Privacy policy
Privacy Policy
Last updated: November 8, 2026
This policy explains what personal data JohnLaunch collects when you use https://omega.johnlaunch.com and its tools, why we collect it, who we share it with, and the choices you have. JohnLaunch is run by [JohnLaunch legal entity name] ("JohnLaunch", "we"), which is the data controller. A Turkish version, including the KVKK notice, is part of our User Agreement.
Data we collect
- Account data. Your email address, your name if you give one, and a one-way hash of your password. If you sign in with Google, we receive the name, email address and profile picture Google shares. If you invite teammates, we store their email addresses.
- Workspace data. The websites, apps, brands, keywords, competitors and locations you track, your project settings, alerts and reports, and the prompts you write in Ask AI and AI writing.
- Connected accounts. When you connect Google Search Console, Google Analytics (GA4), YouTube, Bing Webmaster Tools or Cloudflare, we store the access token or API key (encrypted) and the site, traffic and channel statistics we read from that account.
- Billing data. Your plan, subscription status and invoices. Card details are handled by Stripe; we never see or store them.
- Email preferences. Which alert, report and marketing emails you receive, and unsubscribe records.
- Technical data. IP address, browser details and server logs, used to keep sessions secure and prevent abuse. Product analytics only if you accept them (see Cookies below).
How we use it
We use your data to run your account and workspaces, run the lookups and automatic checks you set up, send alerts and reports, handle billing and support, keep the service secure, and improve it. Our legal bases are performing our contract with you, our legal obligations, and our legitimate interest in running a secure and reliable service. Analytics, ad measurement and marketing emails rely on your consent, which you can withdraw at any time.
Google user data
JohnLaunch's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only read the Search Console, Analytics and YouTube data you connect, only to show you reports and alerts inside JohnLaunch. We do not sell it, use it for advertising, or use it to train general-purpose AI models, and people at JohnLaunch do not read it unless you ask us to for support, it is needed for security, or the law requires it. You can disconnect on the Connections page or in your Google account permissions.
Who we share it with
We share data only with the providers that help us run JohnLaunch, and only for that job:
- DataForSEO runs the domain and keyword lookups you request.
- Stripe processes payments and subscriptions.
- Resend sends verification, password reset, alert and report emails.
- PostHog provides product analytics, only if you accept them.
- Google, Microsoft (Bing) and Cloudflare for Google sign-in, the accounts you connect, bot protection and site security.
- Our AI provider (for example Anthropic or OpenAI) receives your request and the related project data when you use Ask AI or AI writing.
- Hosting and database: [hosting provider and country].
Some of these providers are outside your country (for example in the United States or the EU), so your data may be transferred internationally with appropriate safeguards. We do not sell your personal data. We may disclose data when the law requires it.
Cookies
We use strictly necessary cookies for sign-in and your language preference. Analytics and any ad measurement run only if you choose “Accept all” in the cookie notice. You can change your choice under My account › Preferences. See the Cookie Policy for the full list.
How long we keep it
We keep your data while your account is open. When you delete your account on the My account page, your workspaces, tracked keywords, reports and connected accounts are deleted; copies in backups expire within a limited time. We keep invoices and payment records as long as tax and accounting law requires.
Security
Connected-account tokens and API keys are stored encrypted, and access to data is limited to what is needed. If a breach affects your data, we will tell you and the relevant authorities as the law requires.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or Turkey's KVKK), you can ask to access, correct, delete or export your data, object to or restrict its use, and withdraw consent. Email privacy@johnlaunch.com and we will answer within 30 days. You can also complain to your local data protection authority.
Children
JohnLaunch is a business tool and is not meant for anyone under 16.
Changes
We will post any changes on this page and, for important ones, tell you by email or in the app.
Contact
[JohnLaunch legal entity name], [registered postal address]
Privacy questions: privacy@johnlaunch.com
