Privacy Policy

We do not sell personal data. Sign-in uses Google or a confirmed email account. Card numbers never reach our servers. Product listings, comments, and ratings you publish are public on purpose.

Data controller

PeekLaunch is the controller. Email [email protected]. We respond to access, correction, and deletion requests within 30 days.

Data we collect

• Account: name, email, profile photo, Google account id when you use Google.
• Maker profile: username, headline, bio, company, social links, optional country, city, and region.
• Product data you submit: name, tagline, description, website, images, video, categories, tags, pricing, FAQ, alternatives, use cases, keywords, and launch week.
• Engagement: votes, comments, ratings, signed-in product visits, views, and Visit clicks.
• Payments via Dodo: order id, amount, status. Not card numbers.
• Server logs: path, status, user agent, and IP for about 30 days, for abuse control.

How we use it

We run the weekly board, authenticate you, moderate abuse, process upgrades and ads, send transactional mail you opted into, and — only when you click generate — send product copy to OpenAI for a launch story or a listing prefill.

Legal bases

Contract for accounts and paid features. Legitimate interest for abuse control, security logs, and the dofollow badge check. Consent for optional emails. Legal obligation for tax records.

Sharing

We share data only with processors needed to run the site:

• Supabase — Postgres and email authentication.
• Vercel — hosting.
• ImageKit — product images you upload.
• Dodo Payments — checkout.
• Google — OAuth when you choose that sign-in.
• OpenAI — only when you trigger prefill or a Premium+ story.

We do not run an ad network and we do not have an affiliate cookie program.

Retention

Account data stays while the account is open. Dashboard settings can delete the account; we then remove products, comments, votes, and sessions we control. Backups purge within about 30 days. Payment records stay as tax law requires. Server logs stay up to 30 days.

Your rights

Subject to local law (including GDPR, CCPA, and India’s DPDP Act) you can access, correct, delete, or export your data, or object to processing. Delete the account in settings or email [email protected].

Cookies

We use first-party session cookies for NextAuth and Supabase. Details are on the cookie policy. We do not set advertising cookies.

Children

The service is not directed at children under 13. If we learn we collected a child’s data, we delete it.

Contact: [email protected].