Privacy Policy

This Privacy Policy explains how [LEGAL ENTITY NAME] ("Laneify," "we," "us") collects, uses, and protects information in connection with the Laneify AI logistics platform (the "Service"). It applies to our customers (businesses that use the Service) and to individuals whose information we process on their behalf.

1. Information we collect

• Account information — name, work email, company, role, and password (stored only as a hash).
• Customer content — the logistics data you enter or import: orders, shipments, inventory, routes, customers, vendors, and related records.
• Connected-service credentials — API keys or tokens you provide to connect your own carrier, marketplace, ERP, or identity-provider accounts. These are encrypted at rest and used only to sync your data.
• Usage and log data — actions taken in the Service, timestamps, IP address, and request metadata, recorded in part for security and audit purposes.
• Payment information — handled by our payment processor (Stripe); we do not store full card numbers.

2. How we use information

• To provide, operate, secure, and improve the Service.
• To authenticate users, enforce access controls, and maintain the audit trail.
• To sync data with the third-party accounts you connect, at your direction.
• To process billing and manage your subscription.
• To communicate with you about the Service, and to comply with legal obligations.

We do not sell your data, and we do not use your customer content to train models for other customers.

3. Data ownership and tenant isolation

Your customer content is yours. The Service is multi-tenant and isolates each organization's data so that other customers cannot access it. We access your content only as needed to operate the Service, provide support you request, or comply with law.

4. Sharing and sub-processors

We share information only with service providers who help us run the Service (for example, our cloud hosting and database provider, and our payment processor), under obligations of confidentiality and security; with the third-party services you connect, at your direction; and where required by law. A current list of sub-processors is available on request at [PRIVACY CONTACT].

5. Retention

We retain your information for as long as your account is active and as needed to provide the Service, then delete or anonymize it in accordance with your instructions and our legal obligations. You can export or request deletion of data at any time.

6. Security

We use encryption in transit and at rest for sensitive credentials, hashed passwords, tenant isolation, an immutable audit trail, and access controls. See our Security & Trust page for details. No system is perfectly secure, but we work to protect your data using industry-standard practices.

7. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data, and to object to or restrict certain processing. To exercise these rights, contact us at [PRIVACY CONTACT]. Where we process data on a customer's behalf, we will refer such requests to that customer.

8. International transfers

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards for cross-border transfers.

9. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from children under 16.

10. Changes

We may update this policy from time to time. We will post the updated version here and update the effective date; material changes will be communicated as required.

11. Contact

Questions about this policy or your data? Contact us at [PRIVACY CONTACT].