Privacy Policy

Last updated · 12 September 2026

Noorkin Ltd, a company registered in England and Wales at 38, 21 Echo Court, Admiralty Avenue, London E16 2PN, United Kingdom, is the controller of the personal data described in this policy for the purposes of the UK GDPR and the Data Protection Act 2018. Where we process data about people in the EEA, the EU GDPR applies on equivalent terms. Contact us at noorkin.dev@gmail.com.

1. Two roles, and why it matters

For data about our customers — the people who sign in and use LaunchLens — we are the controller and decide how it is used.

For data about prospects — the people our customers want to contact — our customer decides who is contacted and why, and we process that data on their instructions. If you have been contacted through LaunchLens and want your data removed, you can contact us and we will act on it and pass the request to the relevant customer.

2. What we collect about customers

• Account: the name, email address and profile picture your Google account releases when you sign in. We never receive your Google password.
• Workspace: your organisation, members, and their roles.
• Product information: the URLs and descriptions you provide so we can build your profile.
• Usage: logs of requests to the service, for security, debugging and capacity planning.
• Billing: plan and payment status. Card details are handled by our payment processor and are never stored by us.

3. What we process about prospects

To draft outreach, LaunchLens gathers information that is already published: business contact details, technologies detectable on a public website, and reviews or comments people have posted publicly about products and services. Every fact cited in a draft links back to its source.

We do not buy contact lists, and we do not collect special-category data. Where public material contains personal opinions, we retain the quotation and its source so the claim can be checked.

4. Why we are allowed to process it

• Contract: providing the service you signed up for.
• Legitimate interests: securing the service, preventing abuse, and — for business-to-business outreach — enabling relevant contact where that interest is not overridden by the recipient's rights.
• Legal obligation: tax, accounting and responding to lawful requests.
• Consent: where it is required, and which you can withdraw.

5. Who else sees it

We share data with service providers who help us run LaunchLens:

• Google, for authentication;
• our hosting and database providers, which store the data;
• model providers, which generate drafts from the material described above;
• our email delivery provider, which sends messages you approve; and
• our payment processor, for paid plans.

They act on our instructions and may not use the data for their own purposes. We do not sell personal data.

6. Where it is stored

Data may be processed outside your country, including outside the UK and EEA. Where it is, we rely on appropriate safeguards such as standard contractual clauses.

7. How long we keep it

Customer account data is kept while your workspace is active and deleted within a reasonable period afterwards, except where we must keep records for legal reasons. Suppression lists are the deliberate exception: when someone opts out, we keep the minimum record needed to make sure they are not contacted again.

8. Your rights

Under the UK GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive a portable copy, and withdraw consent where processing relies on it. You may object at any time to processing we base on legitimate interests, including the outreach described in section 3. Contactnoorkin.dev@gmail.com and we will respond within one month; if a request is complex we may extend that, and we will tell you why within the first month.

If you are not satisfied with how we have handled your personal data, you can complain to the Information Commissioner's Office (ICO), the UK's supervisory authority, atico.org.uk/make-a-complaint or on 0303 123 1113. If you are in the EEA, you may complain to your local supervisory authority instead. You do not have to contact us first, though it is usually quicker.

9. Security

Access is restricted to what each account needs, tenants are isolated at the database level, credentials for connected services are encrypted at rest, and access to production is limited and logged. No system is perfectly secure, and we will notify you and the relevant authority of a breach where the law requires it.

10. Cookies

This site and the application use only what is necessary to keep you signed in and to remember your preferences. We do not use advertising cookies.

11. Changes

We will update the date at the top of this page when this policy changes, and tell you directly if a change materially affects you.