Privacy Policy

Headspace Software LLC (“Company,” “we,” “us,” or “our”) operates Social Launchpad (social-launchpad.app). This Privacy Policy explains how we collect, use, disclose, and protect your personal information.

1. Information We Collect

1.1. Information You Provide

• Account information: name, email address, password (hashed)
• Profile information: display name, avatar (if provided)
• Project data: project names, descriptions, knowledge base content, voice preferences, audience targeting settings
• Content data: generated posts, replies, blog content, post metrics you log
• Payment information: processed by Stripe; we do not store credit card numbers
• Communications: messages sent through our contact form or email

1.2. Information from Third Parties

• Google OAuth: If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not access your Google contacts, calendar, or other Google services.
• Stripe: Payment status, subscription details, and billing history.

1.3. Information Collected Automatically

• Usage data: pages visited, features used, generation counts
• Device information: browser type, operating system, screen resolution
• Log data: IP address, access times, referring URLs
• Cookies: see our Cookie Policy at social-launchpad.app/cookies

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product-related notifications (feature updates, usage alerts, beta expiry)
• Generate AI content using your project context (sent to AI providers as described in Section 4)
• Analyze usage patterns to improve the Service
• Respond to support requests and communications
• Prevent fraud and enforce our Terms of Service

We do NOT use your information to:

• Train AI models
• Sell your personal data to third parties
• Send unsolicited marketing emails (except product updates you can unsubscribe from)
• Share your project data with other users

3. AI Content Generation and Data Processing

3.1. When you generate content, your project context (description, knowledge base, voice settings, recent posts, performance metrics) is sent to third-party AI providers to produce content.

3.2. AI providers we use:

• Anthropic (Claude) — Default server AI. Subject to Anthropic's usage policy. Anthropic states it does not use API inputs to train models.
• OpenAI (GPT) — Available via BYOK. Subject to OpenAI's API data usage policy.
• Google (Gemini) — Available via BYOK. Subject to Google's AI terms.

3.3. When using BYOK, your API key is encrypted (AES-256-GCM) and used solely to authenticate requests on your behalf. We do not log, share, or access your keys in plain text after initial encryption.

3.4. AI providers receive your project context as part of generation prompts. We recommend not including sensitive personal information, trade secrets, or confidential business data in your knowledge base that you would not want processed by third-party AI systems.

4. Data Sharing

We share your information only in the following circumstances:

• AI providers: Project context sent for content generation (as described above)
• Stripe: Payment processing
• Resend: Transactional and notification emails (email address and name only)
• Vercel: Hosting and content delivery (standard web hosting data)
• Supabase: Database hosting and authentication (all user data)
• Legal requirements: If required by law, subpoena, or government request
• Business transfer: In connection with a merger, acquisition, or sale of assets (with notice)

We do NOT sell your personal information.

5. Data Retention

• Account data: Retained while your account is active, plus 30 days after deletion request
• Generated content: Retained while your account is active; deleted upon account deletion
• Payment records: Retained for 7 years for tax and legal compliance (via Stripe)
• Usage logs: Retained for 12 months, then aggregated/anonymized
• Contact form messages: Retained for 24 months

6. Your Rights

All Users

• Access your personal data (request a copy via email)
• Correct inaccurate data (edit in your account settings or contact us)
• Delete your account and data (contact us at support@social-launchpad.app)
• Export your data (request via email; we will provide within 30 days)

EU/EEA Users (GDPR)

• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

California Users (CCPA)

• Right to know what personal information is collected
• Right to request deletion
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

To exercise any of these rights, contact us at support@social-launchpad.app. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for sensitive data (AES-256-GCM for API keys)
• Row-Level Security (RLS) on all user data in our database
• Authentication via Supabase Auth with secure session management
• Regular security reviews of our codebase

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users of any breach within 72 hours as required by applicable law.

8. International Data Transfers

Your data is processed in the United States. If you are located outside the US, your data will be transferred to and processed in the US. By using the Service, you consent to this transfer. We rely on standard contractual clauses and adequacy decisions where applicable for EU data transfers.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children. If we learn we have collected data from a child under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The “Effective Date” at the top will be updated.

11. Contact

For privacy questions or requests, contact us at:

Headspace Software LLC
support@social-launchpad.app
1908 Thomes Ave STE 12603
Cheyenne, WY 82001