Launchpad at Purdue
Privacy notice
Last updated
This notice explains the information Launchpad uses to run the club, who can see it, our retention review periods, and how to request a correction or deletion.
Who handles your information
Launchpad, a student-run, Purdue-recognized club in Indiana, operates this website and member portal. Club organizers administer the information described here. Contact launchpadpurdue@gmail.com about privacy.
This notice covers the Launchpad site, applications, and member portal. It does not describe every Purdue University system or the practices of websites linked from this site. It explains our data practices and is separate from acceptance of the Terms of use.
Information we collect
- Applications: your name, email, academic year, major, interests, experience, and other answers you provide. Organizers may add application status, review notes, and decision dates.
- Accounts and rosters: names, mentor or mentee roles, team assignments, chosen usernames or callsigns, email and verification status, account activity, invitations, password hashes, and session or recovery records. Organizers may supply roster details before an account is activated. “Family” in the portal means a club team.
- Participation: mission activity, notes, photos and team portraits, scores, proposed missions, comments, likes, in-app notifications, moderation decisions, and related dates.
- Permission records: the version and time of account terms acceptance and photo permission confirmations. Earlier versions of our account flow collected an 18+ confirmation; we no longer request or require it.
- Communications: messages you send us, application and account emails, delivery status, support requests, and information needed to resolve a report.
- Technical information: request times, network and browser information, session cookies, security and error logs, and optional public-page analytics when you choose to allow it.
Do not include Social Security numbers, payment card information, identity documents, health details, or other sensitive information in free-text answers, comments, or photos. Photos can reveal personal details in their visible content even when file metadata is removed.
Why we use it
We use this information to review applications, organize mentorship teams, provide accounts, run missions and the gallery, communicate about participation, check permissions, moderate content, prevent abuse, and respond to requests. Optional analytics helps us understand how public pages are used and improve them.
We do not sell personal information or use it for targeted advertising. Sponsor recognition on the public site does not give sponsors access to application answers or member accounts. Any separate opportunity to share information with a sponsor should explain that choice when it is offered.
Who can see your information
Authorized organizers can access information needed to administer the club. Member profiles, team names and portraits, standings, and approved gallery contributions are visible to the authorized participants who use those features. Private mission evidence is available to the submitting team and administrators rather than the shared gallery. Application answers and account recovery details are not part of the member gallery.
Public homepage photos, board biographies, testimonials, and project highlights are visible to anyone. We obtain separate permission for public promotional use. You can request that we review or remove a public item through the content reporting page.
Access controls cannot stop an authorized viewer from taking a screenshot or saving a copy. Material shared before access restrictions were introduced may also exist in previous links or copies. Contact us if a photo should be removed or its past exposure needs review.
Service providers and disclosures
We use providers to run the site and communicate with you:
- Vercel hosts the site and processes web requests. Vercel Blob stores uploaded photos.
- Turso stores application, account, mission, and related database records.
- Resend delivers application and account emails and provides delivery information.
- PostHog supports optional public-page usage analytics and operational feature settings.
- Our contact inbox uses Gmail, so messages sent to the published club address are processed by Google.
These providers process information needed for their services and may use infrastructure in the United States or other countries. Provider security records and backups can have separate retention periods. We may also disclose information when reasonably necessary to comply with law, respond to legal process, address a security incident, or protect people's rights and safety.
How long we keep records
We use the following default review periods for records managed by the application:
- Applications: 12 months after submission.
- Mission photos and post content: 12 months after submission. Associated notes, comments, and likes are removed in the same cleanup. A minimal completion record can remain to preserve scores and prevent duplicate credit.
- Team portraits: 12 months after upload.
- Member accounts: review for removal after 24 months without recorded activity.
- Email delivery and administrative audit logs: 90 days.
These periods identify records for administrator review. An administrator previews and approves deletion, so removal is not automatic on a specific anniversary. Records needed for an active request, safety issue, dispute, or legal obligation may be held longer. Holds should be limited to the records and time needed.
Published homepage material, permission evidence, and messages in the club inbox require separate organizer review. A member account becoming inactive does not automatically remove every image in which that person appears. You can ask us to remove a specific item sooner.
Deletion from the live application may be followed by retries to remove a stored file. Provider backups, historical analytics, and security logs follow their separate deletion processes. If we retain information after a request, we will explain the reason where permitted. We cannot delete copies already saved by other people or unrelated websites.
Access, correction, and deletion
Email launchpadpurdue@gmail.com to ask what information we have about you, request a copy or correction, withdraw an application, close your account, or request deletion. Include the email or callsign associated with your participation and enough detail to locate the records. You do not need an active account to contact us.
We may need to verify that a request concerns your information or that you are authorized to act for someone else. We ask only for information reasonably needed for that verification. Do not send your password, recovery code, or a government ID with your initial request.
We will review requests and respond as required by applicable law. Some records may need to be retained for a specific legal or safety reason. If you disagree with a response, reply with “Privacy appeal” and explain what should be reconsidered. You may also contact the Indiana Attorney General or another public authority that handles privacy concerns in your location.
Audience and security
The site is intended for a college club and is not directed to children under 13. If you believe a child under 13 has provided personal information, contact us so we can review and address it as appropriate.
We use account access controls and other safeguards to limit unauthorized access. No internet service can guarantee perfect security. Report a suspected exposure to launchpadpurdue@gmail.com with enough detail for us to investigate and without sending other people's private data unnecessarily.
Notice updates
We will update this page when our practices change and show the new date above. When a change materially affects how account information is used, we will provide an appropriate notice through the site or available contact details. Check this page before submitting new information.