Privacy Policy

Last updated: 2026-09-20

Launch Box is operated by Launch Scout, LLC ("Launch Scout," "we," "us," or "our"). This Privacy Policy describes how we collect, use, and protect information when you use Launch Box. Launch Box is provided to teams and clients of Launch Scout — it is not available for general public signup.

Information We Collect

• Account information — your name, email address, and password (stored as a secure hash, never in plain text).
• Google sign-in profile data — if you sign in with Google, we receive your name and email address from your Google account.
• GitHub sign-in profile data — if you sign in with GitHub, we receive your name and every email address your GitHub account has verified.
• Microsoft sign-in profile data — if you sign in with Microsoft, we receive your name and email address from your Microsoft account.
• Organization and membership data — the organizations you belong to and your role within them.
• Project content — cards, boards, story maps, and related content you or your team create in Launch Box.
• GitHub integration data — repository access and pull request links, when you connect a GitHub integration.
• Error and diagnostic reports — crash and error reports collected to keep the service reliable.

Google Sign-In and Your Data

Launch Box offers "Sign in with Google" using Google's OAuth 2.0 sign-in flow. When you use it, Google shares only your basic profile information — your name and email address (the email and profile scopes) — with Launch Box. We do not request access to your Gmail, Drive, Contacts, Calendar, or any other Google data.

We use this information solely to authenticate you and to create or match your Launch Box account. We do not use Google user data for advertising, do not sell it, and do not share it with third parties except as needed to operate Launch Box (see "How We Use Third-Party Services" below).

Our use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Launch Box is not directed at children under the age of 13, and we do not knowingly collect data from children through Google Sign-In or otherwise.

GitHub Sign-In and Your Data

Launch Box offers "Sign in with GitHub" using GitHub's OAuth 2.0 sign-in flow. When you use it, GitHub shares your name and your account's email addresses (the user:email scope) with Launch Box. We read every verified address on the account, not only the one you display publicly, because the address Launch Box knows you by may be any of them. We do not request access to your repositories, organizations, or any other GitHub data through this flow.

We use this information solely to authenticate you and to create or match your Launch Box account. Connecting a GitHub integration for repository and pull request features is separate, and is described above.

Microsoft Sign-In and Your Data

Launch Box offers "Sign in with Microsoft" using Microsoft's OAuth 2.0 sign-in flow. When you use it, Microsoft shares only your basic profile information — your name and email address (the openid, email, and User.Read scopes) — with Launch Box. We do not request access to your Outlook mail, OneDrive, Teams, Calendar, or any other Microsoft data.

We use this information solely to authenticate you and to create or match your Launch Box account. We do not use Microsoft user data for advertising, do not sell it, and do not share it with third parties except as needed to operate Launch Box (see "How We Use Third-Party Services" below).

How We Use Third-Party Services

We rely on the following third-party services to operate Launch Box. Each may process information described above as part of providing their service to us:

• Google (OAuth sign-in)
• Microsoft (OAuth sign-in)
• GitHub (OAuth sign-in, repository and pull request integration)
• Amazon Web Services (AI/embedding processing and file storage)
• Sentry (error tracking)
• SendGrid (transactional email)
• AssemblyAI (audio transcription)
• Anthropic (AI features)

Data Retention and Deletion

We retain your data for as long as your account or organization is active. You may request a copy of your data or request that it be deleted at any time by contacting us at hello@launchscout.com.

Governing Law

This Privacy Policy is governed by the laws of the State of Ohio.

Contact Us

Questions about this Privacy Policy can be sent to hello@launchscout.com.