Privacy Policy

Your email address (for sign-in and order updates); your shipping address and order details when you buy; an encrypted read-only connection to any revenue source you link, plus the verified MRR figure and milestone we read from it; and, if you choose to link it, your X (Twitter) handle for award ownership proof. We also collect basic technical logs needed to operate the site securely.

To verify revenue milestones, issue and ship awards, keep your account and orders, send transactional email (sign-in links, order and shipping notices), power the public award-lookup page, and protect the service from abuse. We do not sell your data, and we do not use your revenue data for anything other than verification.

When you connect RevenueCat or Stripe, you authorize read-only access through that provider's own consent screen. We store the resulting credential encrypted with AES-256-GCM and use it solely to read your current MRR. We cannot move money or change your account. You can disconnect at any time, which revokes the stored access.

An issued award has a public verification page showing the milestone reached, the date it was certified, and (only if you have proven ownership) your X handle. Your exact revenue figure is never shown publicly; it is stored privately and displayed only as the milestone threshold.

We share the minimum necessary with the vendors that run Launchmark: Stripe (payments), a print-on-demand partner (manufacturing and shipping, which requires your shipping address), Postmark (email), Vercel (hosting), and Neon (database). Each processes data on our behalf under their own terms.

Third-party credentials are encrypted at rest, access is read-only and least-privilege, all sensitive operations run server-side, and secrets never reach your browser. No system is perfectly secure, but we design for least exposure.

We keep account, order, and award records for as long as needed to operate the service and meet legal and accounting obligations. Encrypted connection credentials are removed when you disconnect.

You can access your data, disconnect any revenue source, and request that we anonymize your account. On an anonymization request we scrub your personal details and revoke connections while retaining the minimum order and award records required for our books. To exercise a right, contact us.

We use a session cookie to keep you signed in. We do not use third-party advertising trackers.

We may update this policy; material changes will be reflected here with a revised date.

Privacy questions or requests? Email support@launchmark.co.