Privacy Notice
Beta legal information effective and last updated: 24 October 2026 · Version 2026-10-24-beta-4
1. Account and service information
Lane stores account identity and email, protected authentication credentials, sessions, trial and access dates, device authorisations, inventory data, photo references and service activity. For AutoBuy, Lane records versioned customer acknowledgments, purchase-confirmation preferences, bounded purchase instructions, account and delivery bindings, checkout quotes, payment attempts and order reconciliation needed to provide and audit the requested workflow. For account security, fraud and abuse prevention, and introductory-offer eligibility, Lane may also process first-party website device identifiers, Lane Bridge and Desktop install identifiers, connected-marketplace account identifiers, coarse browser or device characteristics, and network or request-velocity signals. Stable anti-abuse identifiers are keyed and pseudonymised where practical before storage. Payment orders record prices, exchange rates, discounts, document acceptance and payment references. Lane does not collect card details or wallet private keys.
2. Marketplace sessions
Desktop marketplace cookies stay local under Windows-protected encryption in the current session flow. Lane account device tokens are separate and revocable. Cloud device health contains limited connection and version information, not raw marketplace cookies. External photo URLs can expire or change; permanent photo storage is not currently promised.
3. Support and providers
Support stores your account reference, topic, message, reply email and receipt. Render hosts the application and Neon stores its PostgreSQL data using the configured EU deployment. GitHub distributes public desktop files. PayGate receives necessary payment-routing information when an approved payment is initiated. Resend delivers account and verification email where enabled. Cloudflare Turnstile protects public email signup and processes limited browser, device and network security signals needed to distinguish legitimate visitors from automated abuse; Cloudflare's Turnstile Privacy Addendum describes that processing. Connected sign-in and AI providers receive data only when their related feature is used.
4. Purposes and choices
Account and requested-service processing is needed to provide the service. Proportionate security processing protects accounts, limits automated signup and enforces one introductory offer per underlying customer or device identity. A coarse environment match or shared network is not treated as conclusive by itself. Consent is required before optional measurement where applicable. No marketing analytics or advertising pixels are enabled in this staging deployment.
5. Retention and rights
Expiry does not erase your records. The in-account deletion action removes normal account, inventory, photo, marketplace, session and current preference data after recent-authentication checks. Versioned consent and purchase audit records can remain after account closure, including the owner and marketplace-account identifiers needed to evidence instructions, reconcile transactions or address disputes and legal obligations. This does not remove your applicable data-protection rights; contact Lane about access, erasure or retention of these records. Lane may also retain the minimum pseudonymous introductory-offer identity claims needed to prevent a deletion and recreation from resetting trial eligibility for up to 730 days. Network-risk events are retained for no more than 30 days. Deidentified payment and provider-cost audit records may remain where described in the deletion flow. You can request access, correction, export or deletion, and raise objections or restrictions where applicable. You may complain to the ICO if concerned about the handling of personal data.
Read Cloudflare's Turnstile Privacy Addendum.
Contact and complaints
Email LaneListing@proton.me or use the contact form. No response-time guarantee applies during beta. Privacy concerns can also be raised with the ICO.