Privacy Policy
Last updated: April 13, 2026
This Privacy Policy describes how personal data is collected, used, stored, disclosed, and protected when users access or use the WorthLaunching website, application, and related services.
1. Data Controller
For the purposes of applicable data protection laws, including Regulation (EU) 2016/679, the data controllers responsible for the processing of personal data are:
- Data Controllers: Yevhenii Spitsyn, operating the WorthLaunching service; Krasotin Mikhail, operating the WorthLaunching service
- Country of operation: Hungary
- Contact: worthlaunching@protonmail.com
2. Information We Collect
We collect only what's needed to provide and improve the service.
Account & Authentication Data
- Name and email address when you register directly
- Name and email address from your Google account when you sign in with Google
- Encrypted password hash (we never store your password in plain text)
- Authentication session tokens (managed by Supabase Auth)
Profile Data
- Display name stored in our database and shown within the product
Payment & Subscription Data
- Subscription status and billing tier (active, expired, free)
- Payment processing is handled entirely by Stripe — we never see or store your card details
- Stripe may retain payment records under their own policies
Usage & Analytics Data
- We do not currently use third-party behavioral analytics or tracking services
- Basic server logs (request timestamps, IP addresses) may be generated by our hosting infrastructure as a standard operational practice
3. How We Use Your Information
- To create and maintain your account
- To authenticate you securely when you sign in
- To personalise your experience (e.g. display your name in the app)
- To process subscription payments via Stripe
- To send transactional emails when necessary (e.g. email verification, password reset)
- To investigate and resolve technical issues
We do not sell, rent, or trade your personal information. We do not use your data for advertising or share it with advertising networks.
4. Legal Basis for Processing
Where applicable, we rely on the following grounds to process your personal data:
- Contract performance — to provide the service you signed up for
- Legitimate interests — to maintain security and improve the product
- Legal obligation — to retain payment records as required by law
If you are located in the European Economic Area, UK, or another jurisdiction with specific data protection requirements, the above grounds apply. Specific compliance determinations are the responsibility of the data controllers identified in this Privacy Policy.
5. Third-Party Services
We use the following third-party services to operate WorthLaunching:
Supabase
Authentication, database hosting, and server infrastructure. Your account data and profile are stored on Supabase infrastructure.
Stripe
Payment processing for premium subscriptions. Stripe handles all card data under their PCI-DSS compliant systems. We receive only subscription status and anonymised transaction references.
Google (OAuth only)
If you choose "Continue with Google," Google shares your name and email with us to create or authenticate your account. We do not receive any other Google account data.
6. Data Retention
- Your account data is retained for as long as your account is active
- If you request deletion of your account, we will delete or anonymize personal data associated with your account without undue delay and, where applicable, within one month of receiving your request, unless continued retention is required or permitted by applicable law
- Certain records, including invoices, payment records, transaction records, tax records, and accounting records, may be retained for up to 8 years or for any longer period required by applicable law, for compliance with legal, accounting, tax, audit, and fraud prevention obligations
- Payment processing is handled by Stripe. We do not store full payment card details. Stripe may retain payment-related information in accordance with its own legal, regulatory, and contractual obligations
- Anonymised or aggregated data that cannot identify you may be retained indefinitely
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Withdraw consent where processing is based on consent
- Lodge a complaint with a supervisory authority in your jurisdiction
To exercise any of these rights, contact us at worthlaunching@protonmail.com. We will respond without undue delay and, where applicable, within one month of receiving your request.
8. Security
We take reasonable precautions to protect your information:
- Authentication and session management are handled by Supabase, which uses industry-standard security practices
- Payment processing is handled by Stripe, which is PCI-DSS compliant
- Passwords are stored as bcrypt hashes — never in plain text
No internet transmission or storage system is 100% secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security.
9. Children
WorthLaunching is not intended for children under the age of 16 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the "Last updated" date at the top of this page will change. Continued use of WorthLaunching after any update constitutes your acceptance of the revised policy.
For significant changes, we will make reasonable efforts to notify you (e.g. by email or an in-app notice).
11. Contact
For questions, requests, or concerns about this Privacy Policy, contact us at: