Legal
Privacy policy
Techavy collects as little personal data as it can to run launches, count honest votes and take payments. We do not sell personal data and we do not run tracking ads.
Last updated 14 November 2026
1. The short version
- Reading Techavy does not require an account.
- Votes are counted with a salted, one way hash of your connection details, not your raw IP address.
- Payments go through a payment processor; we never see your full card number.
- You can ask for a copy of your data, a correction, or deletion at any time through the privacy contact form.
2. What we collect
When you create an account
Your name and email address, a securely hashed password if you set one, or your Google account identifier if you sign in with Google. Optionally your website and social profile.
When you launch or claim a product
The product details you submit or edit: name, website, description, images, pricing and similar listing information. For claims, the evidence you provide that you own the product, such as a verification email or a badge on your site.
When you vote, view or click
A salted hash of your IP address and browser details so each visitor can vote once per product, and anonymous counts of page views and outbound clicks. These counts are not linked to a profile of you.
When you pay
Your email, what you bought, the amount, and the payment status and reference returned by our payment processor. Card details are entered on the processor’s page and never reach our servers.
When you contact us
Your name, email, the topic, your message, and a salted hash of your IP address used only to limit abuse of the form.
Server logs
Our hosting provider keeps short lived technical logs such as request paths, times and error details to keep the service running.
3. Why we use it
- To run your account, publish your launch and show it on the boards.
- To keep votes honest and stop spam, fraud and abuse.
- To process payments, deliver what you bought, and keep records the law requires.
- To reply to your messages and handle removal or correction requests.
- To send emails you asked for, such as sign in links, receipts and launch updates.
Where data protection law asks for a legal basis, we rely on performing our contract with you, our legitimate interest in running a fair and secure platform, our legal obligations, and your consent where we ask for it, for example for the newsletter.
4. Who processes it
We use a small number of service providers who process data on our behalf and only for the purposes above:
- Hosting and content delivery (Vercel) and a managed Postgres database.
- Payments (Stripe), which acts as an independent controller for card data.
- Transactional email (Resend) for sign in links, receipts and notices.
- Google, only if you choose to sign in with Google.
- Anthropic, which runs the AI model that drafts listings and AI reviews. It receives the public text of a product website and the listing fields, not your account details.
- Our newsletter provider, only if you subscribe. Its own privacy policy applies to the subscription.
Some of these providers are in the United States. Where data leaves your country we rely on the safeguards those providers offer, such as standard contractual clauses. We share data with authorities only when the law requires it.
6. How long we keep it
- Account data: while your account is open, then deleted within 30 days of closure.
- Launch listings: while they are published. Public listings may stay in search engine caches for a while after we remove them.
- Vote hashes and anonymous counts: kept with the product they belong to.
- Payment records: as long as tax and accounting law requires, usually up to 7 years.
- Contact messages: up to 24 months, then deleted.
7. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to how we use it, receive it in a portable format, and withdraw consent. California residents may ask what we collect and ask us to delete it; we do not sell or share personal information for targeted advertising.
Send requests through the privacy contact form. We reply within 30 days and may ask you to confirm your identity first. You can also complain to your local data protection authority.
8. Security
Connections are encrypted with HTTPS, passwords are stored as salted hashes, access to the database is restricted, and secrets live in environment configuration rather than in code. No system is perfectly secure; if we learn of a breach that affects you, we will tell you and the relevant authority as the law requires.
9. Children
Techavy is not aimed at children. You must be 16 or older to create an account. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes and contact
We update this policy when our practices change and show the date at the top. Questions go through the contact form. See also our terms of service.