Privacy policy
Last updated 24 October 2026
Who we are
Smart Scuff Solutions SRL operates LaunchMic. Contact [email protected] for access, correction, deletion or marketing objections. Effective 24 October 2026.
Your data
You sign in with a one-time link sent to your email address. We store that address, a random account ID and your sign-in sessions; links and session tokens are kept only as keyed hashes. The ID links your submissions and votes. Your email is not published in product listings. We store product information, queue status and moderation records to provide the service. Expired sessions and sign-in links are deleted automatically.
Payments
When enabled, Paddle processes checkout as merchant of record. We retain transaction identifiers and payment status, never card numbers. Payment records may be retained for accounting, disputes and fraud prevention.
Discovery and invitations
We record public product metadata and source links from permitted feeds or direct imports. Discovery records are private and never auto-published. Contacts include source and permission evidence. Invitations require opt-in or a documented supported corporate business-contact review and approved provider. A public email address alone is not consent. Every invitation includes sender identity, contact source and an unsubscribe link.
Retention and choices
Unused discovery and uncontacted records are deleted after 90 days; sent-message and audit records after 12 months, except records needed for active submissions, accounting, disputes and suppression. Use the email unsubscribe link or contact support to object to marketing. Minimum suppression records are retained to prevent future contact.
Providers
LaunchMic runs on a server operated by Smart Scuff Solutions SRL at Hetzner Online GmbH in Germany, behind Cloudflare for DNS, TLS and network protection. Sign-in emails are sent through Resend (EU region). Mail to [email protected] is forwarded by Cloudflare Email Routing. A separately approved relay handles invitations only if sending is enabled. Providers may process data outside your country under their contractual safeguards. Authentication uses one necessary session cookie. We add no advertising trackers, tracking pixels or sign-in newsletter subscription.