On this page
Who we are#
Launchfolio is run by Hadi Mahmoud Abdulkareem Irshaid, an individual based in Nablus, Palestine. We decide how your information is used, and we’re responsible for it. For anything about your privacy, email hadiirshaid8722@gmail.com.
What we collect#
- Your account. When you sign in with Google, we receive your name, email address and your Google account ID. We don’t receive your Google password or your profile photo. We also store the web address (username) you pick, your account status, and dates such as when you signed up, last signed in, paid and were approved. If we set up an account for you with a password, we store only a scrambled (hashed) version of it.
- Your site. Everything you add in the editor and designer, the files you upload (photos, videos, résumés), and saved versions of your published site. If you protect your site with a password, we store only a hashed version of it.
- Messages from your visitors. When someone uses the contact form on a site, we store their name, email address and message for the site owner. We also store a one-way code made from their IP address, so we can stop one person sending too many messages.
- Help and feedback. What you write to us through the “Help & feedback” button, its topic, and the page you were on.
- Payments. The amount, currency, payment method, your transfer reference, status and dates — for your first year and for each renewal. For each site we also keep the date its plan is paid until, and which add-ons it has and until when (this decides the renewal price). When a bank transfer arrives, we also see the details that come with it, such as the sender’s name. We never see or store card numbers.
- Visit counts. For each site we count visits per day, as a number. To count each visitor only once a day, we keep a one-way code made from their IP address and the site for 24 hours. Visits by the site owner aren’t counted.
- Security records. To slow down password guessing and spam, we count recent attempts using one-way codes made from IP addresses (and, for sign-in, the username tried). We never store raw IP addresses in our database.
- Activity log. A record of important account events — for example signing in, a failed sign-in, publishing, paying, and approval — with the time and your username.
What we don’t do#
- No advertising tools or cross-site tracking. Usage analytics runs only with your permission.
- We don’t sell your information or share it for advertising.
- We don’t store card numbers.
How we use it#
- To create and run your account and your site, and to show your published site to visitors.
- To review new sites before they go live, and to deal with reports.
- To take payments, keep a record of them, and work out when each site renews and what it costs.
- To send you emails you need — such as bank details, payment confirmations, renewal reminders and account updates. Renewal reminders, and emails about a paused site or a site about to be deleted, are service emails: you can’t turn them off, because they tell you about your site and your payments.
- To keep the service safe: stopping spam, abuse and password guessing.
- To answer your questions and fix problems.
- To follow the law.
We use your information because we need it to provide the service you asked for, because we have a fair reason to keep Launchfolio safe and working, or because the law requires it.
Optional analytics and recordings#
If you agree, we use PostHog to understand confusing screens and failed actions. We also measure coarse click positions within approved areas of the landing page, dashboard, editor and designer to build aggregate heatmaps; we do not capture screenshots for these maps. We remove usernames, query strings and fragments from tracked URLs. We do not send passwords, messages, portfolio text, file names or request bodies as analytics properties.
Recordings require a separate choice and cover only a sample of supported screens. Inputs and rendered text are masked; images, videos and embedded frames are blocked. Admin, sign-in, checkout, messages, settings and public portfolio pages are excluded from recording. Network bodies, headers and console logs are not recorded.
Your choice is remembered on this host for 180 days. Turning analytics off stops new collection and clears PostHog identifiers on this device; it does not delete previously collected records. Analytics retention follows our PostHog project settings. For access or deletion, contact us using the email below.
Where your information is stored#
Our service providers may store and process information in countries other than yours, including outside Palestine. We choose providers that protect the information they handle.
How long we keep it#
- Your account and site — while your account exists. When you ask us to delete it, we delete your account, site, saved versions, visitor messages, visit counts and payment records. A short history in our activity log (for example “account deleted”, with your username) and help requests you sent may remain.
- Saved versions — each time you publish, we keep that version of your whole site. We keep your first version, your 10 newest and the one that’s live, and delete older ones.
- Uploaded files — stored at hard-to-guess public links. Anyone with a file’s direct link can open it, even if your site has a password. Removing a file from your site doesn’t delete it from storage automatically; ask us and we’ll delete your files.
- Visitor messages — until the site owner deletes them, or the account is deleted.
- Security and visit-count codes — from one minute to 24 hours, then cleared out automatically.
- Unpaid sites — kept for 21 days after sign-up (longer while a bank transfer you asked for is on its way), with a reminder email before then. Then we delete the site, its records and the files you uploaded. You can ask us to delete it sooner.
- Paused sites — if a renewal isn’t paid, the site stays online for 14 days, then it’s paused. We keep a paused site and its files for 180 days, and email you before the end. Then we delete the site and the files you uploaded. Paying before then brings it back.
- Template copies — if you share your site as a template, we keep a copy (without your email, phone or CV) until you take it out of the gallery or your account is deleted.
Your rights#
You can ask us to:
- show you the information we hold about you;
- correct anything that’s wrong;
- delete your information;
- give you a copy of your information to take elsewhere;
- stop using your information for a particular purpose.
Email hadiirshaid8722@gmail.com from the address on your account. We may ask you to confirm it’s you. We’ll reply within 30 days. You can also complain to the data protection authority where you live.
If you visit or message a site#
Each site on Launchfolio belongs to its owner. When you send a message through a site’s contact form, the owner receives your name, email and message, and decides how to reply. To have a message deleted, ask the site owner, or email us.
Children#
Launchfolio isn’t for anyone under 16. We don’t knowingly collect information from children under 16. If you think a child has given us information, email us and we’ll delete it.
How we protect it#
- Encrypted connections (HTTPS) for every page.
- Sign-in cookies that scripts can’t read, and sessions that end when you sign out.
- Passwords are stored only in hashed form, never as plain text.
- Limited access. Only the admin can see account details, and only to run the service.
Changes to this policy#
If we change this policy in a way that matters, we’ll tell you by email or on the site before the change takes effect.
Contact#
Questions or requests: hadiirshaid8722@gmail.com.