Privacy Policy

Who handles your information

Rally Lane is operated by Luc Schurgers. For questions or requests, use our support form. This policy covers our website, account and workspace services, support, and billing. Where a business uses Rally Lane to handle information about its own customers or team, that business controls its use of that information; contact its workspace administrator as well as us when appropriate.

Information we collect

• Inquiries and support: your name, email, business name, plan interest, messages, and the information you choose to send.
• Accounts and teams: email, name, account identifier, authentication information, membership, role, invitations, preferences, and account timestamps.
• Workspace content: brand information, uploaded photos and assets, prompts, drafts, generated content, schedules, review actions, and publication status.
• Connections: social account identifiers, connection status, access tokens or provider credentials needed for the connections you authorize.
• Billing: Stripe customer and subscription identifiers, selected plan, payment and invoice status, and related billing records. Payment details are collected in Stripe’s hosted checkout or portal; Rally Lane does not receive or store full card numbers or card security codes.
• Technical information: IP addresses, request and device information available to our hosting providers, error and security logs, usage counters, and browser preferences. The inquiry form uses a hashed IP-derived identifier for rate limiting.

We receive information directly from you and your invited team, from connected providers you authorize, and from service requests. Required form and account fields are needed to respond or provide the requested service.

Why we use it

We use information to provide accounts and workspaces, generate requested content, manage subscriptions, respond to support, process authorized publishing, enforce usage limits, prevent abuse, troubleshoot problems, and meet legal and accounting obligations.

Where data-protection law requires a legal basis, we rely on performing our agreement for requested services, our legitimate interests in security and reliable operation, legal obligations for required records, and consent where required for optional uses. You can withdraw consent for a consent-based use by contacting us; that does not affect earlier lawful processing. Sending an inquiry does not subscribe you to marketing emails.

Providers and other recipients

• Cloudflare: website delivery, security, and inquiry and support-request storage.
• Google Cloud and Firebase: authentication, application hosting, workspace database, and media storage. Our application database and media storage are configured in the United States.
• Google Gemini: AI generation receives the prompt, relevant brand context, and reference images or other content used in your request. Its handling is subject to the applicable Gemini API terms. Avoid including sensitive personal information in prompts or reference material.
• Stripe: checkout, recurring billing, invoices, payment methods, and subscription management. See Stripe’s Privacy Policy.
• Zernio and connected social networks: account connection information and the content or media you choose to publish, when those features are enabled. Public posts are then governed by the destination platform’s settings and policies.
• Email providers: customer correspondence when we reply to your inquiry or support request.
• Google Fonts: our website requests font files from Google, which receives the technical information needed to serve those requests.

Workspace members can see information according to their access. We may share information with advisers or authorities when necessary for a legal obligation, security incident, or dispute, and with a successor if the service changes ownership subject to applicable safeguards.

We do not sell personal information, use it for cross-context behavioral advertising, or use customer content to train a Rally Lane AI model.

Cookies, browser storage, and tracking

Sign-in uses Firebase authentication and browser storage to maintain your session. The app also stores selected project identifiers, interface preferences, and some editor state locally. You can clear browser storage or sign out, but doing so may end your session or remove unsaved local work.

Rally Lane does not currently include advertising pixels or third-party marketing analytics. We do not track your activity across unrelated sites for advertising. Because there is no such tracking to disable, a Do Not Track or Global Privacy Control signal does not change the service’s operation. Stripe and connected services have their own storage and privacy practices on their pages.

Retention and deletion

We keep account and workspace information while needed to provide the service and handle support. We assess inquiry and support records based on whether the conversation is active, whether a business relationship continues, and whether a dispute or legal obligation requires retention. Billing, security, and audit records may be kept longer where needed for accounting, fraud prevention, or legal claims.

Retention is not currently governed by a single automatic deletion period. You can request deletion at any time. We remove information no longer needed, subject to required records and the time needed for backup or provider copies to expire. We will explain applicable exceptions when handling a request.

Deleting an individual asset or eligible draft, archiving a project, disconnecting a social account, canceling a subscription, and deleting an account are different actions. Project archiving and subscription cancellation do not delete the whole account. Contact support for full account or workspace deletion. Content already published to a social network may need to be removed there separately.

Security and international processing

We use HTTPS, account access controls, private cloud media storage, and encryption for stored social credentials. Media access can use time-limited links; anyone you share such a link with may be able to access it while it is valid. No system can guarantee complete security.

Our providers operate internationally, including in the United States, so your information may be processed outside your country. Applicable provider data-processing terms and legally required transfer safeguards govern those transfers. Contact us for information about the safeguards applicable to your request.

Your choices and rights

You can update available profile information, manage workspace access, disconnect social services, export available workspace data, or use our support form to request access, correction, deletion, or a copy of personal information. Where applicable, you may also request restriction or portability and object to processing based on legitimate interests. You can withdraw consent for optional processing.

We may ask for proportionate information to verify identity or authority over a workspace. Do not send identity documents unless we specifically arrange a secure method. We respond within the time required by applicable law and do not discriminate against you for exercising a protected right.

You may complain to your local privacy regulator, including the California Privacy Protection Agency, the UK Information Commissioner, or your EEA supervisory authority, where applicable. We do not use personal information to make solely automated decisions that have legal or similarly significant effects on you.

Children and policy changes

The service is intended for adults operating businesses and is not directed to children under 18. Contact us if you believe a child has provided personal information.

We publish changes on this page with an updated effective date. Material changes will also be brought to existing customers’ attention through the service or account email when appropriate. We will obtain consent for new uses where required.