Privacy Policy
This policy explains what personal data AutoLane ("we", "us") collects when you use our website and apps, why we collect it, who we share it with, and the choices you have. AutoLane is a tool for car and motorcycle dealerships to manage showrooms, team members, and subscriptions.
1. Data we collect
Account data
Your email address and, if you sign in with Google, your name, profile picture, and Google account identifier. We also store your language and time zone preferences. We never receive your Google password.
Business data you enter
Business name, country, currency and time zone; showroom names, addresses, phone numbers, and email addresses; the roles you assign; and the email addresses of people you invite. If you are a business owner, you are responsible for having a lawful basis to enter other people's data.
Subscription data
When a business subscribes through Google Play or the App Store, we receive the plan, status, renewal dates, and a store transaction identifier. We do not receive or store payment card details.
Security and usage data
IP address, browser or device type, approximate session information, sign-in method and time, and an audit log of important actions (for example inviting a member or changing a plan). Our servers also keep short-lived technical logs to keep the service running.
Messages we send
We send transactional emails only: sign-in links and codes, invitations, and account notices. We do not send marketing email.
2. How we use your data
- To provide the service: create your account, sign you in, and show your businesses and showrooms to the right people.
- To keep the service secure: detect abuse, limit repeated requests, and investigate incidents.
- To manage subscriptions and enforce plan limits.
- To communicate with you about your account and respond to support requests.
- To meet legal obligations.
We do not sell your personal data and we do not use it for advertising or profiling.
3. Who we share it with
| Recipient | Why |
|---|---|
| Your business's other members | Members of a business can see the names, email addresses, and roles of other members, as needed for team management. |
| Sign-in with Google, loading fonts on our pages, and receiving subscription notifications from Google Play. | |
| Apple | Receiving subscription notifications from the App Store. |
| Email delivery provider | To deliver sign-in links, invitations, and notices. |
| Hosting and database providers | To store and process data on our behalf, under confidentiality and security obligations. |
| Authorities | Only when required by law or to protect rights and safety. |
4. Cookies
We use only essential cookies that keep you signed in and remember the business you selected. They are strictly necessary, are not used for tracking, and expire when you log out or after at most 30 days. We do not use analytics or advertising cookies. Because of this, we do not show a cookie banner.
5. How long we keep data
- Account and business data: while your account is active.
- Sign-in links and codes: deleted shortly after use or expiry.
- Sessions: until they expire (30 days) or you log out.
- Audit logs: kept for security and accountability. When an account is deleted, the person's name and email are removed from these records.
- Subscription and billing records: kept as long as the law requires.
When you ask us to delete your account, we delete or anonymize your personal data within 30 days. See Delete your account.
6. Your rights
Depending on where you live (for example under Indonesia's Personal Data Protection Law, the GDPR, or the CCPA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can edit your profile in Settings, delete your account at /delete-account, or email us to exercise any other right. We respond within 30 days. You may also complain to your local data protection authority.
7. Security
Data is encrypted in transit (HTTPS). Sign-in uses single-use, expiring links and codes instead of passwords. Each business's data is isolated from others at the database level, access tokens are short-lived, and secrets are stored hashed or encrypted. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as required by law.
8. International transfers
Our servers and providers may be located outside your country. Where we transfer personal data internationally, we rely on appropriate safeguards required by applicable law.
9. Children
AutoLane is a business tool for adults. It is not directed to anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
10. Changes to this policy
We may update this policy. If the changes are significant, we will notify you by email or in the product before they take effect. The effective date at the top shows the latest version.
11. Contact
Questions or requests: me@alitmd.com.