This policy describes how LaunchIQ collects, uses, stores, and shares information when you use the application, including when you connect third-party accounts such as Google.
Our role. For your account information and technical data described below, Wicked Oaks, LLC acts as the data controller (we decide how and why it is processed). For the project content you and your team put into LaunchIQ (plans, issues, risks, minutes, stakeholder details), we act as a data processor — we process it only on your instructions to provide the service, and it remains your organization's data.
Account information. When you create an account, we collect your name and email address (via our authentication provider, Supabase Auth).
Project data you enter. Project plans, issues, risks, meeting minutes, stakeholder details, and other content you or your team add to LaunchIQ. This data belongs to your organization; we process it only to provide the service.
Google account information. If you connect a Google account, the OpenID Connect response includes your name and email address, and may include a profile picture URL. LaunchIQ retains only your name and email address. We do not display, store, or use your profile picture.
Google Sheets data (read and write). If you connect Google Sheets, LaunchIQ requests read/write access (spreadsheets) to the spreadsheets you select. LaunchIQ reads cell data to sync your project plan into LaunchIQ, and can write updates back to those spreadsheets when you use the in-app push feature. LaunchIQ only accesses spreadsheets you explicitly select.
Google Drive data (selected files only). If you connect Google Drive, LaunchIQ requests per-file access (drive.file) using Google's file picker. LaunchIQ can only access the individual files you explicitly select in the picker; it cannot list, browse, or search your Drive. LaunchIQ downloads the files you selected, extracts their text (including Google Docs, Word files, PDFs, and plain text), and imports meeting summaries into your Meeting Minutes. LaunchIQ cannot and does not modify, move, share, or delete anything in your Drive. Files you have not selected are never accessible to LaunchIQ.
Smartsheet data (read-only). If you connect Smartsheet, LaunchIQ requests read-only access (READ_SHEETS, READ_USERS) to read the sheets you select and import their data into your LaunchIQ project. LaunchIQ cannot and does not modify, add, or delete anything in your Smartsheet account. Only sheets you explicitly select are accessed.
Microsoft 365 data. If you connect Microsoft 365, LaunchIQ requests read-only access to the SharePoint and OneDrive locations you select, to read project documents and import their data into your LaunchIQ project. LaunchIQ cannot and does not modify, move, share, or delete your SharePoint or OneDrive files; only the locations you explicitly select are accessed. If you connect Excel Online, LaunchIQ requests read/write access to the workbooks you select: it reads cell data to sync your project plan into LaunchIQ, and can write updates back to those workbooks when you use the in-app push feature. LaunchIQ only accesses workbooks you explicitly select.
Payment information. Payments are processed by Stripe. We do not store full payment card numbers; Stripe provides us with transaction records and subscription status.
Technical data. Standard server logs (IP address, browser type, timestamps) for security and diagnostics.
Cookies and local storage. We use only what is necessary for the app to function — authentication session storage and user preferences. We do not use advertising cookies, cross-site trackers, or third-party analytics beacons.
LaunchIQ's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
Google user data — access, use, transfer, protection, retention.
Access. LaunchIQ accesses Google user data only through the scopes you approve on Google's consent screen: your name and email address (openid, email, profile), spreadsheets you select (spreadsheets), and individual Drive files you select with Google's file picker (drive.file).
Use. Google user data is used solely to provide the sync and import features you configure inside LaunchIQ. It is never used for advertising, never sold, and never used to train models.
Transfer. Google user data is not transferred to third parties except the service providers required to operate LaunchIQ (our hosting and database providers), and only as needed to run the service. We do not transfer Google user data for any other purpose.
Protection. OAuth tokens are encrypted at rest (AES-256-GCM) and decrypted only server-side at the moment of API use; stored tokens are never sent to the browser. One exception: when you select Drive files with the Google Picker, Google provides your own short-lived Drive access token to your browser session so the Picker can run. That token belongs to your session, is not stored by LaunchIQ, and is never used for any other purpose. Synced data lives in your organization's isolated tenant workspace and is never shared across tenants.
Retention and deletion. Synced Google data is retained for the life of your account and deleted within 30 days of a deletion request or account cancellation, except where retention is required by law. Disconnecting a Google integration deletes the stored OAuth tokens immediately and stops all future syncs; you can also revoke LaunchIQ's access at any time from your Google account settings.
We share information only with the service providers required to operate LaunchIQ:
We will also disclose information if required by law or to protect the rights, safety, or property of Wicked Oaks, LLC, our users, or others. If our subprocessors change, we will update this policy.
LaunchIQ is hosted in the United States, and the information we collect is transferred to, stored, and processed in the United States. Data protection laws there may differ from those in your jurisdiction. By using LaunchIQ, you consent to this transfer and processing.
Data is stored in Supabase (PostgreSQL) with encryption in transit (TLS) and at rest. OAuth tokens for connected integrations are stored encrypted and are used only to perform the syncs you configure. Access to production data is restricted to authorized personnel.
Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Contact us at the address above to exercise these rights.
LaunchIQ is a business application and is not directed to children under 13. We do not knowingly collect information from children under 13.
We will post any changes on this page and update the effective date. Material changes will be communicated via email or in-app notice.
Questions about this policy or your data: contact@wicked-oaks.com.
© 2026 Wicked Oaks, LLC. All rights reserved.