Privacy Notice

Status: DRAFT · Last updated: 2026-10-18 (Hawaii time)

What we collect

• Waitlist: email address and optional app URL you submit.
• Scans (when live): the target URL, ownership-verification proof, scan metadata, and generated report content.
• Payments (when live): handled by Stripe; we receive customer and payment metadata, not full card numbers.
• Technical logs: IP address, user agent, timestamps for abuse prevention.

What we do not do

• We do not store database row contents from RLS/Firebase probes (counts only; bodies discarded).
• We do not use leaked API keys against third-party providers.
• We do not sell personal data.
• We do not train public models on your source code (MVP does not require uploading source for the free/live URL scan).

Retention

Intended default: scan artifacts deleted within 30 days after delivery unless you keep an account that stores report history. Waitlist emails kept until you ask to be removed or the product launches and you opt out.

Processors (planned)

Cloudflare (hosting/DNS), Stripe (payments), Resend or similar (transactional email), and an LLM API provider only to rewrite finding wording from scanner facts — not to invent issues.

Your choices

Email [email protected] to request deletion of waitlist or account data. Final notice will include region-specific rights where applicable.

Contact

LockdownLaunch · lockdownlaunch.com · [email protected]