Privacy Policy

1. Who We Are

SuperLaunch.in is operated by Hostao LLC, a Wyoming corporation located at 30 N Gould St, Ste 4000, Sheridan, Wyoming 82801, USA. When this policy says "SuperLaunch", "we", "us", or "our", it refers to Hostao LLC.

Grievance Officer (India DPDPA): Reji Modiyil — grievance@superlaunch.in

2. Information We Collect

• Account Data: When you sign in via LinkedIn or Google OAuth, we receive your name, email address, and profile picture from those providers.
• Startup Submissions: Company name, website URL, tagline, description, category, stage, contact email, and any additional information you provide when submitting a startup.
• Usage Analytics: Pages visited, time spent, click patterns, referrer URLs, device type, and browser information collected via our internal analytics system (no Google Analytics).
• Cookies: Essential authentication cookies (superlaunch-session, next-auth.*), analytics cookies for page tracking, and preference cookies for theme/newsletter settings. See our Cookie Policy for details.
• Communications: Email addresses for newsletter subscriptions, support inquiries, and transactional communications.

3. How We Use Your Information

• Account management and authentication
• Processing and displaying startup listings
• Sending transactional emails (listing approved, claim verified, payment confirmations)
• Improving platform features based on usage patterns
• Delivering our newsletter to subscribers (you can unsubscribe anytime)
• Customer support and responding to inquiries
• Legal compliance and fraud prevention

4. Legal Basis for Processing

5. Data Sharing and Third Parties

We do not sell your personal data. We share data only with:

• Vercel: Hosting infrastructure (processes your requests)
• LinkedIn/Google: OAuth authentication (we don't share data back to them)
• Stripe/Razorpay: Payment processing for Pro subscriptions and promoted listings
• CookieSeal: Cookie consent management
• HelpKit: Customer support and knowledge base
• BestEmail.in: Newsletter delivery service
• Legal Requirements: When required by law or court order

6. International Data Transfers

Your data is processed on servers located in the United States through Vercel's infrastructure. For users in the EU/UK, we rely on standard contractual clauses and adequacy decisions. For Indian users, data transfers comply with DPDPA cross-border transfer requirements.

7. Data Retention

• Active accounts: Data retained while your account is active
• Startup listings: Remain live indefinitely unless removal requested
• Analytics data: Retained for 2 years for platform improvement
• Deleted accounts: Data permanently removed within 30 days of deletion request
• Legal obligations: Some data may be retained longer if required by law

8. Your Rights

To exercise any of these rights, email hello@superlaunch.in

9. Children's Privacy

SuperLaunch is not intended for children under 16 (GDPR) or 13 (CCPA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Security Measures

• HTTPS encryption for all data transmission
• JWT session tokens for secure authentication
• OAuth integration (no passwords stored on our servers)
• Regular security updates and monitoring
• Access controls and data minimization practices

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by email or through a prominent notice on our platform. The "Last updated" date will reflect any changes.

12. Contact Information