secure asset downloads
• Time-limited access to purchased assets

4.3 Data Breach Response

In the unlikely event of a data breach, we will promptly notify affected users and relevant authorities as required by law, and take immediate steps to secure the compromised data.

5.1 GDPR Rights (EU Residents)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain types of processing

5.2 CCPA Rights (California Residents)

• Know: Information about data collection and use
• Delete: Request deletion of personal information
• Opt-Out: Opt out of the sale of personal information
• Non-Discrimination: Equal service regardless of privacy choices

5.3 All Users

• Update your account information and preferences
• Control email and marketing communications
• Request information about our data practices
• File complaints with relevant privacy authorities

5.4 Exercising Your Rights

6.1 Retention Periods

• Account Data: Retained while your account is active
• Transaction Records: 7 years for tax and legal compliance
• Support Communications: 3 years for service improvement
• Technical Logs: 12 months for security and debugging
• Marketing Data: Until you unsubscribe or opt out

6.2 Data Deletion

• Automatic deletion when retention periods expire
• Manual deletion upon verified user request
• Secure deletion methods that prevent data recovery
• Some data may be retained for legal compliance

6.3 Account Closure

When you close your account, we will delete or anonymize your personal information within 90 days, except for data we're required to retain for legal, tax, or regulatory purposes.

7.1 Types of Cookies

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us improve our services
• Functional Cookies: Remember your preferences
• Analytics Cookies: Understand how you use our platform

7.2 Third-Party Services

• Clerk: Authentication and session management
• Stripe: Payment processing and fraud prevention
• Vercel: Performance monitoring and analytics

7.3 Your Choices

• Manage cookie preferences in your browser settings
• Opt out of non-essential cookies through our cookie banner
• Note: Disabling essential cookies may affect platform functionality

8.1 Safeguards

• Standard Contractual Clauses for EU data transfers
• Adequate protection measures for all international transfers
• Regular assessment of transfer mechanisms
• Compliance with applicable data protection laws

10.1 Notification Process

• Material changes will be communicated via email
• Updated policy will be posted on our website
• Effective date will be clearly indicated
• Continued use constitutes acceptance of changes

10.2 Version History

Previous versions of this Privacy Policy are available upon request. Contact privacy@launchpadmarket.com for historical versions.

11.1 Data Protection Authority

EU residents have the right to lodge a complaint with their local data protection authority if they believe we have not addressed their privacy concerns adequately.