Lane Eight Privacy Policy
Effective date: August 1, 2026
This Privacy Policy describes how Lane Eight ("we," "us") collects, uses, and shares personal information in connection with the Lane Eight time tracking service, our websites, and related services (together, the "Service").
Lane Eight is a business tool. Companies (our "Customers") use it to track, approve, and bill for time worked by their employees and contractors ("Authorized Users").
1. Our two roles
We handle personal information in two different capacities, and different rules apply to each.
When we act on behalf of a Customer. Time entries, hourly rates, project assignments, approval records, and other information that Authorized Users create or that a Customer uploads about its workers ("Customer Data") are controlled by the Customer, not by us. We process Customer Data only as a service provider, on the Customer's instructions and to provide the Service. The Customer's own privacy practices govern this data.
If you are an Authorized User, your employer or the company that invited you to Lane Eight decides how your time data is collected, used, and retained. Questions or requests about your time data, including requests to access, correct, or delete it, should go to that company. We will assist them in responding, but we do not act on such requests unilaterally.
When we act for ourselves. We control the information described in Section 2 that we collect for our own purposes: account registration details, billing records, website analytics, and support communications. The rest of this policy applies primarily to that information.
2. Information we collect
Account information. When a Customer signs up, we collect the name, email address, and password of the account owner and administrators, along with company name and contact details. When an Authorized User accepts an invitation, we collect their name, email address, and password.
Billing information. For paid subscriptions we collect billing contact details and payment card information. Card details are collected and stored by our payment processor; we retain only the card type, last four digits, and expiration date.
Customer Data. As described in Section 1, this includes time entries, descriptions of work performed, billing rates, client and project names, approval and edit history, and related records. We process it on the Customer's behalf.
Usage and log data. When you use the Service we automatically collect IP address, browser and device type, operating system, pages viewed, actions taken, and timestamps. We use cookies and similar technologies for sign-in sessions and basic analytics. We do not use third party advertising cookies or trackers.
Support communications. If you contact us, we keep the correspondence and any information you choose to provide.
We do not collect precise GPS location, screenshots, biometric identifiers, or activity monitoring data.
3. How we use information
We use the information we collect to provide, maintain, and secure the Service; to set up and administer accounts; to process payments; to respond to support requests; to send administrative messages such as invoices, security notices, and changes to our terms; to send product updates and marketing to account owners, who can opt out at any time; to monitor usage, debug problems, and improve the Service; to detect and prevent fraud and abuse; and to comply with legal obligations.
We may create aggregated or de-identified data from usage of the Service. We maintain such data in a form that cannot reasonably identify any person or Customer, we commit to not attempting to re-identify it, and we may use it to operate and improve the Service.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
4. How we share information
We share personal information only as described here.
Service providers. We use a small number of vendors to run the Service, and they may process personal information only to provide services to us. Our current subprocessors are: Supabase (database, authentication, and hosting infrastructure, United States); Stripe (payment processing); and Resend (transactional email). We will update this list as our vendors change; material changes will be reflected in an update to this policy.
Connected platforms. If a Customer connects Lane Eight to a third party platform, we exchange data with that platform's provider as described in Section 5.
At the Customer's direction. Customer administrators control who within their organization can see Customer Data, and they may direct us to share it with other services.
Legal reasons. We may disclose information if required by law, subpoena, or other legal process, or where we believe disclosure is necessary to protect the rights, safety, or property of Lane Eight, our users, or others.
Business transfers. If Lane Eight is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected Customers of any change in ownership or in the uses of personal information described here.
5. Connected accounting and billing platforms
Customers may authorize Lane Eight to connect to third party accounting, invoicing, or bill payment platforms. The integrations available at any time are listed in the Service. Connections are made through each platform's own authorization flow, and we never see or store the Customer's passwords for connected platforms. With the Customer's authorization, we read records needed for the integration, such as customers, projects, service items, and employee or vendor records, and we write approved time entries to the connected platform.
We use data obtained from connected platforms solely to provide the integration for the connected Customer. We do not use it for advertising and we do not sell it. If a Customer disconnects an integration, we stop accessing the platform immediately and delete the stored access credentials for it. Data already synced to a connected platform remains there and is governed by that provider's terms and privacy policy.
6. Cookies and Do Not Track
We use strictly necessary cookies for authentication and session management, and first party analytics cookies to understand how the Service is used. You can control cookies through your browser settings, though disabling necessary cookies will prevent sign-in. Because there is no common industry standard for them, the Service does not currently respond to browser Do Not Track signals.
7. Security
We take reasonable administrative, technical, and physical measures to protect personal information, including encryption in transit and at rest, access controls, and encrypted storage of integration credentials. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a breach affecting Customer Data, we will notify the affected Customer without undue delay.
8. Retention
We keep account and billing information for as long as the account is active and afterward as needed for tax, accounting, and legal purposes.
Because time records often serve as wage and billing records that employers are legally required to keep, we retain Customer Data for the life of the Customer's account and do not automatically purge it. Customers can export their data at any time and can delete records or their entire account, subject to the export and deletion terms in our Terms of Service. Backup copies are removed on a rolling basis, generally within 90 days.
9. Your rights and choices
You may access and update your account information in the Service at any time, and you may opt out of marketing email using the unsubscribe link in any message.
Depending on where you live, you may have legal rights to access, correct, delete, or receive a copy of your personal information, and the right not to be discriminated against for exercising those rights. To make a request about information Lane Eight controls, contact us at team@lane-8.com. We will verify your identity and respond within the time required by applicable law, generally 45 days. If we decline a request, you may appeal by replying to our decision.
If your request concerns time data or other Customer Data, we will refer it to the relevant Customer, as explained in Section 1.
10. Children
The Service is a workplace tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify account owners by email or a prominent notice in the Service at least 30 days before the changes take effect, and we will update the effective date above. Changes apply prospectively; we will not materially change how we handle previously collected information without providing notice and any legally required choice.
12. Contact us
Lane Eight team@lane-8.com