Privacy Policy

1. Who We Are

SuperLaunch is an independent private directory founded by Reji Modiyil. The exact contracting legal entity for paid services has not yet been published; public checkout is therefore paused until the merchant identity, tax treatment, invoice details, payment descriptor, cancellation, and refund rules are confirmed. This policy must receive professional legal review before paid services resume.

2. Information We Collect

• Account data: When you sign in with Google or LinkedIn, we receive your name, email address, and profile picture from those providers.
• Startup submissions: Public profile content, contact email, exact legal entity name, entity type, registration identifier, registered state/UT, incorporation date, authority and media-rights declarations, and DIPP Certificate of Recognition number.
• Verification evidence: Official-registry results, fields matched or mismatched, review decisions, timestamps, reviewer audit information, and correction or appeal correspondence. Legal names, GSTINs, CINs, LLPINs, registration numbers, DIPP certificate numbers, and uploaded proof are review-only data and are not displayed on public profiles or sponsored cards.
• Usage data: Pages visited, clicks, time on site, and referrer URL — collected via standard server logs and analytics.
• Cookies and consent: Essential session/security cookies and a local consent choice. Google Tag Manager loads only after analytics consent; tags configured within that external container require separate operational governance.

3. How We Use Your Information

• To create and manage your account
• To process and display startup listings
• To check submitted DPIIT Certificate of Recognition and India-registered legal-entity claims against appropriate official sources, prevent duplicate or fraudulent listings, and handle corrections, disputes, and appeals
• To send transactional emails (listing approved, claim verified, etc.)
• To improve the platform based on usage patterns
• To send our newsletter if you've opted in (you can unsubscribe anytime)

4. Data Sharing

We do not sell your personal data. We share data only with:

• Hosting and delivery: Coolify-managed hosting and related delivery infrastructure serve application pages and logs.
• Application database: Appwrite stores application records and verification workflow data.
• Google / LinkedIn: Used when you choose the corresponding OAuth sign-in flow.
• Google Tag Manager: Loaded only after analytics consent; downstream tags depend on the currently published container configuration.
• BestEmail: Processes newsletter subscriptions submitted through SuperLaunch.
• Suhep / AutoChat: Process information you intentionally submit through support-ticket or WhatsApp intake routes.
• Stripe / Razorpay: Payment code exists, but public checkout is paused; disclosures must be reviewed before enabling either provider.
• Legal requirements: If required by Indian law or court order

5. Data Retention

We keep information only for the listing, verification, security, dispute, legal, and audit purposes described here. Public listings may remain while they comply with platform rules. No fixed evidence-retention duration is claimed because an automated retention schedule is not yet implemented. A documented retention schedule and deletion procedure are required before requesting sensitive evidence. You can request account or personal-data deletion by emailing hello@superlaunch.in, subject to information we must retain for legal or active dispute purposes.

6. Your Rights

You may request access or correction, ask us to review a listing or verification decision, request deletion of personal data, withdraw newsletter consent, and raise a grievance. Email hello@superlaunch.in with the listing URL and enough information to locate the record. Legal-entity facts obtained from public official registries may remain as non-personal listing information even when unrelated personal data is deleted.

7. Verification Sources and Badge Limits

Depending on entity type, we may check Ministry of Corporate Affairs records, the appropriate registrar, and the official Startup India certificate validator. DPIIT certificate status, registry status, domain control, and profile authority are separate checks. They do not verify product quality, founders, finances, licences, investment safety, or regulatory compliance. SuperLaunch is not affiliated with or endorsed by DPIIT, Startup India, Invest India, MCA, NSWS, or any listed entity.

8. Sponsored Content and Privacy

Sponsored placements use public campaign content such as a product name, logo, short description, and destination URL. Any legal, tax, registration, identity, ownership, or DPIIT evidence supplied for screening remains private. Sponsorship does not make that evidence public and does not purchase a verification badge or organic ranking advantage.

9. Security

We use HTTPS, secure session tokens (JWT via NextAuth), and industry-standard practices to protect your data. No password is stored — authentication is handled via Google/LinkedIn OAuth.

10. Children

SuperLaunch is not directed at children under 13. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this policy occasionally. We'll update the "Last updated" date at the top. Continued use of the platform after changes constitutes acceptance.

12. Contact and Grievances

For privacy-related questions: hello@superlaunch.in