LaunchZeroZero-Trust Gateway
by SRGDownload

Privacy Policy

Effective date: .

Introduction

Security Research Group LLC, a Delaware limited liability company ("SRG," "we," "us," or "our"), operates LaunchZero and respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit launchzero.com (the "Site") or otherwise interact with us, and it describes what the LaunchZero application does and does not transmit. It does not cover information processed under a separate agreement for SRG's professional services.

The LaunchZero application is local-first

This is the most important point in this Policy, so we state it plainly. The LaunchZero application runs on your own machine. Its core function - evaluating policy, prompting for approvals, issuing capability tokens, hashing actions, resolving secrets, and writing the audit trail - executes locally, and enforcement does not depend on a cloud service being reachable.

  • We do not receive your agent activity. The tool calls your agent makes, the verdicts the policy returns, and the approvals you grant or deny stay on your machine.
  • We do not receive your audit trail. The record of calls, approvals, denials, and executions is written locally and is not transmitted to us.
  • We do not receive your secrets. Credentials are kept in an encrypted, machine-bound store and are resolved on your machine; they are never sent to us.
  • We do not receive your policies or files. The policy you write and the session files the application handles remain local.

Network access through LaunchZero-governed tools follows LaunchZero policy. Model-provider traffic and disclosed direct capabilities remain outside LaunchZero's mediation boundary. Using the LaunchZero application does not send your agent's activity or your data to us. The information described in the rest of this Policy is collected through the Site and our communications with you - not from the application's enforcement of your agent.

Information We Collect

We collect personal information through the Site in the following ways:

  • Information you provide. When you submit a contact form, request early access, or otherwise reach out, we collect the information you provide, such as your name, email address, company, and the content of your message.
  • Information collected automatically. When you visit the Site, our infrastructure may automatically collect technical information such as your IP address, browser type, device information, pages viewed, and the date and time of access. This is used for security, to operate the Site, and to understand usage.
  • Cookies and similar technologies. We use a limited set of cookies and similar technologies necessary to operate the Site and to understand aggregate usage. See "Cookies" below.

We do not knowingly collect special categories of sensitive personal information through the Site, and we ask that you do not include sensitive information in form submissions.

How We Use Information

We use personal information to:

  • Respond to your inquiries and provide the information or access you request
  • Communicate with you about LaunchZero, including early-access and product updates
  • Operate, maintain, and secure the Site
  • Comply with legal obligations and enforce our terms

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

How We Share Information

We share personal information only as needed and as described here:

  • Service providers. We use trusted third parties to operate the Site and our communications. These providers process information on our behalf and are bound to protect it. Our current key providers include Cloudflare (hosting and content delivery) and Resend (delivery of form submissions by email).
  • Legal and safety. We may disclose information where required by law, to respond to legal process, or to protect the rights, property, or safety of SRG, our users, or others.
  • Business transfers. If SRG is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

Cookies

We use cookies and similar technologies that are necessary for the Site to function and to help us understand how the Site is used. You can set your browser to refuse cookies or to alert you when cookies are being sent; some parts of the Site may not function properly without them. Where required by law, we will obtain your consent before setting non-essential cookies.

Data Retention

We retain personal information collected through the Site only as long as necessary for the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or de-identify it.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. As a cybersecurity company, security is central to how we operate. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, including the right to access, correct, delete, or obtain a copy of it, and the right to opt out of certain processing. Residents of California and certain other U.S. states have specific rights under applicable state privacy laws, including the right not to receive discriminatory treatment for exercising those rights. Where applicable, we honor recognized opt-out preference signals sent by your browser.

To exercise any of these rights, contact us at hello@launchzero.com. We will respond as required by applicable law and may need to verify your identity before fulfilling your request.

International Visitors

SRG is based in the United States, and we process and store Site information in the United States. If you access the Site from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Children's Privacy

LaunchZero is intended for businesses and professionals and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and update the effective date above. Material changes will be communicated as required by law.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, contact us at hello@launchzero.com.