Privacy policy

Who we are

LauncherUp is operated by Nexisia Ltd, a company in the United Kingdom (“we”, “us”). You can reach us about anything in this policy at support@launcherup.com.

Our role

Customer content. Everything a customer puts into or connects to a workspace (documents, files, chat messages, recordings, records from connected tools) is processed by us on behalf of that customer. For this content the customer is the controller and we are its processor. If you are a member of a workspace, the organisation that owns it decides how its content is used, so please send requests about that content to them first; we will help them answer.

Account, billing and website data. For the data we need to run accounts, take payments, secure the service and answer support requests, we are the controller.

Data we collect

• Account data: name, email address, password (stored only as a hash), language preference, workspace name and description, and your role in each workspace.
• Workspace content: knowledge base documents and files, chat messages and assistant replies, automations and their results, approval requests, project and customer records, meeting recordings and transcripts, and recordings made with the Piko browser extension (tab video, audio, and console and network events, with password fields redacted).
• Connection data: the access tokens and keys you give us for connected tools, stored encrypted, and the data those tools return when the assistant uses them.
• Billing data: your package, subscription status, currency and payment history. Card details are collected by Stripe; we never see full card numbers.
• Usage and technical data: AI usage records (credits, model, tokens or audio length), a log of the tool calls the assistant makes, and server logs such as IP addresses and request details, used for security and rate limiting.
• Support messages: what you send us by email.

How we use data and our legal bases

Under the UK GDPR and the EU GDPR we rely on these legal bases:

• To provide the service you or your organisation signed up for: running workspaces, the assistant, connections, automations and storage (performance of a contract).
• To send service emails such as email verification, password resets, approval requests and automation notices (performance of a contract).
• To bill you and keep accounting records (contract and legal obligation).
• To keep the service secure: rate limits, safety limits on assistant runs, abuse prevention and fixing faults (legitimate interests).
• To answer support requests (contract or legitimate interests).
• To meet legal obligations and respond to lawful requests.

We do not sell personal data, we do not use it for advertising, and we do not use customer content to train AI models.

How AI processing works

When someone asks the assistant something, or an automation runs, the request and the context needed to answer it (for example relevant knowledge base passages or the result of a tool call) are sent to an AI model provider, which returns a reply. Audio is sent to a speech provider to be transcribed. Text is sent to a model provider to build the search index for the knowledge base. These providers are listed below and process the data only to return a result to us.

AI output can be wrong or incomplete. Check important answers before relying on them.

Google user data

If a workspace connects Google Drive, LauncherUp asks for read-only access to Drive (the drive.readonly scope) and for your Google account's email address and ID. We use this access only to provide user-facing features in that workspace: searching Drive, reading files the assistant needs to answer a request, and importing a file into the knowledge base when a member asks for it and approves it.

LauncherUp's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Google Drive data is not used for advertising and is not sold or transferred to data brokers.
• Google Drive data is not used to develop, improve or train generalised AI or machine learning models.
• It is shared only with the service providers needed to provide these features (such as the AI model provider that reads a file to answer a request), for security purposes, to comply with law, or as part of a merger or acquisition.
• No person at LauncherUp reads it unless you ask us to, it is needed for security or to comply with law, or it has been aggregated and anonymised.

You can remove access at any time by deleting the Google Drive connection in the app, which revokes the grant at Google, or from your Google account's security settings.

Service providers we use

These companies process personal data for us to run LauncherUp. We have data processing terms with each of them and update this list when it changes.

Tools you connect

A workspace can connect Slack, Bitrix24, Linear, ClickUp, Trello, Discord, Google Drive, WhatsApp (through the workspace's own Twilio account), ElevenLabs (with the workspace's own key) and remote MCP servers. When it does, data moves between LauncherUp and that tool on the workspace's instructions. Each tool handles that data under the agreement between the workspace and its provider, not under this policy.

International transfers

Our servers are in Germany. Some providers above process data in other countries, including the United States. Where data leaves the UK or the European Economic Area we rely on adequacy decisions or regulations, or on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum or Agreement, plus additional safeguards where needed.

How long we keep data

• Account and workspace data is kept while the account or workspace is active.
• A workspace owner can delete the workspace in the app (Settings → Data & privacy). It is suspended at once, its subscription is cancelled and connected tools are disconnected, and all of its data and files are deleted 30 days later. Until then the owner can cancel from the link we email them.
• Anyone can delete their own account in the app (Settings → Profile). Their personal data is deleted at once. Content they added to a workspace belongs to that workspace, so it stays there and is shown as written by a deleted user.
• You can also email support@launcherup.com from the account's address; we confirm the request and delete the data within 30 days.
• Data exports you request are kept for 7 days and then deleted.
• Deleted data can remain in encrypted backups for a limited time until those backups are overwritten in the normal cycle.
• Billing and tax records are kept for as long as the law requires.
• Server logs are kept for a short period for security and troubleshooting.

Security

Data is encrypted in transit. Connection credentials are encrypted at rest and passwords are stored as hashes. Every workspace's data is kept separate, access inside a workspace follows its roles and permissions, and the assistant's write actions go through approvals and safety limits. No system is perfectly secure, so if you think your account has been compromised, contact us straight away.

Your rights

Under the UK GDPR and the EU GDPR you can ask to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent where we rely on it. You can download a copy of your own data in the app (Settings → Profile), and workspace owners and admins can export the whole workspace (Settings → Data & privacy). For anything else, email support@launcherup.com; we answer within one month. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority where you live.

If you are in Türkiye, you also have the rights in Article 11 of the Personal Data Protection Law No. 6698 (KVKK), including learning whether your data is processed, requesting information, correction or deletion, and objecting to results that affect you. You can send requests to support@launcherup.com and complain to the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu).

Cookies

launcherup.com (this website) sets no cookies and uses no analytics or tracking.

The LauncherUp app uses only cookies that are strictly necessary for it to work, so it does not ask for consent:

• launcherup_session: keeps you signed in. HTTP-only, expires after 30 days.
• launcherup_locale: remembers your language. Expires after one year.

The app also stores your theme choice in your browser's local storage. Stripe's checkout and billing pages set their own cookies under Stripe's privacy policy.

Children

LauncherUp is a business service and is not meant for anyone under 16. We do not knowingly collect data from children; if you think we have, contact us and we will delete it.

Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will also tell account owners by email or in the app.

Contact

Nexisia Ltd, United Kingdom. Email support@launcherup.com for support, privacy requests and questions about this policy.