Privacy Policy

Launch League is a practical entrepreneurship program for young people, based in Ontario, Canada. Launch League is a for-profit business, not a charity. In this policy, “Launch League”, “we” and “us” mean Launch League.

This policy covers launchleague.ca, Launch League accounts, the Business Dashboard, Business 101, competitions and the other tools on the site.

We collect what we need to run the program, and no more. We do not ask for a social insurance number, government ID, bank logins, bank account or credit card numbers, health information or precise location.

• Account: your email address and a password (stored by our authentication provider as a one-way hash; we can't see it).
• Forms you send us: name, email and what you write; sometimes a phone number or organization (contact, sponsor, partner, judge, advisor, educator and similar forms). Judge and advisor applications also record that you agreed to the volunteer code of conduct, and when.
• Workbook PDF requests (adults only): your name, email, role, how you'll use the workbook, optionally your school or organization, town and number of learners, your agreement to the workbook terms and your news preference. We email you a personal download link, print your name, email and a copy ID on every page of your PDF, and log each download (date, browser type and a one-way scrambled form of your IP address, not the address itself) so shared copies can be traced.
• Launch League Business Network (adults only): if you ask about workshops or a session for your company, your name, email, organization (optional), which option interests you, your message and your confirmation that you're 18 or older. Memberships are bought on Skool, which collects your account and payment details under its own privacy policy; we see your Skool profile and membership status, not your card details.
• Learner profile: name, birth month and year, country, and optionally school, grade, town or city and region.
• Learning records: Business 101 answers (including earlier drafts), completed modules, your one-page plan, Launch Sprint progress, milestones, and dates you were active.
• Competition entries: business name, pitch, links to your pitch videos (not the videos), notes, and for entrants under 18 the parent or guardian's name, email and consent. Judges' scores and feedback.
• Other program tools: Summer Company readiness answers and referral requests, marketplace listings you choose to create (including when you agreed to the marketplace rules and to making the listing public), advisor applications, finalist coaching sessions and ratings, and business plan tool content.
• Consent and request records: which consent was given, declined or withdrawn, by whom (participant or guardian), the version of the wording shown, and when; privacy requests and how they were handled; a log of record downloads.

For participants under 18 we keep the parent or guardian's name and email, the consent link we sent (it expires after 30 days), their decisions, and, if they create an account with that email, the link between their account and the participant. We use this to ask for and record consent, to let them see and manage the participant's account, and to send optional news only if they opt in.

The Business Dashboard is an educational tool for tracking a small business. It stores the business profile (name, description, what you sell, category, target customer, website, stage and goals), goals, pricing scenarios, profit plans and your pitch summary.

You own this content. We store and process it only to run the dashboard for you, calculate your numbers and show them to you and a linked parent or guardian. See the Terms of Use.

Career Discovery is a paid, private coaching service for families in Chatham-Kent. It is opened only by an invitation from the coach to a parent or guardian, and every participant under 18 needs a parent or guardian's authorization plus their own agreement before anything is collected.

From the student:a first name, birth month and year (for the age rules: 12 to 17), grade, school and town, and their answers to our own questionnaire about interests, strengths, how they like to work, what matters to them, careers they have thought about, experience so far and what they would like to try. Every question can be answered “I'm not sure”. From the parent or guardian: their name and email, and their separate answers about the student. Optionally,school documents (report cards, awards, a résumé) a parent chooses to upload under a separate authorization; nothing is ever extracted from them by software. From the coach:private notes, a written brief, and later an exploration plan. We don't ask about diagnoses, medical or therapy information, religion, ethnicity or other sensitive characteristics.

Who reads the student's answers:the assigned coach. A parent or guardian sees progress, their own answers, the documents they uploaded, and any report the coach approves for the family — not the student's answers word for word. The one exception: if anything the student shares raises a concern for their safety or someone else's, the coach tells the parent or guardian. Other Launch League administrators can see that a client exists and its status, and nothing inside. No teacher, judge, sponsor, employer or mentor sees any of it. Interest in an opportunity is not permission to share a student's identity; before any introduction, the parent or guardian confirms that particular one.

Scoring: our questionnaire is not psychological testing, not diagnostic, and does not determine career suitability. It is scored only by published rules, shown to the coach with the questions that produced each result. AI: switched off for Career Discovery; no answer or document is sent to any AI service. Documents are stored privately, opened through links that expire in two minutes, with every opening recorded; a parent can remove one at any time and the file is deleted straight away.

Sales records hold a date, a customer nickname or initials (optional), what was sold, the amount, payment status, payment method type (for example “cash” or “e-transfer”) and notes. Expense records hold a date, vendor, description, category, amount, notes and whether a receipt was kept. We don't collect receipt images, card numbers or bank details. Amounts are private and are never published.

The customer pipeline stores a nickname or initials for a potential customer, the opportunity, an estimated value, a stage, a next step, a follow-up date and notes. It is designed not to hold customers' phone numbers, emails, addresses, birth dates or financial information, and we ask participants not to type them into notes. Participants are responsible for having a legitimate reason to note who someone is.

A founder can build a free public page for their business at launchleague.ca/<address>. It shows what the founder enters: the business name, tagline, description, services and prices, the towns served, availability, an optional first name, a logo and photo links, and links to booking, shop, order-form or business social pages. It must not include a home address, phone number, personal email, school or, for founders under 18, a last name.

• Nothing is public until it's approved. Launch League reviews every version. For founders under 18, a linked parent or guardian must also approve it, and program consent must still be in place. Any edit goes back for approval.
• Notifications. When a page is submitted we email Launch League and, for founders under 18, the parent or guardian on the account.
• Search engines. Pages for founders under 18 ask search engines not to list them. We count how many times a page is opened, without identifying visitors.
• Control. The founder can hide the page at any time; a parent or guardian can withdraw approval; Launch League can take a page down.

When a student does a co-op placement through Launch League, the Co-op area records the placement: the schedule and calendar, attendance and hours, tasks and submissions, evidence and portfolio files, reflections, goals, skills and sign-offs, badges, meetings, a mentor and contacts log, feedback, surveys, evaluations and reports. The employer, the student and (where the placement links one) the school each have a role in it.

• The student sees their own placement, work, feedback shared with them and development notes.
• Supervisors and employer admins on that placement see the placement's records and can keep private supervisor notes and private feedback. Private notes are never shown to the student, mentors or the school.
• A school co-op coordinator sees only the parts of a placement the employer grants (for example attendance, hours or evaluations marked for the school).
• Mentors see goals, skills, portfolio items and mentor meetings, not hours, private notes or employer information.
• People on one placement never see another placement's records. Access is enforced by the database, not just the app.

People are added by email address and get access only after signing in with that confirmed address. Evidence files are stored privately and opened through short-lived links. Students are asked not to upload customer addresses or private customer information.

Invitations. When a supervisor or organization admin invites someone, we email that address an invitation through our email provider. The email names the person who sent it, the placement or organization and the role.

AI task builder.Supervisors can draft tasks with AI. The goal they type, the placement title, its current stage and the employer's guidelines are sent to Anthropic to write the drafts. Student names and records are not sent, and supervisors are asked not to type personal details. Nothing is assigned until a supervisor reviews it.

Shareable portfolio links.A student can ask for an unlisted link to a portfolio page. It works only after a supervisor approves it, and the student or a supervisor can turn it off at any time. The page shows the student's first name, an optional headline, the placement title and dates, supervisor-approved hours and skills (if the student chooses), milestones, completed project names and portfolio items that are links. It never shows a last name, employer, school, uploaded files or contact details, and it isn't indexed by search engines. Anyone the link is shared with can see it, so students under 18 confirm a parent or guardian knows.

Voice typing.Some Co-op text boxes have a microphone button that uses your browser's built-in speech recognition. Launch League doesn't receive or store audio, only the text that ends up in the box, but some browsers (such as Chrome) send the audio to the browser maker to convert it to text. Type instead if you'd rather not.

Like most websites, our hosting and authentication providers keep server logs that include IP addresses, browser type and request times, used for security, abuse prevention and troubleshooting. We record when you were last active so we can manage inactive accounts. Admin actions that affect participants (for example pausing an account or processing a deletion) are recorded in an audit log.

The Business Dashboard is free and doesn't take payments. For paid products on the site (such as the Elite Business Plan Maker) and for sponsorships or contributions paid by card, payment is handled by Stripe. We never see or store your full card number. We receive a confirmation of the purchase, the amount and the email used. If a participant takes payments for their own business, those details stay with their payment provider.

• To create and secure accounts and keep people signed in.
• To run Business 101, the Business Dashboard, competitions, judging and the other program tools.
• To calculate and show a participant their own business numbers, reports and milestones.
• To ask for, record and honour consent, and to handle privacy requests.
• To respond to messages and send service emails (like consent requests, confirmations and results).
• To send optional news, only with separate consent.
• To report program totals that can't identify anyone (see “Who we share it with”).
• To prevent abuse and meet legal obligations.

We rely on consent: the participant's own consent if they're 18 or older, and a parent or guardian's consent for participants under 18 as our program policy. Optional uses (marketing email, photos and video, success stories) each need their own separate consent, and saying no never affects taking part. Some limited processing is needed to keep the service secure or to meet legal obligations.

• The participant and a linked parent or guardian can see the participant's Business Dashboard and records.
• Launch League staff access information only as needed to run the program and handle requests. Our admin tools show account and consent status, not individual sales, expenses or customers.
• Teachers who run a class can see the learner profile (not the email address), Business 101 answers and drafts, progress, one-page plan, Launch Sprint progress and milestones of students who join with a class code, and for students under 18 only after a parent or guardian consents. Teachers can't see Business Dashboard numbers.
• Judges see competition entries assigned to them. They don't see Business Dashboard numbers.
• Mentors, advisors, coaches and sponsors don't receive participants' business numbers or contact details. Launch League arranges any introductions.
• Career Discovery coaches see only the families assigned to them. See the Career Discovery section above for exactly who reads what.
• Sponsors and partners may receive program totals (for example the number of businesses or total revenue recorded), only when a group is large enough that no one can be identified. Never names with numbers.
• Small Business Enterprise Centres, only if a participant asks for a Summer Company referral (with guardian consent if under 18).
• The public sees only what a participant chooses to publish (such as an approved marketplace listing), never amounts, contact details or schools. Marketplace listings follow the marketplace rules and can be hidden by the founder at any time.
• Launch Kit providers receive nothing from us. Redemption steps are shown only to signed-in participants, and we don't record which offers you open. If you sign up with a provider, you share information with them directly under their policy.
• Our internal contact system receives enquiries from organizations and adults (sponsors, partners, judges, advisors, educators, and Launch League Business Network workshop and company-session requests, and workbook PDF requests, all of which require confirming you're 18 or older) so we can follow up. Participant accounts, competition entries, youth contact forms and privacy requests are not added to it.
• When required by law, or to protect someone's safety.

We don't sell personal information.

• Supabase — database, sign-in and file storage.
• Vercel — website hosting, plus cookie-free page and performance analytics (see Cookies and analytics).
• Resend — sending email.
• Stripe — payments for paid products.
• Anthropic — if you use the paid Elite Business Plan Maker, your answers for a section are sent to generate its text; if a co-op supervisor uses the AI task builder, their goal and the placement details described in Co-op placements are sent to draft tasks.
• Video services you choose (YouTube, Loom, Vimeo, Google Drive) host competition videos in your own account under their policies. We store only the link.

Our main database is hosted in Canada. Some of our service providers (including website hosting, email delivery, payments and AI text generation) are based in, or process data in, the United States and possibly other countries. Information processed there may be accessible to authorities under those countries' laws. We choose providers that protect information with safeguards appropriate to its sensitivity.

• We keep account, learning and Business Dashboard information while the account is in use, or until you or a parent or guardian ask us to delete it.
• We have not yet set a fixed period after which inactive accounts are deleted. When we do, we'll publish it here before applying it, and give people a chance to download their records first.
• Competition entries and judging records are kept while a competition runs and afterwards as needed to handle questions about results.
• Career Discovery: while coaching is active; after it ends, questionnaire answers, the brief and the coach's notes for 24 months and uploaded documents for 6 months, then marked for deletion and removed. Inquiries that never proceed are removed after 12 months. Ask sooner and we delete sooner.
• When an account is deleted, we keep a minimal record that consent was given or withdrawn and that the deletion request was completed, without contact details, so we can show we respected those choices.
• Deleted information may remain in routine database backups for a limited time until those backups are overwritten.

We use administrative, technical and organizational safeguards appropriate to the sensitivity of the information. These include encrypted connections (HTTPS), access rules enforced by the database itself so each person can reach only the records they're allowed to, least-privilege access for staff, audit logs for sensitive admin actions, and not collecting information we don't need. No system is perfectly secure; if a breach creates a real risk of significant harm, we'll notify affected people and the Privacy Commissioner as the law requires.

You can see most of your information in your account and in Account & Privacy. You can ask for a copy of everything we hold, or ask us to correct something, from Account & Privacy or by emailing admin@launchleague.ca. A parent or guardian can do the same for a linked participant under 18. We aim to respond within 30 days and may need to confirm your identity first.

Participants and linked parents or guardians can download Business Dashboard records at any time as spreadsheet files (sales, expenses, potential customers) and as a printable report, from the Reports page or Account & Privacy. Your records are yours to take elsewhere.

You (or a parent or guardian, for a participant under 18) can ask us to delete an account from Account & Privacy. The request shows as Requested, then Processing, then Completed. While it's being processed the dashboard is read-only so records can still be downloaded. A person at Launch League completes the deletion, which removes the account, profile, learning records and Business Dashboard records. Competition entries already with judges are handled separately and we'll tell you what remains and why.

You can withdraw consent at any time in Account & Privacy or by emailing admin@launchleague.ca. Withdrawing the required program consent closes the Business Dashboard; the records stay until you ask us to delete them. Optional consents (marketing, media, success stories) can be turned off at any time without affecting anything else. Withdrawal doesn't undo uses that already happened, such as a printed brochure.

A parent or guardian who responded to our consent email and signs in with that email address can: see the participant's Business Dashboard (read-only), download their records, give or withdraw consent, turn optional permissions on or off, and ask for access, correction or deletion. Go to launchleague.ca/guardian. Guardians can't edit a participant's business records.

• Essential cookies keep you signed in. The site doesn't work without them.
• Vercel Web Analytics and Speed Insights count page views and measure loading speed without cookies and without following you across other websites. We turn them off entirely on signed-in areas (the Business Dashboard, Account & Privacy, guardian pages, consent pages and dashboards), and we strip anything personal (like email addresses or tokens) from page addresses before they're counted.
• Where you came from. If you send us an enquiry or application, we keep a few tags with it so we know which post, email or conversation brought you here: the campaign tags on the link you clicked, a short word-of-mouth tag if the link had one, the name of the website you came from (never its full address) and the first page you landed on. They are held in your browser tab only until you close it, use no cookie, and are never recorded in signed-in or youth areas.
• We don't use advertising pixels (such as Meta, Google Ads or TikTok), remarketing, or session-recording tools.

We send promotional email about Launch League programs, events and opportunities only to people who opt in, separately from any required consent. Each message identifies Launch League and includes a way to unsubscribe, and you can also unsubscribe at launchleague.ca/unsubscribeor in Account & Privacy. We keep a record of when and how you opted in. For participants under 18, marketing email goes to the parent or guardian, only if they opt in. Service emails (such as consent requests, account notices and competition results) aren't marketing and are sent as part of running the program.

We only use a participant's photo, video, name with their business, story or business milestones in promotion with separate permission (from a parent or guardian for anyone under 18). It's never a condition of taking part. Revenue figures are never published without specific approval of the exact wording. Permission can be withdrawn for future use at any time.

Our site links to other websites (for example marketplace businesses, video services and government programs). Their privacy practices are their own; please read their policies.

We'll update this page when our practices change and revise the date at the top. Consent wording is versioned: if a change affects what participants agreed to, we'll ask for consent again before continuing, and a record shows which version each person accepted.

• Privacy officer: Nick Gonzalez, Founder, Launch League
• Email: admin@launchleague.ca
• Or, when signed in, use Account & Privacy.
• Launch League is a registered business name of Gonzos Ltd.

If you have a concern, please contact us first so we can try to fix it. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.