Legal
Privacy policy
Effective date: August 5, 2026
LaunchFlow Digital, LLC builds and hosts websites for small businesses. This policy covers what we collect through launchflowdigital.com and what we do with it.
What we collect
When you contact us. Your name, your business name, your email address and whatever you write in the message.
When you complete the website planner. Your answers about your business, including what it sells, how it is approved, and your state. We use your answers to build the plan we show you and email you a copy at the address you give us.
When you become a client and complete intake. Information about your business, your customers and your services, plus files you upload such as logos, photographs and documents.
When you pay. Payment is processed by Stripe. We never see or store your full card or bank details. We receive a record that a payment succeeded, along with your name, email and billing address.
As you browse. We use Google Analytics to understand how the site is used: which pages people visit and how they arrived. It sets cookies and processes visit data, including a shortened form of your IP address, under Google’s own privacy policy. We use it to improve the site, nothing else. We set no advertising cookies.
When you use a form. Our forms are protected by Cloudflare Turnstile, which checks that you are a person and not a bot. It processes technical data about your browser and connection under Cloudflare’s own privacy policy, and it works without puzzles for almost everyone.
Who we share it with
We share information only with the companies we use to run the business, and only what each one needs:
- Stripe, to take payment
- Our hosting provider, which stores this site and the client sites we build
- Our email and form provider, to receive and reply to your messages
- Our backup provider, which holds encrypted copies of the sites we host
- Google, if you open the booking calendar or book a call. The calendar loads from Google when you choose to open it, and your booking details (your name, your email, the time you pick) are processed by Google Calendar under Google’s own privacy policy. We receive the booking
- Google Analytics, which receives visit data as described above
- Cloudflare, which checks form submissions for bots as described above
We do not sell your personal information and we do not share it for anyone else’s advertising.
Do Not Track
Some browsers send a Do Not Track signal. We do not track you across other websites, so there is nothing for the signal to change. We do not honor it as a separate setting because we do not do the thing it asks us to stop.
No third party collects personally identifiable information about you across other sites through this website.
Files you upload
If you send us a logo, a photograph or a document, you are telling us you have the right to give it to us. We use uploaded files only to build and run your website. We keep them while you are a client and for twelve months after the engagement ends, then delete them.
If a photograph shows an identifiable person, make sure that person is happy for it to appear on a public website before you send it to us.
How long we keep things
Contact messages and website planner answers, two years. Client intake and project files, for the engagement plus twelve months. Records of completed transactions, seven years, because tax and contract records have to be kept.
Reviewing or changing your information
Use the contact form on this site and tell us what you want reviewed, corrected or deleted. We will do it, at no charge, unless the information is part of a completed transaction record we are required to keep. If we refuse, we tell you why in writing.
Security
We protect this information with safeguards proportionate to the size of the business and the sensitivity of what we hold: multi-factor authentication on accounts that support it, credentials kept in a password manager, encryption in transit, and encrypted backups with keys held separately from the machine that runs the backup.
If there is a breach affecting personal information as Oregon law defines it, we will notify affected people without unreasonable delay and no later than 45 days after we discover it, and we will notify the Oregon Attorney General if more than 250 Oregon residents are affected.
Children
This site is for businesses and is not directed at children. We do not knowingly collect information from anyone under 13.
Changes to this policy
If we change this policy in a way that matters, we will post the new version here with a new effective date and note what changed. Editing this page does not change an obligation already in force for an existing client.
Contact
Use the contact form on this site. That form is also the address for any request about the sale of personal information, which we do not do.