Privacy policy

Who we are

DAAS (Distribution as a Service) is a product of Human², a brand of Waveful Inc., 261 Market Street, San Francisco, CA 94105, United States.

For anything about your data, write to support@waveful.app or use the help center. We answer within 30 days, usually much sooner.

This website (launchdaas.com)

The site is informational. It has no account registration, no analytics, no advertising trackers and no non-essential cookies. The only thing stored in your browser is your light or night mode preference, kept locally and never sent to us.

• Hosting and delivery. The site is served by GitHub Pages and Cloudflare. To deliver and protect it, these providers process technical request data such as your IP address, browser type and the pages you request. See the GitHub privacy statement and the Cloudflare privacy policy.
• Fonts. Typefaces are loaded from Google Fonts, which receives the technical request data needed to serve them.
• Booking a call. The Apply page embeds a scheduling widget by iClosed. What you enter there (name, email, company, your answers) is processed by iClosed under its own privacy policy and shared with us so we can prepare and hold the call, and follow up on it.

The DAAS platform (app.launchdaas.com)

The platform is used by our team and by clients we invite with an access code. It is not open to the public and is not intended for anyone under 18.

• Account data. Your email address, a password (stored only as a cryptographic hash by our authentication provider; we never see it), your name and your organization. Used to sign you in, secure your account and show you your workspace.
• Project data. The brief, product materials, hooks, formats and approvals you share with us to run your campaign, and the videos, images and slideshows produced for it.
• Distribution data. The social media accounts DAAS creates and runs for a campaign, and their public performance figures (views, likes, comments, shares, followers) collected from the platforms to feed the tracking board.
• Technical logs. IP address, browser, time and requested endpoint, kept for security and to diagnose faults.

We use this data to provide the service you contracted, to keep the platform secure, to invoice and to communicate with you about your campaign. The legal basis is the contract with you and, for security logs, our legitimate interest in running a safe service. We do not sell personal data and we do not use it for advertising.

Providers we rely on

• Supabase for authentication and the database.
• Amazon Web Services for servers and storage.
• Cloudflare for the network, DNS and protection.
• AI model providers used to render videos and images. They receive the prompts and reference images needed for a render, never your account data.
• Google Workspace for email and calendars, and iClosed for call scheduling.

Each provider processes data under a contract with us and its own privacy terms. Data is processed in the United States and, for some providers, in the European Union; where data leaves the European Economic Area, standard contractual clauses or an equivalent safeguard apply.

How long we keep data

Account data stays while the account exists and for 12 months after it is closed, unless a law requires longer. Project and distribution data are kept for the duration of the client agreement and handed over or deleted as it provides. Technical logs are kept for up to 12 months. Booking data follows the same rule as project data for clients, and is deleted within 12 months for calls that did not lead to a contract.

Your rights

You can ask to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to withdraw a consent you gave. Write to support@waveful.app. If you are in the European Economic Area or the United Kingdom you can also complain to your data protection authority. If you are a California resident, you have the rights granted by the CCPA; we do not sell or share personal data as those terms are defined there.

Cookies

This website sets no cookies. The platform at app.launchdaas.com sets only the cookies needed to keep you signed in, placed by our authentication provider and removed when you sign out or the session expires. Neither uses advertising or analytics cookies, and neither sets third-party tracking cookies.

Changes

When this policy changes, the new version is published here with a new effective date. Material changes affecting platform users are also notified by email.

See also the terms of service.