1. Who is responsible for your data?
Vibechooser PTY Ltd, based in South Africa, is the data controller (responsible party under South Africa’s Protection of Personal Information Act, POPIA) for LaunchPulse account information and our own service operations. Contact hello@vibechooser.com for privacy questions or to exercise your rights.
For subscriber information collected on a customer’s hosted waitlist, the waitlist owner determines the purpose of collection and is the responsible party for their marketing activities; we process that information to host and operate their waitlist. The owner can view subscriber details and, on Pro, export them. Contact the waitlist owner about their marketing practices; if you cannot identify them, contact us for help.
2. Information we collect and why
- Account and profile information: email address, name, optional company, authentication information and account timestamps. We use this to create your account, authenticate access and provide the service. If you sign in with Google, we receive the identity information needed for sign-in. Basis: performance of our agreement and legitimate interests in account security.
- Campaign inputs and generated content: product name, description, target audience, tone and generated copy, which may contain personal data you choose to include. We process these to generate and save your campaigns. Basis: performance of our agreement.
- Waitlist information: page name, public address, headline, description, subscriber email addresses, optional subscriber names and signup timestamps. We use these to publish pages and collect and manage signups for the page owner. Page content is public; subscriber details are not displayed publicly. The owner is responsible for the legal basis for their collection and subsequent marketing.
- Subscription records: plan, subscription status, billing-period dates, Paddle customer and subscription identifiers, and product and price identifiers. We use these to grant paid access, manage subscriptions and maintain necessary records. Basis: performance of our agreement and legal obligations.
- Support communications: your contact details, message content and information you provide with a request. We use these to answer questions, resolve complaints and fulfil privacy requests. Basis: performance of our agreement, legitimate interests in customer support and legal obligations.
- Technical and security information: IP addresses, device and browser information, request details, errors and operational logs handled by our hosting and authentication providers. These support service delivery, diagnostics and fraud or abuse prevention. Basis: legitimate interests in operating a secure, reliable service.
We do not use waitlist signups for our own marketing. If we introduce optional marketing or non-essential tracking, we will seek consent where required and provide a way to withdraw it.
3. AI processing
To generate campaign copy, we send your product description, product name, audience and tone to Lovable’s AI Gateway and its model provider, OpenAI. Generated copy is stored in your LaunchPulse account. Avoid submitting unnecessary personal data or sensitive or confidential information. AI providers process requests under their applicable service terms and safeguards; we do not promise that all provider logs or processing records are immediately deleted.
4. Who we share information with
- Service providers: Lovable Cloud and its infrastructure providers for hosting, database storage, authentication and operational diagnostics; Lovable’s AI Gateway and OpenAI for campaign generation; and providers used to handle support communications. Google processes information under its own privacy terms when you choose Google sign-in. Our pages also request fonts from Google Fonts, which can receive technical request data such as your IP address.
- Paddle: our Merchant of Record receives information needed for product sales, subscription management, payments, tax compliance and invoicing. Paddle processes payment information, including card details, directly; LaunchPulse does not store your full payment-card details. Paddle acts as an independent controller for its transaction processing. See Paddle’s Privacy Notice.
- Waitlist owners: receive the names and email addresses submitted to their pages to administer their waitlists and contact subscribers in accordance with applicable law.
- Professional advisers: legal or accounting advisers where necessary, subject to appropriate confidentiality obligations.
- Authorities: where disclosure is required by law or necessary to respond lawfully to security threats or protect legal rights.
We do not sell your personal information.
5. International processing
Our service providers may process personal information outside South Africa and outside your country of residence. For transfers subject to POPIA, we use applicable lawful transfer grounds and safeguards, including binding contractual protections or adequate legal protection. Where UK or EEA data-protection rules apply, transfers are subject to appropriate safeguards such as adequacy decisions or standard contractual clauses and applicable UK transfer instruments. Contact us for information about safeguards relevant to your data.
6. Retention and deletion
We retain account and saved service data while needed to operate your account and provide the service. Waitlist subscriber data is held to operate the relevant waitlist until deleted by its owner or no longer needed. You may delete saved campaigns, waitlists and subscriber records through available account controls, or contact us to request account closure or deletion.
After data is no longer needed, we delete or anonymise it, unless retention is required for legal, accounting, security or dispute-resolution purposes. Support records and operational logs are retained only as long as needed for those purposes. Backups may retain deleted data until they are replaced under the provider’s backup cycle. Paddle retains its own transaction records under its legal obligations and privacy notice.
7. Your privacy rights
Subject to applicable law, you may request access to your information, correction of inaccurate information, deletion, or objection to certain processing. You may withdraw consent where processing relies on consent, without affecting earlier lawful processing. We may need to verify your identity before acting on a request.
Under POPIA, you may also complain to South Africa’s Information Regulator. If GDPR or UK GDPR applies, your rights may additionally include restriction, portability and objection to processing based on legitimate interests, and a complaint to your local supervisory authority. We respond to requests within the period required by law, normally within one month for GDPR requests, with any lawful extension explained.
Send requests to hello@vibechooser.com. For a waitlist owner’s use of your information, contact that owner; we can assist with requests concerning our processing.
8. Security
We use appropriate technical and organisational measures designed to protect personal information, including encrypted connections, authentication and access controls that restrict account data to authorised users. No internet service is completely secure; protect your credentials and notify us promptly if you suspect misuse.
9. Cookies and local storage
LaunchPulse and its authentication services use essential browser storage, including local storage and, where applicable, cookies, to maintain sessions and support sign-in. Paddle’s checkout may use its own cookies or storage for payment processing, security and fraud prevention, under its policies. LaunchPulse does not currently add optional analytics or advertising cookies.
You can manage cookies and site storage in your browser settings, and sign out to end your session. Blocking or clearing essential storage may prevent sign-in or disrupt checkout. If we add non-essential analytics or marketing cookies, we will provide the required notices and consent controls before using them.
10. Changes and contact
We may update this notice as our service or legal obligations change. The effective date above identifies the current notice; material changes will be communicated where required. For questions, contact Vibechooser PTY Ltd at hello@vibechooser.com.