Privacy Policy
Last updated August 27, 2026
The short version
We collect your email, the YouTube channel you ask us to analyze, and public data about that channel. We use it to produce your audits and coaching. We do not sell or share your personal information, we do not serve ads, we do not track you across other websites, and we do not use your data to train AI models.
Who is responsible for your data
The data controller is Launchster, [registered address — to be completed]. For anything in this policy, contact support@launchster.io.
Launchster uses YouTube API Services
Launchster uses YouTube API Services to retrieve public information about the channel you specify. By using Launchster you also agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.
Launchster does not ask you to sign in to Google and never requests access to your YouTube account — we read only data already public on your channel page. Because we hold no authorization from your Google account there is nothing for you to revoke, but you can review permissions granted to other apps on the Google security settings page.
What we collect
- • Account details — your email address and a bcrypt-hashed password. We never store the password itself.
- • Your channel — the handle, URL, or ID you provide, and the channel ID we resolve it to.
- • Public YouTube data — video titles, view counts, likes, comments, durations, publish dates, and subscriber counts.
- • Analytics you choose to upload — on plans that support it, the per-video metrics in a YouTube Studio export. Optional, and based on your consent.
- • Billing information — a Stripe customer reference. Card details are held by Stripe and never reach our servers.
- • Your audits and coaching — so you can revisit them and so we can measure change over time.
Under California law these fall into the categories: identifiers, commercial information, internet or network activity, and (for paid plans) limited financial information. We do not collect biometric, geolocation, health, or precise-location data, and we do not collect sensitive personal information as CPRA defines it.
Cookies and local storage
Launchster does not use advertising or analytics cookies and does not track you across other sites. When you log in we store a session token in your browser's local storage so you stay signed in — this is strictly necessary for the service to work, and clearing your browser storage signs you out.
Why we are allowed to process it
If you are in the UK or EU, the GDPR requires us to name a lawful basis for each purpose:
| Purpose | Lawful basis | Notes |
|---|---|---|
| Creating and running your account | Performance of a contract | We cannot provide the service without it |
| Producing audits and coaching | Performance of a contract | This is the service you signed up for |
| Sending audit and coaching emails | Performance of a contract | These are the product, not marketing |
| Taking payment | Performance of a contract | Paid plans only |
| Analytics exports you upload | Consent | Entirely optional; withdraw any time by asking us to delete them |
| Keeping the service secure and improving it | Legitimate interests | Balanced against your rights; aggregate and non-identifying wherever possible |
Who we share it with
Only the service providers below, each for the stated purpose. We do not sell your personal information, and we do not share it for cross-context behavioural advertising — under CCPA/CPRA, and in the plain sense of those words. We have never done so.
| Provider | Location | Purpose | What it receives |
|---|---|---|---|
| Anthropic (Claude) | United States | Generates your audit analysis and coaching | Channel name, video titles and public metrics. Never your email, password, or payment details. |
| Stripe | United States | Processes subscription payments | Email and payment details, collected by Stripe directly. Card numbers never reach our servers. |
| Resend | United States | Delivers your audit and coaching emails | Email address and message contents |
| DigitalOcean | United States | Hosts the application and database | All stored data, at rest |
| YouTube / Google | United States | Supplies public channel and video data | The public channel identifier we look up on your behalf |
We may also disclose information where the law requires it, or to protect the rights and safety of our users. If Launchster is ever acquired, we will tell you before your data moves to a new controller.
Where your data goes
Launchster is hosted in the United States and every provider above processes data there. If you use Launchster from the UK or EU, your personal data is transferred outside your country. We rely on the Standard Contractual Clauses, or each provider's certification under the EU–US Data Privacy Framework where they hold one, as the transfer mechanism. You can ask us for details of the safeguards that apply to any specific provider.
AI-generated coaching
Your audits and coaching messages are written by an AI model (Claude, from Anthropic) working from the data described above. This is advisory content only — it produces no legal or similarly significant effect, makes no decision about you, and is not used for profiling, credit, employment, or eligibility of any kind. A human is not involved in generating each message, so if something reads as wrong or unfair, tell us and a person will look at it.
How long we keep it
Account data and audit history are kept while your account is open. If you close your account we delete your personal data within 30 days, except records we must keep for tax and accounting purposes, which are held for the period the law requires. You can ask us to delete uploaded analytics exports at any time without closing your account.
Your rights
Wherever you live, you can exercise all of the following. We will not charge you or give you a worse service for doing so.
| Access | Get a copy of the personal data we hold about you |
| Rectification | Correct anything inaccurate |
| Erasure | Have your data deleted ("right to be forgotten") |
| Restriction | Ask us to pause processing while a dispute is resolved |
| Objection | Object to processing we carry out under legitimate interests |
| Portability | Receive your data in a portable, machine-readable format |
| Withdraw consent | Withdraw consent for anything based on it, such as uploaded analytics |
| Non-discrimination | Exercise any of these without being charged more or given a worse service |
Email support@launchster.io and we will respond within 30 days. You may use an authorised agent to make a request on your behalf; we may need to verify both their authority and your identity first.
If you are in the UK or EU and think we have handled your data badly, you have the right to complain to your local supervisory authority — you do not have to come to us first, though we would like the chance to put it right.
Children
Launchster is not intended for children. You must be at least 13, or the minimum age of digital consent where you live, whichever is higher. We do not knowingly collect data from children below that age; if you believe a child has given us data, contact us and we will delete it.
Security
Data is encrypted in transit. Passwords are hashed with bcrypt and sensitive stored values are encrypted at rest. Access to production systems is limited to people who need it. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.
Changes and contact
If we make a material change to this policy we will email you before it takes effect. Questions or complaints: support@launchster.io.