Privacy Policy
This policy explains what information Launchglass collects, why, and what you can do about it. It covers the Launchglass app at app.launchglass.com and our website at www.launchglass.com.
Launchglass is a product of Elevea, Inc., a Delaware corporation ("Launchglass", "we", "us"), 1999 Broadway, Suite 21, San Francisco, CA 94109.
The short version
- We collect what we need to run the product: your account details, the work you put into Launchglass, and how the app is used.
- We do not sell your information, and we do not use it for advertising.
- The work in a workspace belongs to the organisation that owns that workspace. We process it on their behalf.
- Signing in with Google or Microsoft gives us your name, email address and profile picture. Nothing else from those accounts.
Who is responsible for your information
Workspace content. When an organisation uses Launchglass, the content its users put in their workspace belongs to that organisation. This includes boards, cards, comments, files and votes. For that content, the organisation is the controller and we are its processor. We handle it only to provide the service to them. If you are a user in someone else's workspace, questions about that content are best sent to that workspace's admin.
Account and usage information. For your account details, our website, billing, and how the product is used, Launchglass is the controller.
What we collect
Account information. Your name, email address and password. Passwords are stored only as a one-way hash by our authentication provider, and nobody at Launchglass can read them. If an admin adds you to a workspace, we receive your name and email address from them.
Sign in with Google or Microsoft. If you choose to sign in this way, the provider tells us your name, email address and profile picture, and confirms that the email address is yours. We request no other permissions: we cannot read your email, calendar, contacts or files.
Workspace content. Everything you and your colleagues create or upload. This includes boards, cards, fields, comments, attachments, votes and the history of changes to them.
Usage information. Which pages you visit and what you click, your device and browser type, IP address, and approximate location derived from it. In the app, we also record session replays, which show the screens you used, including text typed into most fields. Password and email fields are always masked. We use replays to find bugs and understand where the product is confusing. Replays and analytics are not collected on public share links, which may be opened by people who are not our users.
Billing information. If your organisation pays for Launchglass, we receive the billing contact, company name, address and tax details, and the status of payments. Card details are handled entirely by Stripe. We never see or store full card numbers.
Email. We send account emails, such as invitations, sign-in links and password resets, and notifications you can control in your settings. Our email provider may tell us whether an email was delivered and whether a link in it was clicked. We do not track clicks on sign-in links.
Things you send us. Support requests, feedback, and requests for access made through our website.
How we use it
- To provide, secure and maintain Launchglass, including signing you in and keeping workspaces separate from one another.
- To send the emails described above.
- To bill for paid plans.
- To understand how the product is used, fix problems and improve it.
- To answer you when you contact us.
- To meet legal obligations and to prevent abuse.
Where the law requires a legal basis, we rely on: performing our contract with you or your organisation; our legitimate interest in running, securing and improving the service; your consent, where we ask for it; and legal obligations.
AI features
Some features use AI models from third parties. These include asking questions about your work and searching files by meaning. When you use one, the content needed to answer is sent to the model provider to produce the response. This may include parts of your workspace content. We use these providers through their business APIs, under terms that do not allow them to train their models on that content. The providers are listed below.
Sign in with Google: Limited Use
Launchglass's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use the information Google provides only to create and sign in to your Launchglass account.
Google user data
- What we access. If you sign in with Google, we receive your name, email address and profile picture, and confirmation that the email address is yours. These come from the
openid,emailandprofilepermissions, which are the only ones we request. - How we use it. Only to create your Launchglass account, sign you in, and show your name and picture to other users in your workspace. We do not use it for advertising, and we do not use it to develop, improve or train AI or machine-learning models.
- Who we share it with. Only the service providers that run Launchglass for us, and only to provide it: Supabase, which runs sign-in and stores your account; Twilio SendGrid, to send you email; PostHog, whose session replays can show your name and email where they appear on screen (analytics are linked to an internal ID, not your email); and Slack, for an internal alert to our team when you join. We do not sell it, and we do not transfer or disclose it to anyone else for any other purpose.
- How we protect it. It is encrypted in transit and at rest, and access to production systems is limited to staff who need it.
- How long we keep it, and how to delete it. For as long as your account exists. To delete it, email privacy@launchglass.com. We remove it from our live systems, and from backups within 30 days. You can also remove Launchglass's access at any time from your Google Account's security settings.
Who we share it with
We do not sell or rent personal information. We share it only:
- With the service providers that run Launchglass for us (below), each bound by contract to use it only to provide their service to us.
- Within your workspace. Other users in a workspace can see your name, email address, profile picture and activity in that workspace, according to the permissions its admins set.
- Through links you or your colleagues create. Content shared by public link is visible to anyone who has the link.
- When the law requires it, or to protect the rights, safety or property of our users, the public or Launchglass.
- If Launchglass is acquired or merged. In that case, this policy continues to apply to your information.
| Provider | What for |
|---|---|
| Supabase | Database, file storage and sign-in |
| Vercel | Hosting the app and website; website analytics |
| Twilio SendGrid | Sending email |
| Stripe | Payments and invoices |
| PostHog | Product analytics and session replays |
| Anthropic, OpenAI, Google, Cohere | AI features, when used |
| Google, Microsoft | Sign in with Google or Microsoft, when chosen |
| Slack | Internal alerts to our team about new sign-ups |
Our team's access
Our support staff may need to view a workspace to help with a problem. When they do, the access is read-only and requires a recorded reason. We do not otherwise look at workspace content.
Cookies
The app uses cookies that are necessary to keep you signed in. We also use analytics cookies and similar storage in the app, and privacy-friendly analytics on our website. You can block cookies in your browser. If you block the necessary ones, you will not be able to sign in.
How long we keep it
- Account and workspace content: for as long as the account or workspace exists. When a workspace is deleted, its content is removed from our live systems, and from backups within 30 days.
- Analytics and session replays: for up to 12 months.
- Billing records: as long as tax law requires.
Security
Data is encrypted in transit and at rest. Every workspace is separated from every other at the database level. Access to production systems is limited to staff who need it. No system is perfectly secure. If a breach affects your information, we will tell you as the law requires.
Where it is stored
Launchglass's database and files are stored in North America, and the app runs in the United States. Our providers may process information in other countries. Where we transfer personal information out of the UK, the European Economic Area or Canada, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Your rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you;
- correct it or delete it;
- get a copy of it in a portable format;
- object to or restrict how we use it;
- withdraw consent you have given.
To exercise any of these, email us at the address below. For content in a workspace your organisation owns, we may refer you to its admin. You can also complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioural advertising.
Children
Launchglass is a business product and is not meant for anyone under 18. We do not knowingly collect information from children.
Changes
If we change this policy, we will update the date above. If a change materially affects how we use your information, we will tell account holders by email or in the app before it takes effect.
Contact
Questions about privacy: privacy@launchglass.com Elevea, Inc., 1999 Broadway, Suite 21, San Francisco, CA 94109