Privacy Policy

1. Who we are

"AeroLaunch", "we", "us", or "our" in this policy means the operator of aerolaunch.app. You can reach us at hello@aerolaunch.app for any privacy-related question, request, or complaint.

2. What data we collect

There are a few situations where we end up holding any of your data:

When you visit the website

Our pages are served through Cloudflare. Cloudflare keeps short-lived security and performance logs (IP address, request URL, user-agent, timestamp) - this is necessary to deliver the site, block abuse, and keep things online. We don't run Google Analytics, Facebook Pixel, or any tracking cookies on aerolaunch.app.

When you buy a theme

Payments are processed by our checkout provider, which acts as the merchant of record for the sale. The checkout provider collects what's needed to complete the sale - your name, email, country, billing details, and payment method - under its own privacy policy. We receive your name, email, the order number, and the country/region from them. We never see your card number or full billing address. The current provider is named in section 5 below.

When you email us

If you contact us at hello@aerolaunch.app (support, refund, license question, anything), we keep your email thread so we can answer and so we have a record if it comes up again.

When you use the Builder

The AeroLaunch Builder (builder.aerolaunch.app) is the signed-in visual editor for buyers. To run it and understand how it's used, we record product-analytics events through PostHog - for example, that you signed in, created, opened or downloaded a build, or viewed the unlock screen. Because you sign in with Gumroad, these events are linked to your Gumroad account: your user ID, email, and name, plus which themes you own and whether you have builder access. PostHog also records your IP address (used for coarse location and abuse prevention).

We do not record what you build. The editor never sends the text, images, or content of the site you're working on to analytics - only the fact that an action happened. There is no session recording or screen capture.

3. How we use it

• Deliver the theme you bought and the license to use it.
• Send you theme updates and important notices about your purchase. These are rare and transactional - we don't run a marketing newsletter (yet; if we ever do, it'll be opt-in only).
• Answer your questions and provide support.
• Detect and prevent fraud, abuse, and security issues on the site.
• Meet legal obligations (tax records, in particular).

4. Legal basis (GDPR)

• Contract - to deliver the theme and the license you paid for.
• Legitimate interest - to keep the site secure, to operate the business (e.g. server logs), and to understand how the Builder is used so we can improve it (product analytics).
• Legal obligation - to keep tax-relevant records as required by law.

5. Third parties we use

We use a small number of vendors to actually run the business. They each have their own privacy policies:

• Gumroad - checkout, payments (as merchant of record), theme delivery, and download links.
• Cloudflare - hosting, CDN, DDoS protection, edge logs.
• Email provider - used to send and receive messages at hello@aerolaunch.app.
• PostHog - product analytics for the Builder (builder.aerolaunch.app), hosted in the EU.

We do not sell your data, rent it, or share it with anyone outside this list.

6. Cookies and tracking

aerolaunch.app does not set marketing or analytics cookies. Strictly necessary cookies may be set by Cloudflare for security (for example, to detect bot traffic) - these are required to make the site work.

The signed-in Builder (builder.aerolaunch.app) is different: PostHog stores a first-party cookie / local-storage entry there to recognise your browser across visits and tie product-analytics events to your account. This applies only to the Builder, not to aerolaunch.app.

When you go through checkout, our checkout provider operates the checkout page on its own domain and may set its own cookies there. Those are governed by the checkout provider's privacy policy, not this one.

7. Data retention

• Server / security logs: short-term, typically days to a few weeks, then deleted.
• Order records (name, email, order number): kept as long as required by applicable tax law (around five to ten years in the EU), and at least as long as we're obligated to support that purchase with updates.
• Support emails: kept indefinitely unless you ask us to delete them.
• Builder product-analytics (PostHog): kept only as long as it's useful to understand and improve the Builder, then deleted or aggregated.

8. Your rights

Under GDPR and similar laws, you have the right to:

• Access the data we hold about you.
• Have it corrected if it's wrong.
• Have it erased (subject to legal record-keeping obligations).
• Restrict or object to certain processing.
• Request a portable copy.
• Withdraw any consent you've given.
• Lodge a complaint with your local data protection authority.

Email hello@aerolaunch.app to exercise any of these rights. We respond within 30 days, usually much sooner.

9. International transfers

Some of our vendors (Gumroad, Cloudflare) are based in the United States and may process your data outside the EU/EEA. Where required, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards. Our product analytics (PostHog) is hosted in the EU, so that data stays within the EU/EEA.

10. Children

AeroLaunch is intended for developers and businesses. We don't knowingly collect data from anyone under 16. If you believe a child has provided us with personal data, email us and we'll delete it.

11. Changes to this policy

If we change anything material, we'll update this page and bump the "last updated" date at the top. For significant changes affecting existing customers, we'll also email you.

12. Contact

Privacy questions, complaints, or data requests: hello@aerolaunch.app. Real human reads every message.