Privacy Policy

Launchfit · Milton Keynes, England
Last Updated: 20 June 2026

This Privacy Policy explains how Launchfit (a trading name of ASAAP Technologies Limited, registered in England & Wales, company number 16269186) collects, uses, stores, and protects your personal information. If you have any questions about this policy, please contact us at hello@launchfit.io.

1. Who We Are

Launchfit is a trading name of ASAAP Technologies Limited, registered in England & Wales, company number 16269186. ASAAP Technologies Limited is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: hello@launchfit.io

2. What Information We Collect and Where It Is Stored

From payment: When you complete the early access payment, Stripe collects your name and email address as part of the transaction. This information is stored in Stripe's secure dashboard — it is not stored in a separate Launchfit database at this stage. Your payment card details are processed entirely by Stripe and are never visible to us.

From email communications: Your email address is passed from Stripe to Brevo (our email platform) so we can send you product updates. It is stored in your Brevo contact record.

From scan use (at launch): When you use Launchfit to scan your codebase, scan results and findings will be stored in our secure database. We will never store your source code — only the findings generated from it.

From direct communications: If you contact us by email, we may retain those communications in order to respond to you effectively.

3. What We Do Not Store

• Your source code — when you submit code for scanning, it is processed to generate findings and is not retained beyond the duration of that scan
• Your payment card or bank details — these are handled entirely by Stripe under Stripe's own data processing terms

4. How We Use Your Information

We use your personal information to:

• Process your early access reservation and send you a confirmation
• Send you product updates about the build (a sequence of up to 4 emails)
• Invite you to participate in feedback calls and product surveys
• Notify you when Launchfit launches and grant you early access
• Credit your $5 reservation fee against your first scan at launch
• Comply with our legal, tax, and accounting obligations

5. Email Communications

After payment, you will receive a small sequence of emails about the product build. These are sent via Brevo (formerly Sendinblue). You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email. Unsubscribing will not affect your reservation status or your right to a refund.

6. How Long We Keep Your Data

• Customer records (name, email, payment confirmation): Retained while your reservation is active, and thereafter as required by UK accounting and legal obligations (typically 7 years).
• Scan results: Automatically deleted 30 days after each scan is completed.
• Source code submitted for scanning: Never stored — deleted immediately after the scan completes.

7. Who We Share Your Data With

We use the following third-party service providers (data processors) to deliver the service. Each has a Data Processing Agreement in place that meets UK GDPR requirements:

Current (validation stage):

• Stripe (stripe.com/privacy) — payment processing and customer record storage. Stripe holds your name, email, and payment confirmation. Stripe is PCI DSS Level 1 certified and UK GDPR compliant with a UK Addendum to their DPA.
• Brevo (brevo.com/privacy) — email communication. Receives your email address from Stripe via webhook to send product update emails.
• Vercel (vercel.com/privacy) — web hosting for the Launchfit landing page.

Added at product launch:

• Supabase (supabase.com/privacy) — scan results database, hosted in the EU (UK or Frankfurt region). Will store scan findings only — never source code.

We do not sell, rent, lease, or trade your personal data with any third party for their own purposes.

8. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — ask us to correct any inaccurate data
• Right to erasure — ask us to delete your personal data ("right to be forgotten")
• Right to data portability — request your data in a portable, machine-readable format
• Right to object — object to us processing your data for direct marketing purposes
• Right to restrict processing — ask us to limit how we use your data in certain circumstances

To exercise any of these rights, email us at hello@launchfit.io. We will acknowledge your request within 5 business days and respond in full within 30 days.

9. Data Security

• All data in transit is encrypted using HTTPS / TLS.
• Your name and email are currently stored within Stripe's infrastructure, which is ISO 27001 certified and PCI DSS Level 1 compliant — among the highest security standards available.
• Email contact data held in Brevo is stored on EU-based servers.
• At launch, scan result data will be stored on Supabase servers in the EU (UK or Frankfurt region).
• Access to your personal data is restricted to the founder only at this stage of the business.

10. Cookies

We use basic analytics cookies to understand how visitors use our website (page views, referral sources). We do not use advertising cookies, retargeting cookies, or third-party tracking cookies.

You can disable cookies in your browser settings at any time. Doing so will not prevent you from making a reservation.

11. Changes to This Policy

We may update this Privacy Policy from time to time as the product and our data practices evolve. If we make material changes — particularly changes that affect how we use your data — we will notify you by email. The date at the top of this page will always reflect when it was last updated.

12. Contact and Complaints

For any data-related questions, access requests, or deletion requests:

Email: hello@launchfit.io

Address: Milton Keynes, England, United Kingdom

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113
• Address: Wycliffe House, Water Lane, Wilmslow, SK9 5AF