Privacy Policy

Version 2026-10-24 · Effective 2026-10-24

This policy explains what information Launch Basis LLC ("we", "us") collects through TerritoryIQ (territoryiq.app), how we use it, who we share it with, and the choices you have.

1. Information we collect

Account information. Name, email address, password (stored only as a salted hash), and account dates.

Business information. Your business name, address, category, search radius, competitor edits, penetration thresholds, and saved notes ("business memory").

Content you create. Territory Chat and follow-up conversations, saved briefs and analyses, campaign plans, and AI Readiness questionnaire answers.

Uploaded customer lists. When you upload a customer address file to build a heat map, we read the file in memory to geocode the addresses and assign each one to a U.S. Census block group. We do not store the uploaded file. We keep a summary (file name, row counts, and block-group-level counts). Individual customer addresses are saved only if you tick "Remember my customer list", so that you can track growth across uploads. For businesses in a healthcare category that option is not offered, and individual addresses are never saved.

Billing information. Handled by Stripe. We store your Stripe customer ID and subscription status, not your card number.

Messages to us. What you send through the Contact form.

Technical information. Log data our hosting provider records (IP address, browser, pages requested, errors), and essential cookies (see Section 7).

Legal records. A record of key account events: when you accepted these terms (and which version), subscription start, renewal, cancellation and failed payments, uploads, and deletions. See Section 6.

2. How we use information

To provide the Service (map, competitor search, demographics, heat maps, AI briefs and chat); to process payments; to send account emails (confirmation, password reset, billing); to answer your messages; to secure the Service and prevent abuse; to meet legal obligations and keep compliance records; and to improve the Service. We do not sell personal information and do not use it for third-party advertising. We do not use your content to train AI models, and our AI provider is contractually prohibited from training on it (see Section 3).

3. AI processing

TerritoryIQ's briefs and chat use Anthropic's Claude models through Anthropic's commercial API. To answer you, we send Anthropic:

• your business details and nearby competitor names and locations;
• trade-area demographics;
• your saved business notes and the current conversation;
• web search results;
• aggregated customer data (counts by block group or ZIP, upload dates and totals).

Individual customer street addresses and coordinates are never sent to the AI provider. Under Anthropic's commercial terms, Anthropic may not train models on this content. It processes the content under a data processing addendum and, by default, deletes API inputs and outputs within 30 days. That period can be longer where content is flagged for a usage-policy review, or where the law requires it.

4. Who we share information with

We share information only with the service providers that run TerritoryIQ, only to the extent each needs it, and under their terms of service:

Within Launch Basis. Your name and email are also recorded in Launch Basis's central account database, which supports single sign-on across Launch Basis products in future.

Other disclosures. We may disclose information if required by law or legal process, to protect our rights or users' safety, or as part of a merger, acquisition, or sale of assets (with notice to you).

5. Retention

• Account and business data: kept while your account is active, until you delete the business or ask us to delete your account.
• Saved customer addresses: until you delete the business or the account. Uploaded files themselves are never stored.
• Deleting a business permanently removes its customer addresses, upload summaries, analyses, conversations, campaigns, and notes.
• Server logs: our hosting provider's web server logs (IP address, pages requested, status codes) are kept for 30 days and then deleted automatically.
• Legal records: five years; see Section 6.

6. Legal records are kept after deletion

To prove what you agreed to and to meet compliance obligations, we keep an append-only record of key events, including the email address on the account at the time. It covers terms acceptance and version, subscription changes, uploads (file name and counts, not the addresses), deletions, and privacy requests. This record is kept even after your account is deleted, for five years after the account is deleted. It contains no uploaded customer addresses.

7. Cookies

We use only cookies needed for the Service to work:

• a sign-in cookie (lasts up to 30 days and renews while you use the Service);
• a security cookie that protects forms from forgery;
• a short-lived cookie used only while you connect a Facebook account (a feature not currently offered).

We do not use analytics, advertising, or tracking cookies of our own. Stripe.js may set fraud-prevention cookies, and Mapbox and Google Fonts receive standard web request data when your browser loads maps and fonts.

8. Your choices and rights

You can view and edit your business information in the app, and delete a business at any time from Business Setup. To get a copy of your data, delete your account, or correct information, email support@territoryiq.app. We will verify the request and respond within 45 days.

California and other state privacy laws. Where required by law, including the California Consumer Privacy Act where it applies, you have the right to know what personal information we collect, use, and disclose; to access it; to correct it; to delete it, subject to legal exceptions including the records in Section 6; and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising.

Your customers' information. If you upload information about your customers, you control that data and are responsible for having a lawful basis to share it with us. If one of your customers contacts us, we will refer them to you.

9. Security

Data is encrypted in transit (HTTPS) and stored in Microsoft Azure SQL, which encrypts data at rest. Access is limited to the account owner and our administrators. No system is perfectly secure. If a breach affects your personal information, we will notify you as required by law.

10. Children

TerritoryIQ is a business service, not directed to children under 18, and we do not knowingly collect children's information.

11. Changes

When we change this policy materially, we will post a new version with a new date and ask you to review and accept it before you continue.

12. Contact

Launch Basis LLC · PO Box 211151, Eagan, MN 55121 · support@territoryiq.app