Who the controller is
- Controller: Codelabs Studio, S.L.
- Tax ID (CIF): B88708797
- Address: Paseo Federico García Lorca, 6, 3º E, 29130 Alhaurín de la Torre (Málaga), Spain
- Privacy email: privacidad@launchsuite.pro
- General contact: hola@launchsuite.pro
What data we process
- Waitlist: your email address, the language you signed up in and the page you signed up from.
- Account: name, email address and password. The password is stored by our identity service as a hash; we never see it in plain text.
- Workspace and projects: the names, websites and settings you enter, the people you give access to and their role.
- Connected social accounts: the identifiers and names of the pages, accounts, organisations and channels you authorise, and the access tokens each platform gives you. Per-platform details are in Platform data.
- Content: the text, images and videos you schedule or publish, and the log of each post (date, destination, result and link).
- Technical data: IP address, browser, and access and error logs, needed to keep the service secure.
We do not request special categories of data and do not need them to provide the service.
What we use it for and on what legal basis
| Purpose | Legal basis |
|---|---|
| Telling you about the launch if you join the waitlist | Your consent, which you can withdraw at any time |
| Creating and maintaining your account and projects | Performance of the contract (the terms of service) |
| Connecting your networks, publishing what you schedule and showing you results | Performance of the contract |
| Sending you service emails (password recovery, publishing or budget alerts) | Performance of the contract |
| Protecting the service against abuse and attacks | Legitimate interest in keeping the service secure |
| Meeting accounting and tax obligations once there is billing | Legal obligation |
We do not sell your data, we do not advertise with it and we do not use it to train artificial intelligence models. We do not make automated decisions with legal effects about you.
How long we keep it
- Waitlist: until you unsubscribe or, at most, 24 months after you signed up.
- Account, projects and content: while your account is active. If you close it, we delete them within 30 days at most.
- Social access tokens: while the connection is active. They are deleted as soon as you disconnect the account, revoke the permission on the platform or ask us to delete your data.
- Security logs: up to 90 days.
- Deletion requests: we keep the request code and status (without the deleted data) for 12 months, to be able to show it was handled.
- Billing data: for the periods required by law (up to 6 years under the Spanish Commercial Code).
Who we share it with
Only with providers we need to run the service, under a data processing agreement where applicable, and with the platforms you choose to connect:
- Hetzner Online GmbH: dedicated server in Germany (European Union) hosting the application and the database.
- Email: our own mail server (Mailcow) on our infrastructure, for service emails.
- Cloudflare, Inc.: DNS and content delivery network, which protects and speeds up access to the website.
- Meta, LinkedIn, Google (YouTube) and TikTok: when you connect your accounts, we send them what you schedule for publishing. Each platform processes that data as a controller under its own policy.
- Zernio: only if you choose that gateway to publish to a network. In that case we send it the content and destination of the post.
We do not disclose data to third parties unless required by law.
Transfers outside the European Economic Area
Our servers are in the European Union. Some providers (such as Cloudflare, or Zernio if you choose it) or the platforms you connect may process data outside the European Economic Area. In those cases the transfer relies on a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or on standard contractual clauses.
How we protect it
- All traffic is encrypted with HTTPS.
- Social access tokens are stored encrypted with AES-256-GCM; the key is not in the database.
- Each workspace is isolated: nobody from another workspace can see your projects or accounts.
- Access to the servers is restricted and goes through a private network.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by emailing privacidad@launchsuite.pro. Where processing is based on your consent, you can withdraw it at any time without affecting prior processing. We reply within one month at most.
To delete the data we obtained from a social network, follow the data deletion instructions.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.
Minors
LaunchSuite is a professional tool for people aged 18 and over. We do not knowingly collect data from minors.
Changes to this policy
If we change anything significant, we will publish it here with a new date and, if you have an account, tell you by email before it applies.