Last updated: May 30, 2026.
1. Who we are
LaunchWithAgency ("we") operates launchwithagency.com and the associated services. This Policy describes how we collect, use, share and protect personal data, in compliance with LGPD (Brazil) and GDPR (EU) where applicable.
Controller: LaunchWithAgency. Contact: [email protected].
2. Data we collect
Data you provide:
- account: name, email, password (stored hashed);
- payment: billing data processed by our payment provider (we do not store full card numbers);
- content: text, images, contact lists and customer data you submit to the Service.
Data collected automatically:
- usage logs: IP address, user-agent, pages visited, timestamps;
- cookies essential for session and preferences (language);
- email metrics: opens and clicks when the recipient interacts.
We do not use third-party tracking cookies for advertising. We do not sell your data.
3. How we use data
- Operate the Service: authenticate, process payments, deliver emails, render pages, run flows.
- Support: answer questions and investigate issues.
- Service communications: important notices about your account, changes to the Terms or this Policy.
- Improvements: anonymous aggregates to understand usage and identify bugs.
- Legal compliance: respond to lawful authority requests when required by law.
4. Legal basis (GDPR / LGPD)
- Contract performance: operating the account and Service you signed up for.
- Legitimate interest: security, fraud prevention, product improvements.
- Consent: for our optional newsletters (you can withdraw at any time).
- Legal obligation: tax law, anti-fraud, court orders.
5. Sharing with third parties
We share data only with processors that need it to operate the Service:
- Email provider (Resend or similar) — delivering the messages you send;
- Hosting provider (Fly.io or similar) — infrastructure;
- Payment processor — billing paid plans;
- First-party analytics (no cross-site tracking).
All processors are bound by contract and process data according to our instructions.
6. International transfer
Servers may be located in different countries. When data of users in Brazil or the EU is transferred outside those territories, we use adequate safeguards (standard contractual clauses).
7. Retention
- Active account: while your account exists.
- After termination: 30 days to allow recovery, then permanent deletion.
- Usage logs: 90 days.
- Tax data: for the legal period (up to 5 years in Brazil).
8. Your rights
Under LGPD and GDPR you have the right to:
- confirm the existence of processing;
- access the data;
- correct incomplete or inaccurate data;
- anonymize, block or delete unnecessary data;
- data portability;
- withdraw consent.
To exercise any right: [email protected]. We reply within 15 days.
9. Security
We use encryption in transit (TLS), password hashing, per-tenant isolation in the database and access controls. No system is 100% secure; in case of an incident affecting your data, we will notify you and the competent authority (ANPD) as required by law.
10. Children
The Service is not intended for users under 18. We do not knowingly collect data from children.
11. Changes
We may update this Policy. Material changes will be communicated by email 30 days in advance.
12. Contact
Data Protection Officer (DPO): [email protected].