Privacy Policy

Last updated: 16 June 2026

build2launch ("we", "us") provides a product-launch planning tool at build2launch.xyz. This policy explains what personal data we process, why, and your rights under the EU/UK General Data Protection Regulation (GDPR). We collect the minimum data needed to deliver the product and we never sell it.

Who is the data controller

build2launch is the controller for the data described here. For any privacy request, reach us through Paddle, our merchant of record, at paddle.net — Paddle forwards privacy and order enquiries to us.

What we collect and why

• Your email address — to deliver your license key and magic link, send your receipt, and let you recover access. Lawful basis: performance of a contract.
• Product details you enter (product name, description, audience, launch date, links/materials) — to generate and store your launch plan and progress. Lawful basis: performance of a contract.
• Your launch progress (which items you've checked, your tracking notes) — to save your work across devices. Lawful basis: performance of a contract.
• Payment information — handled entirely by Paddle, our payment provider and merchant of record. We never see or store your card details; we receive only a confirmation that payment succeeded and your email. Lawful basis: performance of a contract.
• Aggregate, cookieless usage analytics — via Cloudflare Web Analytics, which does not use cookies, does not fingerprint, and does not collect personal data. Lawful basis: legitimate interest in improving the service.

We do not use advertising or tracking cookies, and we do not run third-party marketing trackers.

How your launch content is generated

To generate your personalized plan and draft copy, the product details you submit are sent to our language-model provider (OpenRouter, which routes to the configured model provider) solely to produce your plan. This is a single, server-side request per generation. We do not use your content to train models.

Processors we use

• Cloudflare — hosting, database (D1), email sending, and cookieless analytics.
• Paddle — payment processing and merchant of record (PCI-compliant; controller of your payment data, and the seller on your receipt).
• OpenRouter — language-model routing for plan generation.

These providers may process data outside your country; where required, transfers rely on appropriate safeguards (e.g. Standard Contractual Clauses).

How long we keep it

We keep your license, plan and progress for as long as your account is active so you can return to your launch. You can request deletion at any time (see below); on deletion we remove your license and all associated plan and progress data. Payment records are retained by Paddle and by us as required for tax/accounting law.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise any of these, contact us through Paddle at paddle.net (using your purchase email) and we'll respond within 30 days. You also have the right to lodge a complaint with your local data-protection authority.

Security

Data is encrypted in transit (HTTPS). License keys are stored only as hashes. Access to your dashboard requires your license key or a signed session token. We apply least-privilege and keep secrets out of the browser.

Children

build2launch is not directed to anyone under 16, and we do not knowingly collect their data.

Changes

We'll update the date above when this policy changes and, for material changes, notify purchasers by email.

Questions? Reach us via Paddle at paddle.net.