Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

2.1 Data You Provide Directly

We collect personal data that you provide to us, including:

• Name and email address
• Account credentials
• Billing and payment information (processed by third-party payment providers)
• Communications with support
• Content you upload or generate using the Service

2.2 Data Collected Automatically

When you use the Service, we automatically collect certain technical and usage data, including:

• IP address
• Browser type and version
• Device and operating system information
• Usage data (e.g. pages accessed, actions performed)
• Date and time of access

This data is required to ensure the security, stability, and improvement of the Service.

3. Purposes and Legal Bases of Processing

We process personal data only where permitted by law. The legal bases under Article 6 GDPR include:

Our legitimate interests include ensuring platform security, preventing abuse, and improving product quality.

4. Payment Processing

Payments are processed securely by third-party payment providers such as Stripe. We do not store full payment card details. Payment providers process personal data independently as separate data controllers under their own privacy policies.

5. Data Sharing and Processors

We do not sell personal data. We may share personal data with trusted third-party service providers acting as data processors, including:

• Payment processors
• Hosting and cloud infrastructure providers
• Email and communication services
• Error monitoring and security services

All processors are contractually bound to process data only on our instructions and in compliance with GDPR.

6. International Data Transfers

Some service providers may process data outside the European Union. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards, including:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Account data: for the duration of the account
• Billing data: as required by tax and accounting laws
• Usage and log data: for security and analytics purposes for a limited period
• Communications: as long as necessary to resolve inquiries

Data may be retained longer where required by legal obligations.

8. Cookies and Tracking Technologies

When you first visit our website, a cookie banner lets you accept, reject, or customize non-essential cookies. Optional cookies are set only after you opt in (Art. 6(1)(a) GDPR). We use the following cookies and similar technologies:

• Essential (no consent required): alf_consent stores your cookie choices for 180 days; sidebar_state remembers interface preferences. These are required for the Service to work and are never used for tracking.
• Analytics (consent required): with your consent, PostHog (PostHog EU Cloud, hosted in the European Union and served through our first-party proxy) sets ph_* cookies and localStorage entries on .applaunchflow.com to measure how the site is used, including session replay of your visit. Without consent, we collect only anonymous, cookie-free usage statistics (no identifier is stored on your device) based on our legitimate interest (Art. 6(1)(f) GDPR) in understanding aggregate site traffic. We also use Vercel Analytics, which is cookieless and stores no identifier on your device.
• Marketing (consent required): if you arrive through a partner link, a referral cookie (alf_ref, 30 days, shared with our dashboard subdomain) attributes your signup to the partner who referred you. We do not use advertising networks.

You can change or withdraw your consent at any time via the “Cookie Settings” link in the footer of every page. Withdrawing analytics consent deletes the PostHog cookies and storage from your device.

9. Your Rights Under GDPR

You have the following rights under GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time

To exercise your rights, contact us at yannick@applaunchflow.com.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence or place of work. For Germany, this is the relevant Landesdatenschutzbehörde.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration.

12. Children’s Data

The Service is intended for users 18 years or older. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect upon publication. Continued use of the Service constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: