Privacy Policy

Laneway ("we", "us") is a product of GetG Technology Private Limited, part of Get Grahak. This policy explains what personal data we collect when you use the Laneway website, app, client portals and embeds, why we collect it, and the choices you have. It is written to meet the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and the rules made under it.

Who is responsible for your data

For your account and our website, GetG Technology Private Limited is the Data Fiduciary. Registered office: [company address].

For the content a workspace puts into Laneway (cards, comments, files, client contacts), the workspace owner decides what is collected and why, and we process it on their behalf. If you are a client or end user of one of our customers, please contact that customer first; we will help them answer you.

What we collect

• Account details: your name, email address or WhatsApp number, time zone, profile photo if you add one, and the workspaces you belong to. We don't use passwords: you sign in with a one-time code, which we store only as a hash and which expires within minutes.
• Workspace content: projects, cards, comments, attachments, roadmap posts, votes and the contacts a workspace invites. This belongs to the workspace.
• Device and session data: the device name and browser, IP address, and the time of each sign-in, so you can see and end your sessions and we can warn you about a new device.
• Billing details: billing name, address, state and GSTIN for tax invoices. Card, UPI and bank details are entered on Razorpay's checkout and never reach our servers.
• Marketing data: if you arrive from an ad, the campaign tags in the link (for example utm_source), the page you landed on and the referring site, kept with your sign-up so we know which campaigns work. Messages you send through our contact form.
• Usage data: which features are used and error reports, used in aggregate to keep the service working and to improve it.

Why we use it

Purpose	Data used	Basis under the DPDP Act
Create your account and sign you in	Account, device and session data	Your consent when you sign up, and to provide the service you asked for
Run the boards, portals and notifications you set up	Workspace content, account details	To provide the service
Bill you and issue GST invoices	Billing details	Legal obligation (tax laws)
Keep the service secure and prevent abuse	IP address, device data, audit logs	Legitimate use for security and fraud prevention
Send product and trial emails	Email address	Consent; every non-essential email has a one-click unsubscribe
Measure our ads	Campaign tags, cookies set by ad partners on our marketing pages only	Consent, which you can withdraw in your browser

We do not sell personal data, and we never use the content of your workspace to advertise to you.

AI features

When someone in a workspace uses an AI action (for example drafting a card from a note), the text needed for that action is sent to our AI provider to produce the result. Providers process it under contract and may not use it to train their models. Workspaces on the Business plan can use their own provider key. AI output is treated as a suggestion, never as an instruction to the system.

Who we share it with

We share personal data only with service providers that help us run Laneway, under written contracts that require them to protect it:

• Hosting and databases in data centres we choose for the service
• Wasabi (encrypted file storage)
• Email delivery (SMTP) and WhatsApp messaging providers (MSG91 or Meta), only to deliver messages you asked for
• Razorpay, to take payments
• AI model providers, only for AI actions someone chose to run
• Google, Meta and LinkedIn, for ad measurement on our marketing pages only; their tags never load inside the app, portals or embeds

We may also disclose data when Indian law requires it, for example to comply with a lawful order of a court or government agency.

Where it is stored

Data is stored and processed in India and, for some service providers, in other countries that are not restricted by the Government of India under section 16 of the DPDP Act. Wherever it is processed, the same protections in this policy apply.

How long we keep it

• Account and workspace data: for as long as the account or workspace exists.
• After a trial ends unpaid, or a subscription lapses, a workspace becomes read-only. Its data is kept for 90 days, with reminders, and then deleted.
• When you delete a workspace, or ask us to delete your account, we remove it from the live service within 30 days. Copies in encrypted backups expire within 12 months and are used only to restore the service.
• Invoices and the billing records behind them are kept for 8 years, as Indian tax law requires.
• Audit logs are kept for the period your plan shows (30 days to 1 year).
• One-time sign-in codes expire within minutes; contact-form messages are kept for 2 years.

How we protect it

Every workspace's data is kept separate and checked on every request. Sign-in is passwordless, sessions can be ended from any device, API tokens are stored as hashes, files sit in private storage behind short-lived signed links, and secrets are encrypted. See our Security page for more.

Your rights

Under the DPDP Act you can:

• Access a summary of the personal data we hold about you and how we use it
• Correct, complete or update it (most of it you can edit yourself under Profile)
• Erase it, unless we must keep it by law
• Withdraw consent at any time, as easily as you gave it; this doesn't affect what was done before
• Nominate someone to exercise these rights if you die or become unable to
• Have your grievance addressed by us, and then by the Data Protection Board of India

Write to support@lanewayapp.com to use any of these rights. We'll confirm who you are and reply within 30 days.

Children

Laneway is a business tool for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us personal data, write to us and we'll delete it.

Grievance Officer

If you have a concern about how your personal data is handled, contact our Grievance Officer:

[grievance name] GetG Technology Private Limited, [company address] Email: support@lanewayapp.com

We acknowledge complaints within 24 hours and resolve them within 15 days.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change matters for how we use your data, we'll tell workspace owners by email at least 14 days before it applies.