pastelaunchPrivacy Policy
Last updated: October 18, 2026
This Privacy Policy explains how Zou Yongliang (邹永良) ("we", "us" or "our") collects, uses, stores and shares personal information when you use PasteLaunch at https://pastelaunch.com (the "Service"), and the rights available to you. We will notify you of material changes by email or on the Service.
1. Data Controller
- Controller: Zou Yongliang (邹永良)
- Privacy contact: support@pastelaunch.com
- Data Protection Officer: not applicable
2. Information We Collect
Information you provide:
- Account information: email address, optional display name, and your password, which is stored only as a salted PBKDF2 hash. We confirm your email address with a one-time code when you register, reset your password or change your email.
- Purchase information: the plan or Launch Credits you bought, amount, order status and the order reference issued by our payment processor. We never receive or store full card numbers.
- Communications: messages and custom spec requests you send through our forms or by email, together with the interface language you used.
Information collected automatically:
- Usage data: the specs you unlock or like, the first time you open each premium spec on an unlimited plan, and the dates of those actions, so we can deliver your purchases, enforce plan limits and handle refund requests.
- Technical data: IP address, browser type, device and request logs processed by our hosting provider for security, abuse prevention and troubleshooting. We use your IP address transiently to rate-limit sign-in, verification-code and form requests; we do not store it in our database, except where it appears in the headers of an email you send to our support address.
We do not use advertising trackers, and we do not collect location data or sign in through third-party social accounts.
3. How We Use Information
| Purpose | Legal basis |
|---|---|
| Providing the Service and delivering purchased content | Performance of contract |
| Processing payments, refunds and cancellations | Performance of contract |
| Customer support | Contract / legitimate interests |
| Verification codes and account security notices (password or email changes, account deletion) | Performance of contract / legitimate interests |
| Service and billing notifications | Legitimate interests |
| Security, fraud and abuse prevention | Legitimate interests |
| Complying with legal and tax obligations | Legal obligation |
We do not send marketing emails unless you have opted in, and we never sell your personal information.
4. Cookies
We use one strictly necessary cookie to keep you signed in (pl_session, up to 30 days) and browser storage on your device for your preferences: interface language, the brand details you enter to fill in specs, your preferred AI tool, checklist progress and whether you closed the announcement bar. Browser storage stays on your device and is not sent to us. We do not use analytics or marketing cookies. See our Cookie Policy for details.
5. Sharing and Processors
We share personal information only with service providers that help us run the Service, under confidentiality and data-processing obligations:
- Waffo Pancake (Waffo.com Limited) — our PCI-DSS certified payment processor and Merchant of Record. Waffo collects your payment and billing details on its checkout and processes them under its own privacy policy, and shares with us the order details needed to grant access.
- Cloudflare, Inc. — website hosting, database, file storage, security, rate limiting and routing of email sent to our support address.
- Resend, Inc. — delivery of our transactional emails (verification codes, account and security notices, and notifications to our team about your requests).
- Email providers of our team — messages you send to support@pastelaunch.com or through our forms are forwarded to our team's mailboxes, hosted by Google (Gmail) and Tencent (QQ Mail, in mainland China).
We may also disclose information where required by law or a lawful request, in connection with a merger or acquisition (with continued protection of your data), or with your explicit consent.
6. Data Security
- All traffic is encrypted in transit with TLS (HTTPS).
- Passwords are hashed; session tokens and email verification codes are stored only as hashes. Verification codes expire after 10–15 minutes and are locked after 5 wrong attempts.
- Access to production data is restricted to the operator on a least-privilege basis.
If a security incident affects your personal information, we will notify you and the relevant authorities as required by law, within 72 hours of discovery where applicable.
7. Data Retention
| Data | Retention |
|---|---|
| Account and usage data | While your account is active. When you delete your account, your email address, name, password, sessions, likes, verification codes and support messages are erased from our database immediately (copies forwarded to our team's mailboxes are deleted on request); purchase and unlock records are kept without personal details |
| Purchase records | As long as required by tax and accounting law (typically up to 7 years) |
| Email verification codes | Until used or expired; removed within 25 hours of being sent |
| Login sessions | Up to 30 days, or until you sign out |
| Support messages | Up to 2 years in our database; copies in our team's mailboxes until deleted on request |
| Technical logs (including payment notification logs) | Up to 30 days; records of unresolved payment problems are kept until resolved, then up to 30 days |
8. Your Rights
You can change your email address and password and delete your account yourself on your account page. You may also request access to, correction of, deletion of, or a portable copy of your personal information; object to or restrict certain processing; and withdraw consent at any time. Email support@pastelaunch.com from your account email and we will respond within 30 days. Where the Personal Information Protection Law of the People's Republic of China, the GDPR or similar laws apply, you have the rights they provide. You may also lodge a complaint with your local data protection authority.
9. International Transfers
Our providers operate global infrastructure, so your information may be processed outside your country of residence. Where required, transfers to our service providers are protected by safeguards such as the EU Standard Contractual Clauses included in their data processing agreements. Messages forwarded to our team's mailboxes (see section 5) are stored by Google and Tencent, including in mainland China.
10. Children
The Service is intended for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact support@pastelaunch.com and we will delete it.
11. Third-Party Services
The Service links to third-party tools such as Lovable, Bolt, Cursor, Claude, v0 and Replit. When you open them, their own privacy policies apply; this policy covers only information we collect.
12. Contact
- Privacy and support: support@pastelaunch.com
- Operator: Zou Yongliang (邹永良)
- Website: https://pastelaunch.com