[ Legal ]

Privacy Policy

Last Updated: June 28, 2026

01Introduction

Lane Technologies, Inc. (“Lane,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our platform, assistant (the “Agent”), applications, websites, and services (collectively, the “Services”), and the choices and rights you have. By using the Services, you agree to this Privacy Policy.

02Scope and Access Through Partners

This Policy applies to information we process in connection with the Lane Services. If you access the Services through a partner, that partner handles your information under its own privacy policy; this Policy governs Lane’s processing. Where we process certain information on behalf of a partner or payment provider, we do so under our agreements with them.

03Information We Collect

We collect information you provide to us, information we collect automatically as you use the Services, and information we receive from third parties. We may combine information from these sources.

Information you provide. This includes your account and contact details, such as your name, email address, and phone number. To verify your identity and meet legal requirements, we use an identity-verification provider; you provide the information needed for verification to that provider, which collects and processes it in its own environment, and Lane receives only the verification result. To complete purchases, we collect your billing and shipping details and your payment information, which is protected as described in Section 7 (Lane does not store your full card number). We also collect the access information for the merchant accounts and services you connect and authorize us to act within on your behalf, your prompts, instructions, and resulting transaction and order history, and any communications you send us.

Information collected automatically. As you use the Services, we collect usage and activity information about how you interact with the Agent and your transactions, along with logs and diagnostics such as activity records and error logs. We collect device and security information (identifiers and signals about the device and connection you use) to authenticate you, secure your sessions and payments, and prevent fraud. We use cookies and similar technologies as described in Section 11.

Information processed to complete your requests. The Agent can carry out longer tasks and work with third-party merchants and services on your behalf. When you connect a service or ask the Agent to complete a purchase, we process the information needed to do so, including information from the pages and accounts involved and the steps needed to complete checkout, and we receive related information back, such as order and confirmation details, when the task is completed. We use this information only to complete your request and to keep the Services secure and reliable. We apply filters designed to avoid retaining sensitive details that are not needed, we do not retain full copies of merchant page content longer than necessary to complete and verify your request, and this information is never used to train AI models in a form that identifies you. To help keep the Services safe, we may also ask you to confirm your age or identity.

Information from third parties. We receive order and transaction information from the merchants and services you transact with, transaction and payment-status information from our payment partners, and verification results from identity-verification providers.

04How We Use Your Information

We use your information to:

• Provide the Services and complete your transactions: operate the Agent, access the accounts you authorize, and complete the purchases and actions you approve.
• Personalize your experience: use your prompts, instructions, and transaction history to understand your preferences and make the Agent more relevant and helpful, such as tailoring suggestions, remembering context, and streamlining future requests.
• Process payments: complete the transactions you approve and manage subscriptions and credits.
• Verify and authorize: send one-time verification codes and purchase-approval requests, and authenticate you securely.
• Keep the Services secure: detect, investigate, and prevent fraud, abuse, and security incidents.
• Support and communicate: respond to inquiries and send service and transactional messages.
• Improve the Services: analyze and improve performance, reliability, and quality.
• Comply with law: meet legal, regulatory, identity-verification, tax, and accounting obligations and enforce our Terms.

How we handle your most sensitive information. We use your payment information, account credentials, and account access information solely to complete the transactions and actions you authorize, not for marketing, advertising, or to personalize your experience. Identity verification is performed by an identity-verification provider; the verification result we receive is used only to verify your identity, prevent fraud, and meet legal obligations, never to build marketing profiles or infer characteristics about you. We never use your credentials, account access information, or payment information to train any artificial-intelligence or machine-learning model. Where we improve our models or the Services, we use only de-identified or aggregated information as described in Section 6.

05How We Share Your Information

We do not sell your personal information for monetary or other valuable consideration, and we are not a data broker. We do not share your information with parties unrelated to your transactions or to operating the Services. Your prompts, instructions, and transaction history are used by Lane to operate and personalize the Services and are not disclosed to third parties for their own purposes. Where we present advertising or promotional content, any personalization relies on limited signals within the Services, and we do not disclose your account credentials, payment information, or transaction contents to advertisers. We provide the choices and opt-outs required by applicable law, as described in Section 13.

We share information with merchants and services only to complete your transaction: the information necessary to complete the purchases and actions you direct, including, where a merchant or service requires account login or other credentials to complete a purchase, the information needed to do so. We share information with payment partners as necessary to process and complete the payments you authorize.

To enable trusted agent access, and so that registered agents can transact with merchants and services on your behalf, we share agent identity and authentication information with the relevant merchants, services, and payment networks. This establishes trusted, authorized access for registered agents to the merchant or service being interacted with, and is used only to complete the transactions you authorize.

We share information with service providers who perform services on our behalf under contractual confidentiality and security obligations (in areas such as payment processing and protection, identity verification, messaging and notifications, and cloud hosting and infrastructure), and they may use your information only to provide services to us. We maintain a current list of our subprocessors and will make it available on request. Where you access the Services through a partner, we share the information necessary to provide and support that access.

We may also share information when required for legal or safety reasons: to comply with law, legal process, or government or regulatory requests, or to protect our rights or anyone’s safety; in connection with a business transfer such as a merger, acquisition, financing, or sale of assets; and with your consent, for any other sharing you direct or approve.

06De-Identified and Aggregated Information

We may create and use de-identified or aggregated information that does not identify you or any individual, including patterns derived from successful tasks that help us improve the reliability and quality of the Services. We maintain de-identified information without attempting to re-identify it, except as permitted by law. De-identified and aggregated information is not personal information, and it never includes your credentials, account access information, or payment information.

07Payment and Financial Information

We use a PCI DSS Level 1-compliant tokenization provider to handle payment card data, so that your full card number is not exposed to or stored by Lane. Lane is a technology provider, not a bank or other financial institution. Lane does not hold your funds, does not accept deposits, and is not FDIC-insured. The charging of your payment method and the movement of funds are performed by licensed payment partners, not by Lane.

08A Note on Automated Processing and Accuracy

The Agent uses automated, probabilistic technology and acts only on the actions you initiate and approve. Like other AI systems, it can produce unexpected or inaccurate results, so you should review the details we present before approving an action. Information about your privacy choices is described in Section 13.

09Data Security

We use administrative, technical, and organizational safeguards designed to protect your information. We use a PCI DSS Level 1-compliant tokenization provider to handle payment card data, so that your full card number is not exposed to or stored by Lane, and we limit access to your information to performing the actions you authorize and operating the Services. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Use the security and approval controls we provide, keep your account secure, and notify us promptly at team@getonlane.com of any suspected unauthorized access.

10Data Retention

We retain your information for as long as necessary to provide the Services, personalize your experience, comply with legal obligations, resolve disputes, and enforce our agreements, after which we securely delete or de-identify it. In general, we keep account, access, and history information while your account is active and for a reasonable period afterward, or until you disconnect the relevant account or close your account; we keep transaction records as long as required for tax, accounting, and regulatory purposes; we keep identity-verification records as required by applicable law; and we keep usage and diagnostic data in aggregated or de-identified form. When you disconnect a merchant account or payment method, we delete or disable the associated stored access information within a commercially reasonable period, except where retention is required by law.

11Cookies and Tracking Technologies

We use cookies and similar technologies that are essential to operate the Services, to remember your preferences, to secure your sessions, and to understand usage. To act on your behalf, the Services may also store session information for the accounts you connect so the Agent can complete the actions you approve; this is distinct from cookies on Lane’s own sites. Most browsers let you control cookies, though blocking some may affect functionality. We do not respond to “Do Not Track” browser signals at this time; where applicable law requires, we honor recognized opt-out preference signals such as Global Privacy Control.

12SMS / Text Communications

With your consent, we use your phone number to send transactional messages, including one-time verification codes and purchase-approval requests. Message frequency varies with your activity, and message and data rates may apply. You can reply HELP for help and STOP to unsubscribe. We do not share your phone number with third parties for their own marketing.

13Your Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, port, restrict, or object to the processing of your personal information, to limit the use of sensitive personal information, and to withdraw consent.

We do not sell your personal information for monetary or other valuable consideration. To the extent any practice is characterized as a sale, or as sharing for targeted advertising or cross-context behavioral advertising, under applicable law, we provide the opt-out and choices the law requires, including honoring recognized opt-out preference signals such as Global Privacy Control. You can ask us to limit the use of sensitive personal information to the permitted purposes described in this Policy; we restrict our use of sensitive personal information to identity verification, fraud prevention, completing your requests, and legal compliance. If you are a California resident, the CCPA/CPRA gives you the right to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of recipients; to access, correct, and delete your information; to limit the use of sensitive personal information; and to be free from discrimination for exercising your rights. Where other laws apply, such as the GDPR in the EEA/UK, you may exercise the rights those laws provide; our legal bases include performing our contract with you, your consent, our legitimate interests (such as security and fraud prevention), and compliance with legal obligations.

To exercise your rights, contact us at team@getonlane.com. You may use an authorized agent where the law permits. We will verify your request as required by law and respond within the required timeframe. Some information we must keep for legal, tax, or fraud-prevention reasons may be retained even after a deletion request.

14International Data Transfers

Your information may be processed in countries other than your own, which may have different data-protection laws. Where required, we use appropriate safeguards for international transfers.

15Children’s Privacy

The Services are intended only for adults 18 and older, and we do not knowingly collect information from anyone under 18. If you believe we have, contact us at team@getonlane.com and we will take steps to delete it.

16Third-Party Links and Services

The Services help you purchase from third-party merchants and services, which operate under their own privacy policies and terms. Your purchases are between you and the merchant: the merchant handles fulfillment, and questions about an order, including cancellations, returns, refunds, and missing or damaged items, are handled under the merchant’s own policies. When the Agent completes a purchase, we share the information necessary to complete it (as described in Section 5) and receive order and confirmation details back. We are not responsible for the practices of merchants and other third parties, and we encourage you to review their policies.

17Changes to This Privacy Policy

We may update this Policy to reflect changes in our practices, technology, or legal requirements. We will post the updated Policy and revise the “Last Updated” date, and provide additional notice where appropriate. Your continued use of the Services after the update takes effect constitutes acceptance.

18Contact Us