Section 01
Scope
This Privacy Policy describes how LaunchStruc LLC, a Missouri limited liability company with its principal office at 3324 Rue Royale St, Ste 792, St Charles, MO 63301, USA (“LaunchStruc,” “we,” “us”), handles personal data in connection with StrucPact, our vendor contract compliance and redlining service, and with this website.
It applies to visitors to our website, to users of StrucPact, and to individuals whose personal data appears in documents our customers upload. For customer content, we act as a processor or service provider on the customer's behalf, and the Data Processing Addendum governs that processing. For website visitors and account holders, we act as a controller or business.
Section 02
Information We Collect
We collect the following categories of information:
- Account information: name, work email address, company, role, and authentication credentials or single sign-on identifiers.
- Billing information: billing contact, billing address and subscription tier. Card details are collected and stored by our payment processor, not by LaunchStruc.
- Customer content: contracts, playbooks, fallback clause libraries and generated findings that you submit to the service.
- Usage and device data: IP address, browser type, pages requested, timestamps, feature use and error logs.
- Communications: messages you send through our contact form or to [email protected], including architecture review requests.
Section 03
Contract Document Processing
When you upload a contract, StrucPact transmits the document text, together with your active playbook, to the Anthropic Claude API to identify clauses and draft proposed redlines. Findings are returned to us and stored in your workspace.
Contracts commonly contain personal data of signatories, notice contacts and employees. You are responsible for having a lawful basis to submit that data. Please remove information that is not needed for review, such as government identifiers or financial account numbers, before upload.
Section 04
How We Use Data
We use personal data to:
- provide, maintain and secure StrucPact, and to produce the findings you request;
- create and manage accounts, authenticate users and enforce role-based access;
- process payments and send invoices and service notices;
- respond to support requests and architecture review requests;
- monitor for abuse and enforce our Acceptable Use Policy;
- comply with legal obligations and defend legal claims.
We do not sell personal data and we do not use customer content for advertising.
Section 05
Zero AI Model Training Commitment
LaunchStruc does not use customer content to train, fine-tune or evaluate any artificial intelligence or machine learning model, whether our own or a third party's. StrucPact accesses Anthropic models through Anthropic's commercial API, under terms that provide that inputs and outputs submitted through the API are not used to train Anthropic models.
We require every sub-processor that may handle customer content to be bound by an equivalent restriction. Any change to this commitment would require advance written notice and, for customers on a Data Processing Addendum, their prior consent.
Section 06
Sub-processors
We share personal data with the following sub-processors, only to the extent needed to deliver the service:
- Anthropic PBC: language model inference (United States).
- Vercel Inc.: application hosting and delivery (United States).
- Amazon Web Services, Inc.: encrypted storage (United States).
The current list, with purposes, is published on our Security page and in the Data Processing Addendum. We give customers on a Data Processing Addendum 30 days' notice before adding a sub-processor.
Section 07
GDPR and UK GDPR Rights
If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing relies on it. You may also lodge a complaint with your local supervisory authority.
Our legal bases are performance of a contract (providing the service), legitimate interests (security, abuse prevention and service improvement that does not use customer content), legal obligation, and consent where we ask for it. To exercise a right, email [email protected]. If your data is in a customer's contract, we will direct the request to that customer as the controller.
Section 08
CCPA and CPRA Rights
California residents have the right to know what personal information we collect and how we use it, to request deletion or correction, to opt out of the sale or sharing of personal information, and to not be discriminated against for exercising these rights.
In the preceding twelve months we have not sold personal information or shared it for cross-context behavioral advertising. We use the categories listed in Section 2 for the business purposes in Section 4. To make a request, email [email protected]; we may verify your identity before acting and you may use an authorized agent.
Section 09
Data Retention
We keep personal data only as long as needed for the purposes described in this policy:
- Customer content: until you delete it or your subscription ends, then deleted within 30 days.
- Account and billing records: for the life of the account and as required for tax and accounting law.
- Audit logs: 90 days to one year depending on plan, or as set by an Enterprise agreement.
- Contact form messages: up to 24 months after the last communication.
Backups are overwritten on a rolling schedule after deletion.
Section 10
Security
We use TLS 1.3 for data in transit, AES-256 for data at rest, role-based access control and append-only audit logging. Details are on our Security page. No system is perfectly secure; if we become aware of a breach affecting your personal data we will notify you as required by law.
Section 11
International Transfers
LaunchStruc is based in the United States and our sub-processors process data in the United States. Where we transfer personal data from the EEA, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses and, for the UK, the UK International Data Transfer Addendum, as incorporated in our Data Processing Addendum.
Section 13
Changes to This Policy
We may update this policy. We will post the new version with a revised date, and for material changes we will notify account administrators by email at least 30 days before they take effect.
Section 14
Contact Us
Questions or requests about this policy: [email protected].
LaunchStruc LLC
3324 Rue Royale St, Ste 792
St Charles, MO 63301, USA
Telephone: +1 (573) 271-9007