Privacy policy
Last updated 2 October 2026 · see also our Terms of Service
This policy explains what personal data PouchLaunch collects, why, who else processes it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and equivalent laws (UK GDPR, Swiss FADP).
Contact for privacy matters: info@pouchlaunch.com.
The controller is the company operating PouchLaunch — a separate entity from any label-manufacturing brand.
1. What we collect and why
| Data | Why (purpose) | Legal basis |
|---|---|---|
| Account email + password (stored only as a scrypt hash — we never see your password) | Create and secure your account; log you in | Contract (Art. 6(1)(b)) |
| Subscription & usage data (plan, checks used, Stripe customer id, payment references) | Provide the paid service, count usage, issue invoices | Contract; legal obligation for invoices |
| Marketing opt-in flag & email | Send regulatory-update emails only if you opt in | Consent (Art. 6(1)(a)) — withdraw any time |
| “Get labels” enquiry: company, contact name, email, phone, message | Respond to your enquiry about label production | Steps taken at your request before a contract (Art. 6(1)(b)) |
Session cookie (pl_session) | Keep you logged in — strictly necessary | Necessary to provide the service you asked for (Art. 6(1)(b)); strictly necessary, so no cookie consent banner is required |
| Markets you watch or have checked (market name + date only — never the label) | Show you your own activity. We email regulatory-change alerts only for markets you have explicitly chosen to watch — running a check does not sign you up for anything, and turning a watch off stops the emails | Consent (the watch toggle) |
| Label artwork you upload to the checker | Run the compliance pre-check | Contract — processed in memory only, never stored |
| Messages you type to the on-site assistant | Answer support and wayfinding questions. Your message and the recent conversation are sent to our AI processor to produce the reply, and are not stored afterwards | Legitimate interest (providing support) |
| Your IP address | Rate-limiting only — to stop abuse of the assistant, the password-reset form and the log-in form. Held in memory for up to an hour and never written to our database. Our hosting provider also keeps short-lived web-server logs | Legitimate interest (security) |
2. The label checker — important
When you check a label, the artwork (image/PDF) is sent to our AI processor to produce the compliance report and then discarded. We do not save your label files or the resulting report to disk or database. We only increment a numeric “checks used” counter on your account. Note that a label may itself contain other people’s personal data (e.g. an importer’s name or address printed on the pack); that content is processed by our AI sub-processor for the duration of the check only.
3. Who else processes your data (sub-processors)
- Anthropic (USA) — runs the AI label check and the on-site assistant. Receives the label artwork and destination market during a check, and whatever you type to the assistant together with the recent conversation. API data is not used to train models and is retained only briefly for trust & safety. Transfer safeguarded by the EU Standard Contractual Clauses — write to info@pouchlaunch.com and we will send you a copy.
- Stripe (EU/USA) — payment processing, when you subscribe or buy a check. We never see or store full card numbers. Any transfer outside the EEA is covered by Stripe’s data-processing agreement and the EU Standard Contractual Clauses; a copy is available on request.
- Zoho (EU) — our email service: hosts the info@ mailbox and delivers regulatory-update and system emails. Our newsletter subscriber list is stored first-party (on our own server), not with a third-party marketing platform.
- Hetzner (Finland, EU) — hosts the server and database.
We do not use Google Analytics, advertising pixels, or any third-party tracking. No profiling, and no automated decision-making that produces legal effects concerning you. The label check is automated, but it is an assessment of your artwork, not a decision about you — and it is advisory: you decide what to print.
Do you have to give us this data?
Only where it is needed for what you asked for. Your email address and a password are required to create an account — without them we cannot give you one, because there would be nothing to log in to. Payment details (handled by Stripe, never by us) are required to buy a paid feature. The label artwork is required to run a check, for the obvious reason. Everything else is optional: the marketing opt-in, the markets you watch, the “Get labels” enquiry and anything you type to the assistant. Leaving those blank costs you only the feature they belong to, and nothing else about your account changes.
4. How long we keep it (retention)
- Account data — while your account exists; deleted when you delete your account.
- Login sessions — you are signed out automatically after 4 hours of inactivity, and in any case 30 days after signing in. Expired sessions are deleted.
- “Get labels” enquiries — kept up to 2 years, then deleted automatically.
- Invoices / payment records — kept as required by accounting and tax law. If you delete your account, these records stay on the books but are stripped of any link to you.
- Newsletter address after you unsubscribe — kept 90 days (so an accidental unsubscribe can be undone), then deleted.
- Password-reset links — valid for one hour, usable once, then deleted.
- Uploaded labels, assistant messages & compliance reports — not stored at all.
- IP addresses used for rate-limiting — held in memory only, never written to disk, and dropped within about an hour of your last request.
5. Your rights
Under GDPR you can: access your data, correct it, delete it (“right to be forgotten”), export it, restrict or object to processing, and withdraw consent at any time. Withdrawing consent does not make anything we did beforehand unlawful — it stops the processing from that point on.
- Access / export — download everything we hold on you from your account (“Download my data”).
- Erasure — delete your account and all associated data from your account (“Delete my account”). This is immediate and irreversible. The only thing we keep is the accounting record of any payment, and we remove your identity from it.
- Marketing — every update email has an unsubscribe link; you can also toggle it in your account.
- For anything else, contact us at info@pouchlaunch.com.
You also have the right to lodge a complaint with your data-protection authority (in Estonia, the Andmekaitse Inspektsioon).
6. Security
Passwords are stored as salted scrypt hashes. Traffic is encrypted with HTTPS. The session cookie is HttpOnly, Secure and SameSite=Lax. The database is not reachable from the public internet.
7. Changes
We may update this policy; the “last updated” date above always reflects the current version. Material changes affecting your rights will be communicated to registered users.
This page describes our actual data handling. It is provided for transparency and is not a substitute for formal legal advice — have your final wording reviewed before launch.