Privacy Policy

1. Introduction

This Privacy Policy describes how A.I. Launch Pods ("we," "us") collects, uses, stores, and shares information when you use Compliance PreCheck (the "Service"). By using the Service, you consent to the practices described below.

If you do not agree with this Policy, do not use the Service.

2. Information We Collect

We collect the following categories of information:

• Account information: email address, password (stored as a salted cryptographic hash, never in plaintext), account creation timestamp.
• Uploaded documents: files you submit as the primary or reference documents for a compliance check.
• Check data: the frameworks you select, parameters you choose, and the reports generated.
• Billing information: collected and stored by our payment processor (Stripe). We do not store full payment card numbers on our systems.
• Usage data: IP address, user-agent, request timestamps, and other standard web-server log data, used for security, debugging, and abuse prevention.

We do not purchase data about you from third-party data brokers.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including running compliance checks on documents you submit.
• Authenticate you and authorize access to your account.
• Bill you for checks you run and send receipts.
• Respond to support inquiries and account requests.
• Detect, prevent, and address fraud, abuse, and security risks.
• Comply with legal obligations.

We do not sell or rent your personal information. We do not use your uploaded documents or check reports to train machine-learning models.

4. Data Processing and AI Subprocessors

To perform a compliance check, the content of your uploaded documents is transmitted to a large language model ("LLM") provider for analysis. The provider we currently use is Anthropic, PBC, which processes data under its own data-processing terms that commit to not using customer inputs for model training.

Analysis is performed in real time during a check run. Document content is sent as part of the check request; it is not persisted by the LLM provider beyond their standard transient-retention period as described in their privacy documentation.

5. Data Storage and Security

Data is stored on infrastructure operated by Amazon Web Services ("AWS") in the United States. We use encryption in transit (TLS) for all data moving between your browser and our servers, and between our servers and subprocessors. Data at rest is stored on encrypted volumes.

Access to production systems is limited to authorized personnel with credentials protected by multi-factor authentication. We conduct reasonable security reviews and patch promptly for known vulnerabilities. However, no internet-based service can guarantee absolute security, and you acknowledge that you use the Service at your own risk.

6. Data Retention

Uploaded documents and generated reports are retained in your account until you request deletion or close your account. You may request deletion of specific documents, specific reports, or your entire account at any time by emailing support@ailaunchpods.com.

Billing records may be retained longer where required by tax or financial-regulatory obligations. Anonymized aggregate metrics (e.g., total number of checks run per framework) may be retained indefinitely for internal product improvement.

7. Third-Party Services

We use the following third parties to operate the Service. Each has its own privacy terms governing how it handles data.

We review our subprocessors and update this list as the Service evolves.

8. Your Rights

Depending on the jurisdiction where you reside, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate data.
• Deletion: request that we delete your data, subject to exceptions required by law.
• Portability: request a machine-readable copy of your data.
• Objection / restriction: object to or restrict certain processing activities.
• Withdraw consent: withdraw any consent you previously gave.

To exercise any of these rights, email support@ailaunchpods.com. We will respond within thirty (30) days. California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to opt out of any sale of personal information — we do not sell personal information. EU and UK residents have rights under the GDPR / UK GDPR; our legal basis for processing is contractual necessity (to deliver the Service you requested) and legitimate interests (security and abuse prevention).

9. Cookies

We use a small number of essential cookies:

• Session cookie: keeps you logged in across page loads.
• CSRF token: protects against cross-site request forgery.
• Messages cookie: briefly holds notifications we display to you after an action (e.g., "signed in successfully").

We do not use third-party advertising cookies or cross-site tracking pixels on the Service.

10. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us personal information, we will delete that information.

11. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced on the website and, where practical, by email to registered users. The "Last updated" date at the top indicates when this Policy was most recently revised.

12. Contact

Privacy questions, data requests, and complaints should be directed to support@ailaunchpods.com.

A.I. Launch Pods · ailaunchpods.com