Home/Privacy
Privacy
Taking the assessment stores nothing that identifies you. Asking for the full report stores your email address, separately from your answers, for 24 months. Both are explained in full below, in plain English rather than in the usual eleven sections of nothing.
Who is responsible for this data
Product Launch Blog is published by EbizIndia (India), which is the data fiduciary under India's Digital Personal Data Protection Act 2023 and the controller under the UK and EU GDPR. The person responsible for questions, requests and complaints about personal data is Arun Agrawal, reachable at ebizindia@gmail.com. Requests are acknowledged and acted on within 7 days. Nothing here goes into a queue; it reaches a person.
The short version, itemised
| What | When it is collected | Why | Kept for |
|---|---|---|---|
| Your forty answers, four profile answers, product name (optional) and the hostname of the URL you gave (optional) | When you press the button at the end of the assessment | To score your launch, show your result page, and build the anonymous benchmark | Indefinitely, because it identifies nobody |
| What we found on your site in the six verified checks | When you ask us to check a URL | To answer those six checks from evidence rather than belief; cached per hostname so repeat checks cost one fetch | With the result, indefinitely; the cache for 24 hours |
| A one way hash of your IP address, salted with a value that changes daily | Every assessment and every form submission | Rate limiting and same day de-duplication of the benchmark | 7 days |
| Your email address, the time you consented, and what you consented to | Only when you ask for the full report | To send the report, and, only if you tick the second box, the follow-up emails | 24 months, or until you delete it, whichever is first |
| A one way hash of your email address | When you unsubscribe or delete your data | So nothing is ever sent to that address again | Indefinitely, hashed |
There is no other personal data. No account, no password, no payment details, no cookies, no tracking.
What happens when you take the assessment
When you press the button at the end, your forty answers, your four profile answers, the results of any verified checks, the product name if you gave one, and the hostname of the URL if you gave one are stored under a random eight character ID. Nothing in that record identifies you.
Your IP address is not stored. It is hashed with a salt that changes daily, and that hash is used for two things only: rate limiting, and making sure one person taking the assessment five times does not skew the benchmark five times over. Because the salt rotates, the hash cannot be used to recognise you tomorrow.
This record is kept indefinitely, because it is the raw material for the published benchmark. It is anonymous, so there is nothing in it to expire.
What happens when you ask for the full report
Your email address is written to a separate file, keyed by the same result ID, along with the timestamp of your consent and a hashed record of the IP it came from. Storing it separately is deliberate: it means a deletion request removes one file and the anonymous benchmark row survives, so nobody has to choose between your privacy and the integrity of the data.
You are asked to tick a box before this happens, and the box is never pre-ticked. There are two boxes, because there are two purposes: the first covers the report itself and is required; the second covers up to five follow-up emails about your weakest areas over the following fortnight and is optional. Ticking only the first gets you the report and nothing else. Consent for either can be withdrawn at any time, as easily as it was given, and withdrawing it does not affect anything that already happened.
Retention: email records are deleted automatically after 24 months, or the moment you use the delete button on the unsubscribe page, whichever comes first.
The emails
Every message carries a one-click unsubscribe, both as a link and as the List-Unsubscribe header that mail clients use for their own unsubscribe button. Unsubscribing takes effect immediately and also deletes anything still queued for you.
There are six messages in total: the report, then five over fourteen days. There is no ongoing newsletter, so when the sequence ends, it ends.
Who else sees any of this
- Our email provider processes the messages we send you. That is the only third party that ever handles your address.
- Our hosting provider stores the files, as hosting providers do.
- Nobody else. Your address is never sold, rented, shared, appended to anything, or used to build a profile. There is no advertising on this site and no advertising network attached to it.
What the site does not do
- No tracking cookies, no advertising cookies, no cross-site tracking, no fingerprinting.
- No third party scripts that watch you. The site loads no fonts, no tag managers and no widgets from anyone else, which is partly a privacy decision and partly why it loads as fast as it does.
- No session cookie. The forms are protected with a signed token rather than a server session, so there is no cookie to set.
Storage in your own browser
Two things are kept locally, on your device, and never sent anywhere: your progress through the assessment, so closing the tab does not lose your answers, which expires after seven days; and whether you chose the light or dark theme. Clearing your browser storage removes both.
Your rights, and how to use them
Wherever you are, you can ask for a copy of what is held about you, ask for it to be corrected, ask for it to be deleted, withdraw consent for the emails, and nominate someone to exercise these rights for you if you are unable to. Two of them need no request at all: the unsubscribe link in every email withdraws consent immediately, and the same page has a button that deletes your email address, your report record and the linked result on the spot. For anything else, write to ebizindia@gmail.com quoting the eight character ID from your result URL so the record can be found. You will hear back within 7 days.
If you are in India: the lawful basis is your consent under the Digital Personal Data Protection Act 2023, given by ticking the box, and this page is the notice that Act requires, written in plain English rather than legal English. If you believe a request has not been handled properly you may complain to the Data Protection Board of India, though we would rather you told us first and gave us the chance to put it right. This site is for founders and product teams and is not directed at children; we do not knowingly hold personal data of anyone under 18.
If you are in the UK or the EU: the lawful basis for the emails is consent under Article 6(1)(a), withdrawable at any time. Your data is processed in India and by our email provider; where a transfer needs a safeguard, we rely on the provider's standard contractual clauses. You may complain to your local supervisory authority.
If something goes wrong
If personal data held here were ever accessed by someone who should not have it, the people affected would be told directly, by email, with what happened, what it means for them and what has been done, and the Data Protection Board of India would be notified as the Act requires. There is one place email addresses live and it is outside the public web root, which keeps that scenario small and unlikely, but the promise stands regardless.
Security
Everything is served over HTTPS. Result and email records are stored outside the publicly reachable part of the site. Addresses are never displayed anywhere on the site and appear in the benchmark dataset only as a one way hash. No payment details are collected, because nothing on this site is sold.
Changes to this page
If what the site does with data changes materially, this page changes with it and the last reviewed date at the bottom moves. There is no version of that sentence which involves us quietly altering the terms and hoping nobody notices.
Questions people ask
Do I have to give an email address to use the Launch Readiness Score?
No. The score, the eight dimension breakdown, every verified check with its evidence and your three weakest findings are all shown without any email address. An address is only needed for the full forty check report and the follow-up sequence.
What happens to the URL I give for the verified checks?
It is fetched once, along with its robots.txt and sitemap. What we found is cached against the hostname for 24 hours so repeated assessments of the same site cost one fetch. Only the hostname is kept with your result, so the result page can say which site was checked. The full URL is not retained.
How do I get my data deleted?
Every email we send you carries an unsubscribe link, and the page it opens also has a button that deletes your email address, your report record and the linked result immediately, no request needed. If you have lost the emails, write to the grievance contact below quoting the eight character ID from your result URL and it is done within seven days.
Does the site use cookies?
No tracking cookies and no advertising cookies. The assessment keeps your progress in your own browser using localStorage, which never leaves your device and expires after seven days, and your light or dark theme choice is stored the same way.
Last reviewed 17 August 2026.