Privacy Policy

1. Who we are

ExpandLane LLC controls data collected through the website and services and is located at 28 Geary St, Ste 650 #608, San Francisco, CA 94108, United States. Privacy questions and requests can be sent to support@expandlane.com.

2. Information we collect

• Contact and billing information you provide, such as name, email, phone, company, address, and invoice identifiers.
• Service details, scope, messages, uploaded files, notes, and requested deadlines.
• Operational order and payment information, such as amount, currency, schedule, status, reference, and masked method details. ExpandLane’s server is not intended to receive a full card number or security code.
• Recurring-plan records, including consent, amount, frequency, billing cycles, and cancellation state.
• Limited technical and security data, such as IP address, browser, device, request logs, and fraud-prevention signals.
• Cookie or language preferences when saved.

3. How we use information

• Respond to inquiries and prepare, perform, deliver, and support services.
• Initiate payments, display status, create invoices, manage cancellations or refunds, and reconcile records.
• Administer recurring plans, consent records, billing cycles, and cancellation requests.
• Protect customers and the website, prevent abuse, and investigate disputes or suspected fraud.
• Meet applicable accounting, tax, record-keeping, and legal duties.
• Improve website reliability without using sensitive payment data for advertising.

4. Legal bases

Depending on your location and the purpose, processing may rely on performance of a contract or requested pre-contract steps, a legal obligation, a legitimate interest such as security, fraud prevention, or record-keeping, or consent where required. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.

5. Payments and Adyen

When Adyen checkout is enabled, sensitive payment details are entered in Adyen components, and Adyen may use information for authentication, risk management, fraud prevention, payment networks, and disputes. Displayed methods depend on eligibility. The payment provider’s own notices and terms apply to its independent processing.

6. How information is shared

We do not sell personal information. We may share the minimum necessary with payment, hosting, email, security, storage, and professional-tool providers, or with advisers and authorities when legally required. Necessary records may also be shared to investigate a payment, dispute, or suspected fraud.

7. International processing

Some providers may process data in other countries. Where international-transfer rules apply, we rely on an appropriate legal mechanism and the data-protection commitments available from the provider.

8. Retention

Information is kept only as long as reasonably needed for service delivery, payments, invoices, security, tax, disputes, and legal duties. Records no longer needed may be deleted or de-identified. Payment, consent, and invoice records may be retained longer where accounting or law requires.

9. Security

We use controls appropriate to the data, including provider-hosted payment fields, signed-webhook verification, restricted administration, session protection, log minimisation, and encryption for selected information. No system can guarantee absolute security.

10. Cookies and security tools

The site uses storage necessary for sessions and form security. Adyen components and reCAPTCHA may use device information or cookies needed for payment, authentication, fraud prevention, and abuse protection. Optional advertising storage is not enabled by default. See the Cookie Policy.

11. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, or complain to a supervisory authority. Identity verification may be required, and a record may be retained where legally necessary or needed for an active dispute.

12. Children

The services are intended for business customers and adults able to enter a contract, not children. If a child’s information was submitted without an appropriate basis, contact us to request review and deletion.

13. Changes and contact

This policy may be updated, and a new version will display its effective date. Send privacy requests to support@expandlane.com.