Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

2.1 Data You Provide Directly

We collect personal data that you provide to us, including:

• Name and email address
• Account credentials
• Billing and payment information (processed by third-party payment providers)
• Communications with support
• Content you upload or generate using the Service

2.2 Data Collected Automatically

When you use the Service, we automatically collect certain technical and usage data, including:

• IP address
• Browser type and version
• Device and operating system information
• Usage data (e.g. pages accessed, actions performed)
• Date and time of access

This data is required to ensure the security, stability, and improvement of the Service.

3. Purposes and Legal Bases of Processing

We process personal data only where permitted by law. The legal bases under Article 6 GDPR include:

Our legitimate interests include ensuring platform security, preventing abuse, and improving product quality.

4. Payment Processing

Payments are processed securely by third-party payment providers such as Stripe. We do not store full payment card details. Payment providers process personal data independently as separate data controllers under their own privacy policies.

5. Data Sharing and Processors

We do not sell personal data. We may share personal data with trusted third-party service providers acting as data processors, including:

• Payment processors
• Hosting and cloud infrastructure providers
• Email and communication services
• Error monitoring and security services

All processors are contractually bound to process data only on our instructions and in compliance with GDPR.

6. International Data Transfers

Some service providers may process data outside the European Union. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards, including:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the European Commission

7. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

• Account data: for the duration of the account
• Billing data: as required by tax and accounting laws
• Usage and log data: for security and analytics purposes for a limited period
• Communications: as long as necessary to resolve inquiries

Data may be retained longer where required by legal obligations.

8. Cookies and Tracking Technologies

We use essential cookies and similar technologies to operate and secure the Service. Optional analytics or marketing cookies are used only where legally permitted and, where required, with your consent. You can manage cookie preferences through your browser settings.

9. Your Rights Under GDPR

You have the following rights under GDPR:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time

To exercise your rights, contact us at support@applaunchflow.com.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence or place of work. For Germany, this is the relevant Landesdatenschutzbehörde.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration.

12. Children’s Data

The Service is intended for users 18 years or older. We do not knowingly collect personal data from children.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect upon publication. Continued use of the Service constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or our data practices, contact us at: