Privacy Policy
Last updated: March 2026
1. Data Controller
LaunchShield is operated by:
J. Bales
Cami Dalt D'Alella, 22
08391 Tiana - Barcelona (España)
Contact: hello@launchshield.dev
2. Information We Collect
We collect the following types of information:
- Account Information: Email address, name, and GitHub profile information when you sign up.
- Repository Data: Metadata about repositories you connect (names, branches, commit history).
- Analysis Data: Security scan results and findings from our automated analysis.
- Usage Data: How you interact with our platform, including IP address, browser type, and access times.
3. How We Use Your Information
We use your information to:
- Provide and maintain our security analysis services
- Generate security reports and release verdicts
- Communicate with you about your account and services
- Improve our products and develop new features
- Comply with legal obligations
4. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data. Source code is analyzed in ephemeral workspaces and is not stored persistently. Security findings and reports are retained according to your subscription plan.
5. Data Sharing
We do not sell your personal data. We may share information with:
- Service providers who assist in operating our platform
- Legal authorities when required by law
- Other parties with your explicit consent
6. Your Rights
Under GDPR and applicable data protection laws, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure of your data
- Restrict or object to processing
- Data portability
To exercise these rights, contact us at hello@launchshield.dev.
7. Data Retention
We retain your personal data only for as long as necessary to provide our services and comply with legal obligations:
- Account data: Retained while your account is active and for 30 days after deletion
- Analysis reports: Retained according to your subscription plan (30-365 days)
- Billing records: Retained for 10 years as required by Spanish tax law
- Audit logs: Retained for 90 days for security purposes
8. International Data Transfers
Your data is primarily processed and stored within the European Union. When we use service providers outside the EU (such as cloud infrastructure providers), we ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) or other mechanisms approved by the European Commission.
9. Cookies and Tracking
We use the following types of cookies:
- Essential cookies: Required for authentication and session management (cannot be disabled)
- Analytics cookies: Google Analytics to understand usage patterns (can be disabled)
- No advertising cookies: We do not use cookies for advertising or tracking across websites
You can control cookies through your browser settings or opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.
10. Children's Privacy
Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use of our services after changes constitutes acceptance of the updated policy.
12. Data Protection Officer
For data protection inquiries, you may contact our Data Protection Officer at: privacy@launchshield.dev
13. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid, España
Website: www.aepd.es
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact:
J. Bales
Cami Dalt D'Alella, 22
08391 Tiana - Barcelona (España)
Email: hello@launchshield.dev