Privacy policy
Effective 20 October 2026
How Lane handles your account information and the work you share with your team.
1. Who this policy covers
This policy describes personal information handled through Lane at app.uselane.app, including account creation, Google sign-in, workspaces, Requests and support. Lane is operated by Nikhil Sharma in India. “Lane”, “we” and “us” refer to Nikhil Sharma operating Lane.
For privacy questions or requests, email uselaneapp@gmail.com. If you use Lane through a team, your workspace administrator also manages membership and the work shared within that workspace.
2. Information we handle
- Account and profile: your name, email address, profile picture, account identifier, sign-in method and chosen PM, Designer or Developer role. Clerk handles authentication, sessions, workspace membership and invitations.
- Google sign-in: when you choose Google, we receive basic identity information, including your Google account identifier, name, email address and profile picture, through Clerk. Lane requests only identity, email and profile access. It does not request access to Gmail messages, Google Drive files, contacts or calendars, and does not receive your Google password.
- Workspace content: workspace and Project details, Requests, descriptions, impact information, links, comments, files, filenames and records of actions such as creating, assigning or completing a Request.
- Technical information: session and security information, browser information, request paths, IP addresses processed by hosting or authentication services, error reports and identifiers used to limit repeated AI requests.
- Support: information you include when contacting us.
Only include information you are entitled to share. Avoid putting passwords, credentials or unnecessary sensitive personal information in Requests, comments or attachments.
3. Why we use this information
We use account information to sign you in, maintain your profile, identify your contributions and apply workspace access rules. We use workspace content to provide Requests, collaboration, file access and the other features you choose to use. Technical information helps operate the service, investigate errors and prevent misuse. Support information lets us answer questions and handle privacy requests.
Your PM, Designer or Developer profile label does not grant different access. Access depends on workspace membership and supported permissions.
We do not sell personal information, use it for targeted advertising or use Google sign-in data to train general-purpose AI models.
4. The AI check in Intake
When you run the Intake AI check, Lane sends the Request title and description to Anthropic’s API to classify the request and suggest problem framing. Any personal or confidential information written into those two fields is included. The response is returned to Lane for you to review, and saved Request content may include the framing you confirm.
That AI call does not separately send attachments, comments, structured impact fields or your Google profile. Information copied into the title or description is still part of the submitted text. Anthropic processes API data under its applicable service terms and retention rules; see its API retention information. Lane does not promise zero retention by Anthropic.
5. Who can access information
Requests and their attached files are shared with authorized people in the relevant workspace. A private attachment is not publicly listed, but authorized workspace users can open or download it. Workspace administrators manage memberships and invitations. Removing someone’s membership does not remove copies they have already downloaded.
Lane uses service providers to deliver the application:
- Clerk: accounts, Google authentication connections, sessions, organizations and invitations.
- Supabase: application database and private file storage.
- Vercel: application hosting and operational request handling. Vercel also collects anonymous page-performance metrics through Speed Insights: loading, responsiveness and layout-stability timings and the page element involved, with the page path (without its query string, though a path can include a Request identifier), browser, device type, operating system, network speed and country, not linked to an individual visitor or IP address.
- Upstash: account-identifier-based rate limiting for AI checks.
- Anthropic: the title and description submitted to the Intake AI check.
- GlitchTip, when enabled: error reports. Lane’s reporting configuration excludes request bodies, authentication cookies, account user blocks and AI inputs/outputs, and disables session replay and performance tracing. Error messages and URL paths can still contain contextual information.
Google also processes your sign-in under its own privacy terms. Authorized Lane operators may need access to investigate support requests, maintain the service or respond to security incidents. We may disclose information when legally required, subject to applicable law.
6. Cookies and browser storage
Authentication uses cookies and related browser storage to keep sessions working. Lane stores preferences such as your selected theme in your browser. Intake uses tab session storage to recover unfinished text and upload metadata; this recovery record does not preserve local file contents after a reload. Files already uploaded may remain on the server until saved or cleaned up.
You can clear browser storage through your browser settings. Doing so may sign you out, reset preferences or remove an unsaved local draft; it does not delete server-side accounts, Requests or uploaded files.
7. Retention and deletion
Account information is kept to maintain your account, and workspace content is kept to support the workspace that uses it. Disconnecting Google or revoking access through your Google account does not automatically delete your Lane account or shared content. Email us to request deletion.
We acknowledge privacy requests within 3 working days and aim to complete verified deletion requests within 30 days. If additional time or information is needed, we explain why and follow applicable legal deadlines.
Account deletion removes your Clerk account and removes your name, email address and avatar from Lane’s profile record. Shared Requests, comments, Projects and files may remain with the workspace under a former-member attribution. Personal information inside that content is reviewed separately; changing attribution alone does not anonymize the content. Where deletion rights require removal, we address that information as part of the request.
Authorized workspace administrators may request deletion of a whole workspace and its files. Members’ separate accounts are not automatically deleted. Backup copies may persist for up to 28 days after live-data deletion, are restricted to recovery use, and are expired under the backup schedule. If restored, completed deletion requests are reapplied. Limited records may be retained where legally required, with the reason and applicable period explained to the requester.
Service-provider logs and API processing records follow the applicable provider retention arrangements.
8. Your choices and requests
You can change supported profile details in Settings and manage connected accounts through the account controls. You can revoke Lane’s Google connection through your Google account’s third-party connections settings.
Email uselaneapp@gmail.com to request access to or a copy of your information, correction, account deletion, or help with a privacy concern. Depending on applicable law, you may also have rights to restrict or object to processing, withdraw consent, or complain to a relevant regulator. We may need to verify your identity and, for workspace-wide requests, your authority. Please do not email your password.
9. Security and processing locations
Lane uses HTTPS, authenticated workspace access controls and private attachment storage. No service can guarantee absolute security. Lane and its service providers may process information in countries other than your own. We handle international processing subject to applicable data-protection requirements.
10. Age and changes to this policy
Lane is intended for people aged 18 or older using it for work. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.
When this policy changes, we update its effective date. We will communicate material changes to how personal information is handled and seek consent where required.