Privacy Policy

1. Data Controller

Launchpad Technologies S.L., registered in Barcelona, Spain, is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).

2. Information We Collect

Account data: Name, email address, phone number, country of residence, and identity verification documents required for KYC/AML compliance.

Investment data: Investment amounts, campaign preferences, transaction history, and portfolio information.

Usage data: Pages visited, features used, device information, IP address, and cookies/analytics data collected via PostHog (self-hosted).

Communication data: Support tickets, feedback, and correspondence with our team.

3. How We Use Your Data

We process your data for: (a) providing and improving the Service, (b) verifying your identity and complying with KYC/AML regulations, (c) processing investments and managing escrow accounts, (d) communicating about your investments and platform updates, (e) analytics and product improvement using privacy-respecting tools (PostHog with anonymized IPs).

4. Legal Basis for Processing

We process your data under the following legal bases: (a) Contractual necessity for providing the Service, (b) Legal obligations under financial regulations, (c) Legitimate interests for platform security and improvement, (d) Your explicit consent for optional features like marketing communications.

5. Data Sharing

We do not sell your personal data. We share data only with: (a) Escrow and payment partners for transaction processing, (b) Regulatory authorities as required by law, (c) Campaign founders (limited to investment-relevant information), (d) Service providers under strict data processing agreements.

6. Data Retention

Account data is retained for the duration of your account plus 5 years for regulatory compliance. Investment records are retained for 7 years. Analytics data is anonymized after 12 months. You may request earlier deletion where not prohibited by law.

7. Cookies & Tracking

We use essential cookies for authentication and security. Analytics are handled via PostHog with anonymized IP addresses and a stable anonymous ID for session continuity. We do not use third-party advertising trackers. You may disable non-essential cookies in your browser settings.

8. Your Rights (GDPR)

You have the right to: (a) Access your personal data, (b) Rectify inaccurate data, (c) Erasure ("right to be forgotten"), (d) Restrict processing, (e) Data portability, (f) Object to processing, (g) Withdraw consent at any time. To exercise these rights, contact privacy@launchpad.example.com.

9. Data Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and access controls. All financial data is processed through PCI-DSS compliant payment partners.

10. Contact

Data Protection Officer: dpo@launchpad.example.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).