Privacy policy
Last updated October 26, 2026
Who is responsible
The data controller is YC Strategic Ventures, 229 rue Saint-Honoré, 75001 Paris, France (RCS Paris 103 274 072). For anything about your data, write to [email protected].
What we collect, and why
- Waitlist. Your email address and which list you joined (launch or MCP beta), to send you a confirmation and tell you when Launchscene or the MCP opens. Legal basis: your consent. Kept until you unsubscribe or ask us to delete it.
- Forms (submit a video, report a problem, feedback, content removal). What you type, and your email if you choose to give it, so we can act on the request and reply. Legal basis: our legitimate interest in running and correcting the catalog, or our legal obligations for removal requests. Kept as long as the request is open, then up to 3 years.
- Accounts (MCP and, later, paid plans). Your email (you sign in with a one-time link, so we keep no password), the AI clients you connected, your saved boards and collections (a shared collection is visible to anyone with its link, until you turn the link off) and a log of tool calls. Legal basis: the contract between us. Kept while the account is open, then deleted within 30 days of closing it, except what accounting law requires us to keep.
- Monthly recap. If you turn it on in your account, we email you the launch videos added each month, and note which months we sent so you never get the same recap twice. Legal basis: your consent. Turn it off from your account or with the unsubscribe link in any recap, and it stops at once.
- Payments. If you subscribe to Pro: your plan, billing status and renewal date, and the identifier Stripe gives you. Your card details go directly to Stripe and never reach us. Invoices are kept 10 years, as French accounting law requires.
- Abuse protection. A one-way, salted fingerprint of your IP address, never the address itself, to limit spam and repeated login attempts. Legal basis: legitimate interest (security). Kept up to 12 months.
- Audience measurement. We use PostHog (EU servers) without cookies and without storing your IP address, to count visits and see which pages are useful. This does not identify you and is not shared for advertising.
Cookies
The public site sets no cookies. If you sign in, we set one strictly necessary cookie that keeps you signed in. Because there are no advertising or tracking cookies, there is no cookie banner.
Who processes it for us
- Railway Corporation (United States): hosting of the website and database, on servers in the European Union.
- Cloudflare, Inc. (United States): domain, security and delivery of images and videos.
- Resend (United States): sending emails, from servers in Ireland.
- Stripe (Ireland and United States): payments and invoices, as an independent controller for payment data.
- PostHog (United States): cookieless audience measurement, data stored in the European Union.
These companies only process data on our instructions. Where data may reach the United States, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell your data.
Your rights
You can ask to access, correct, delete or export your data, object to its use, or withdraw your consent at any time. To leave the waitlist, reply to any email we sent you or write to [email protected]. We answer within one month.
If you think we did not handle your data properly, you can complain to the French data protection authority, the CNIL (cnil.fr).
Changes
If this policy changes in a way that matters, we will update the date above and tell account holders by email.