Privacy Policy

LaunchPad (golaunchpad.ai, “LaunchPad”, “we”) is a career-management workspace: it tracks your job applications, networking contacts, tasks and schedule, and finds job postings for you. This policy explains what we collect, why, who else touches it, and the controls you have. Questions go to support@golaunchpad.ai.

What we collect

• Account: name, email address, a password hash (never the password), and, if you sign in with Google, your Google account id and profile picture URL.
• Your job search: applications, companies, contacts, interactions, tasks, schedule entries, target companies, notes, tags, and the preferences you set during onboarding (career stage, tracks, locations).
• Your resume: the file you upload, the text we extract from it, and a structured profile derived from that text (skills, experience level, education, location signals).
• Other people’s details: names, titles, employers, emails, phone numbers and notes you record about contacts and recruiters. You are responsible for having a lawful basis to store those.
• Billing: your Stripe customer and subscription identifiers and subscription status. Card numbers are entered on Stripe’s pages and never reach our servers.
• Referrals: your referral code and, if you signed up with someone’s code, that link. A referrer can see how many people used their code and whether each finished onboarding.
• Technical: server logs with your account id, request paths and timestamps. We do not run analytics, tag managers, advertising pixels or third-party tracking scripts.

How we use it

• To run the product: show your pipeline, contacts and schedule, and remind you what is due.
• To find jobs for you: your tracks, target companies and preferences drive a nightly scan of job boards and company career pages, and your resume profile is used to rank the results.
• To draft with AI: when you ask for resume tailoring or an outreach draft, the relevant resume text, job posting and contact notes are sent to an AI provider (see below) and the result is shown to you. We never send your data to AI providers except to fulfil a feature you invoked or to score job relevance for you.
• To bill you through Stripe and to answer support requests.

Who processes it for us

• Railway (hosting and the PostgreSQL database, United States).
• Stripe (payments, subscription management, receipts).
• Anthropic and/or OpenAI (AI features: resume parsing, job relevance scoring, resume tailoring, outreach drafts). We use their API products, which under their API terms are not used to train their models.
• Google (sign-in, and Gmail/Calendar access only if you connect them).
• Job boards and applicant-tracking systems (Greenhouse, Lever, Ashby, Workday and public job boards) receive only the search terms and company names needed to fetch postings, never your identity.

We do not sell personal information and do not share it with advertisers.

Google user data

If you connect Gmail or Google Calendar, LaunchPad requests read-only access (gmail.readonly, calendar.readonly). We fetch message metadata and calendar events on demand to show them to you inside LaunchPad; we do not store message contents, do not send email on your behalf, and do not share Google data with AI providers or anyone else. LaunchPad’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time from your account page, which revokes our access.

How long we keep it

• Account data is kept while your account exists. When you delete your account we cancel your subscription, revoke Google access, delete your resume files, and delete your database records immediately.
• Database backups may retain deleted records for up to 30 days before they roll off.
• Stripe retains billing records as required by financial regulation.
• Server logs are kept for a short operational window and contain no resume content.

Your controls

• Export: download your applications, contacts, tasks and interactions from your account page at any time.
• Correct: edit anything in the app.
• Delete: delete your account from the account page, or email us and we will do it within 30 days.
• Disconnect: remove Google access from the integrations section.

If you are in the EU, UK or California you have the rights those laws provide (access, portability, erasure, objection, non-discrimination). Email support@golaunchpad.ai to exercise any of them; we will verify the request from the email on the account.

Security

Data is encrypted in transit. Passwords are stored as bcrypt hashes. Google OAuth tokens are encrypted at rest. Access to production systems is limited to the people who operate LaunchPad. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.

Age

LaunchPad is for people 18 and older. We do not knowingly collect data from anyone younger; if you believe we have, email us and we will delete it.

Changes

If we change this policy in a way that matters, we will update the date above and, for material changes, tell you in the app or by email before they take effect.