Privacy Policy

Who operates DivvLaunches

DivvLaunches is operated by Divv Saxena and is governed by the laws of India.

Google Sign-In data

Google is used only to prove your identity. When you choose Google Sign-In, Google returns an ID token to your browser and DivvLaunches sends it to our server for verification. After verification, we receive and store your stable Google account identifier, verified email address, display name, profile photo, and email-verification status.

We use this information to create and secure your DivvLaunches account, recognize returning users, display your profile, associate your launches and votes with your account, and provide account support. We do not request or access Gmail, Google Drive, Google Contacts, calendars, or other Google services. The Google ID token is used for verification and is not stored as your DivvLaunches session.

Application sessions

After Google verifies your identity, DivvLaunches creates its own signed application session containing only your local user identifier. The session is stored in an HttpOnly cookie and is not managed by Supabase Auth. Signing out removes the DivvLaunches session and does not sign you out of your Google account.

Product submissions

Product submissions include the launch details, media, maker information, and links you choose to provide. Approved launch information may be displayed publicly as part of the product directory, rankings, and promotional features.

Voting and product activity

We record votes with the signed-in account and timestamp to enforce one vote per product and reduce manipulation. We separately record outbound product clicks, a limited referrer value when available, and a timestamp. This internal click record does not intentionally include account emails or browser fingerprints.

Providers and storage

Google provides identity verification. Supabase provides Postgres database storage and is accessed only by the DivvLaunches server using server-side credentials. Vercel hosts and processes requests for the application. These providers process information as needed to provide their services and according to their applicable terms and privacy policies.

Google Analytics

DivvLaunches uses Google Analytics 4 to understand aggregate site usage, visitor trends, and traffic sources. We do not intentionally send your account email, name, or Google account identifier to Google Analytics. Analytics collection may use cookies or similar browser storage.

Public platform statistics

The public Control Tower may display aggregated Google Analytics results and aggregated DivvLaunches records, such as 30-day visitors, traffic-source categories, outbound product clicks, and approved launch totals. These statistics are designed to report platform-level activity rather than identify individual visitors or accounts.

Newsletter and messages

Marketing email is explicit opt-in and is not bundled with account creation. Transactional account or launch-status messages are separate. A newsletter delivery service is not yet configured.

Payments

Dodo Payments processes the one-time First Class Launch payment and directory distribution purchases. DivvLaunches stores the Dodo Payments payment and checkout references, charged amount, currency, payment status, account, and any launch that uses the resulting credit. Dodo Payments handles payment details, and DivvLaunches does not store full card details. The signed Dodo Payments webhook, rather than the browser success page, controls paid or refunded First Class access.

Retention and security

Information is kept for as long as reasonably needed to operate the service, protect launch integrity, handle disputes, preserve legitimate public listings, and meet legal obligations. We use signed HttpOnly sessions, server-side identity verification, access controls, and protected database credentials. No internet service can guarantee absolute security.

Your choices and rights

You may request access, correction, deletion, or export of your account information by emailing divv@divvlaunches.com. Some records may be retained where reasonably needed for security, fraud prevention, disputes, or legal obligations. You can withdraw newsletter consent anytime using its unsubscribe mechanism.

Children

DivvLaunches is not directed to children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has submitted data.

Changes

We may update this policy as DivvLaunches and its providers change. Material changes will be posted here with a revised date and, when appropriate, communicated through the service.