pastelaunchPrivacy Policy
Last updated: October 17, 2026
This Privacy Policy explains how Zou Yongliang (邹永良) ("we", "us" or "our") collects, uses, stores and shares personal information when you use PasteLaunch at https://pastelaunch.com (the "Service"), and the rights available to you. We will notify you of material changes by email or on the Service.
1. Data Controller
- Controller: Zou Yongliang (邹永良)
- Privacy contact: support@pastelaunch.com
- Data Protection Officer: not applicable
2. Information We Collect
Information you provide:
- Account information: email address, optional display name, and your password, which is stored only as a salted PBKDF2 hash.
- Purchase information: the plan or Launch Credits you bought, amount, order status and the order reference issued by our payment processor. We never receive or store full card numbers.
- Communications: messages you send through our contact form or by email.
Information collected automatically:
- Usage data: prompts you unlock or like, and the dates of those actions, so we can deliver your purchases and enforce plan limits.
- Technical data: IP address, browser type, device and request logs processed by our hosting provider for security, abuse prevention and troubleshooting.
We do not use advertising trackers, and we do not collect location data or sign in through third-party social accounts.
3. How We Use Information
| Purpose | Legal basis |
|---|---|
| Providing the Service and delivering purchased content | Performance of contract |
| Processing payments, refunds and cancellations | Performance of contract |
| Customer support | Contract / legitimate interests |
| Service and billing notifications | Legitimate interests |
| Security, fraud and abuse prevention | Legitimate interests |
| Complying with legal and tax obligations | Legal obligation |
We do not send marketing emails unless you have opted in, and we never sell your personal information.
4. Cookies
We only use strictly necessary storage: a login session cookie (pl_session, up to 30 days) and a browser storage entry that remembers whether you dismissed the announcement bar. We do not use analytics or marketing cookies. See our Cookie Policy for details.
5. Sharing and Processors
We share personal information only with service providers that help us run the Service, under confidentiality and data-processing obligations:
- Waffo Pancake (Waffo.com Limited) — our PCI-DSS certified payment processor and Merchant of Record. Waffo collects your payment and billing details on its checkout and processes them under its own privacy policy, and shares with us the order details needed to grant access.
- Cloudflare, Inc. — website hosting, database, file storage, security and email forwarding.
We may also disclose information where required by law or a lawful request, in connection with a merger or acquisition (with continued protection of your data), or with your explicit consent.
6. Data Security
- All traffic is encrypted in transit with TLS (HTTPS).
- Passwords are hashed; session tokens are stored only as hashes.
- Access to production data is restricted to the operator on a least-privilege basis.
If a security incident affects your personal information, we will notify you and the relevant authorities as required by law, within 72 hours of discovery where applicable.
7. Data Retention
| Data | Retention |
|---|---|
| Account and usage data | While your account is active; deleted within 30 days after you request account deletion |
| Purchase records | As long as required by tax and accounting law (typically up to 7 years) |
| Support messages | Up to 2 years |
| Technical logs | Up to 30 days |
8. Your Rights
You may request access to, correction of, deletion of, or a portable copy of your personal information; object to or restrict certain processing; and withdraw consent at any time. Email support@pastelaunch.com from your account email and we will respond within 30 days. Where the Personal Information Protection Law of the People's Republic of China, the GDPR or similar laws apply, you have the rights they provide. You may also lodge a complaint with your local data protection authority.
9. International Transfers
Our providers operate global infrastructure, so your information may be processed outside your country of residence. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses included in our providers' data processing agreements.
10. Children
The Service is intended for users aged 18 and over. We do not knowingly collect information from children. If you believe a child has provided us with personal information, contact support@pastelaunch.com and we will delete it.
11. Third-Party Services
The Service links to third-party tools such as Lovable, Bolt, Cursor, Claude, v0 and Replit. When you open them, their own privacy policies apply; this policy covers only information we collect.
12. Contact
- Privacy and support: support@pastelaunch.com
- Operator: Zou Yongliang (邹永良)
- Website: https://pastelaunch.com