Privacy Policy

Last updated: November 2, 2026. Template — have counsel review before launch.

What we collect

• Account: your email address, check balance and purchase history, and Stripe customer ID.
• Sites: the domains you add, their verification status and the key paths you configure.
• Scan reports: findings with masked evidence (e.g. sk_live…a1b2), HTTP status codes, timings and row counts.

What we never store

• Full API keys or secrets found on your site (they are masked before saving).
• Contents of exposed files such as .env.
• Rows from your database. Our Supabase check only requests row counts.

Processors

Hosting (Vercel), database (Neon Postgres), email delivery (Resend), payments (Stripe) and email marketing (ActiveCampaign — you can unsubscribe from marketing at any time via the link in any email).

Retention

Reports are kept while your account is active. Deleting a site deletes its reports; deleting your account deletes all your data within 30 days, except billing records we must retain by law.

Your rights

You can request access, correction or deletion of your data at support@launchmedic.dev.

Cookies

We use one essential, HTTP-only session cookie to keep you signed in. No advertising cookies.