Privacy

Account data

We store your email, an optional name, a password hash, your plan, and Stripe customer identifiers if you pay. Sessions are random tokens stored as a hash in an httpOnly cookie. We do not sell personal information.

Product and lead data

When you add a product, we store the URL, the summary, the searches you keep, and the public posts that pass the intent threshold: source, link, author name as published, excerpt, score, and suggested reply. The public sample does not create an account. It does store a short-lived rate-limit counter for the IP address.

Processors

Depending on what is configured for the deployment:

• Postgres (Neon, Supabase, or another host) stores the database.
• Vercel hosts the app and runs the cron jobs.
• Stripe processes subscriptions and the customer portal.
• OpenAI receives page text and public post text to draft searches, scores, and Pro replies, when an API key is set. Without a key, a local keyword heuristic is used and that text is not sent to OpenAI.
• Resend sends the digest, when an API key is set.
• ActiveCampaign receives your email, name if you gave one, and a plan tag, when the API URL and key are set. The list is named LaunchRadar Signups. If those variables are missing, signup still works and nothing is sent.
• Hacker News (Algolia), Bluesky, and optionally X receive the search queries, not your password.

Deletion

Settings includes delete account. That removes the user, products, and leads from our database. Cancel an active subscription in the Stripe portal first if you are paying. You can also email kustommelts@gmail.com.

Contact

Privacy questions go to kustommelts@gmail.com.