Privacy Policy

Last updated: June 2026

1. Who we are

LaunchSafe, Inc. ("LaunchSafe", "we", "us") is a Delaware corporation headquartered in San Francisco, California. We provide an autonomous adversarial testing platform for software teams.

2. Information we collect

We collect information you provide directly (account details, billing, scope definitions), information generated by your use of the Service (scans, findings, audit logs), and limited technical data (IP address, browser type) needed to operate the platform securely.

3. Source code and customer data

Source code you connect to LaunchSafe is processed solely to perform pentesting on your behalf. We do not use customer source code or findings to train shared or third-party models. Code is encrypted in transit and at rest.

4. How we use information

We use information to operate the Service, prevent abuse, comply with legal obligations, communicate with you about your account, and improve the platform using anonymized, aggregated metrics only.

5. Analytics and Microsoft Clarity

We partner with Microsoft Clarity and Google Analytics to understand how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of content and online activity. Additionally, we use this information for site optimization and fraud/security purposes. These tools are only activated after you provide cookie consent. To learn how Google uses data from sites that use their services, visit https://www.google.com/policies/privacy/partners/. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement).

6. Sharing

We do not sell personal information. We share information only with sub-processors that help us deliver the Service (cloud hosting, error tracking, billing), under contractual obligations consistent with this policy. A current sub-processor list is available on request.

7. Data retention

Account data is retained for the life of your account plus 90 days. Findings and reports are retained per your plan (30 days on Starter, 1 year on Growth, custom on Enterprise). You may request earlier deletion at any time.

8. Your rights

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your personal information, and to object to or restrict certain processing. Contact legal@launchsafe.com to exercise these rights.

9. Security

We use industry-standard administrative, technical, and physical safeguards. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). We follow least-privilege access controls and log all production access.

10. International transfers

If you access the Service from outside the United States, your information may be transferred to and processed in the United States. We rely on Standard Contractual Clauses where required by EU/UK data protection law.

11. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from them.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days before they take effect.

13. Contact

Privacy questions, requests, or complaints: legal@launchsafe.com. EU/UK representative: available on request.

Questions? Email legal@launchsafe.com