Privacy

LaunchAutopilot is operated by OceanLab Technology. We are the data controller for everything described here, and you can reach us at hello@launchautopilot.si.

The short version

We run no analytics product, no advertising trackers and no third party scripts for marketing. We do not store raw IP addresses anywhere. We do not sell or share personal data, and we do not profile you.

If you join the waitlist

We store your email address, a single use confirmation token, the time you confirmed, and, if you arrived from a check, the domain you checked and the page that referred you. The last two exist so we can tell which parts of the site actually lead anywhere.

It is double opt in. We send one message asking you to confirm, and nothing else until you do. An address that is never confirmed is deleted automatically. The legal basis is your consent, which you can withdraw at any time through the unsubscribe link in any message.

If you sign in

Signing in uses GitHub. We receive and store your email address, your display name and your GitHub account identifier, and we keep a session in a cookie that is HTTP only and not readable by scripts. That cookie is strictly necessary for the site to work and is not used for tracking.

If you vote, or run a free check

Votes and free checks store a salted hash of your IP address, never the address itself. The hash cannot be reversed back to an address. It exists for two narrow purposes: limiting how many free checks one person can run in a day, and spotting rings of accounts voting together. It is never shown to anyone and never used to build a profile.

If you pay

Payments are handled by Dodo Payments, which acts as the merchant of record. Your card details go to them and never touch our servers. We store the payment identifier, the amount, the currency and what it was for, so that a refund or a dispute can be matched to the thing it paid for.

If you connect a Reddit account

We store your Reddit username and an encrypted token so that posts you have approved can be published as you. We also cache your account age and karma, because several subreddits gate on both and the check that uses them must not make a network call at posting time. Nothing is ever posted without your explicit approval of that specific item, and disconnecting the account deletes the token.

Who processes data on our behalf

• Cloudflare serves the site and processes requests in transit.
• Neon hosts the Postgres database, in the United States.
• Resend delivers email.
• Dodo Payments takes payments as merchant of record.
• GitHub provides sign in, if you choose to use it.
• OpenAI, Perplexity and Google receive the measurement questions we send to their assistants. Those questions never contain your name or your email address.

Some of these are outside the UK and EEA. Transfers rely on the providers’ standard contractual clauses.

How long we keep it

Unconfirmed waitlist addresses are swept automatically. Confirmed addresses are kept until you unsubscribe or ask us to delete them. Measurement data about a product is kept as long as the listing is public, because a published result that quietly disappears is not evidence. Payment records are kept for as long as tax and accounting rules require.

Your rights

You can ask for a copy of what we hold, have it corrected, have it deleted, or object to us holding it. Write to hello@launchautopilot.si from the address in question and we will act within 30 days. If you are in the UK or EEA and we get it wrong, you can complain to your data protection authority.

Changes

If this page changes in a way that affects you, we will say so in the weekly email rather than quietly updating the date at the top.