Privacy and data use

Clear about your data.

This policy explains how LayerLane collects, uses, discloses, retains, and protects personal information across our website, inquiry forms, advertising, client accounts, and managed services.

Effective September 14, 2026

01

Scope and roles

This policy applies when you visit layerlane.studio, submit a contact or project form, respond to a LayerLane ad, create or use a client account, purchase services, upload materials, or otherwise communicate with us. It does not control the independent practices of third-party websites, social platforms, or services linked from our site.

LayerLane generally decides how personal information is used for our own inquiries, accounts, billing, marketing, and operations. When LayerLane handles personal information only to build or operate a service for a client, that client may control the information and its own privacy notice and instructions may apply.

02

Information we collect

Contact and identity information

Name, email address, phone number, business or artist name, location, professional role, and similar details you provide through our website, a social-platform lead form, email, or another conversation.

Account and authentication information

Account identifiers, profile details, sign-in records, authentication tokens, and security information used to create and protect a client account. Our authentication provider handles sign-in credentials and one-time codes.

Inquiry, project, and client content

Your goals, budget range, timeline, website or domain, project brief, messages, approvals, uploaded files, portfolio materials, brand assets, deliverables, support requests, and other information needed to scope or provide services.

Phone conversations

Calls with our AI assistant can produce a transcript, summary, and follow-up notes. On incoming calls, we ask before recording audio; if you agree, the audio is stored by our phone provider and made available only through our private admin tools. You may decline recording and continue the call.

Billing and transaction information

Plan selection, invoice and subscription status, payment amount, billing contact details, tax-related information, and transaction identifiers. Payment card details are submitted directly to our payment processor; LayerLane does not receive or store the full card number or security code.

Device, usage, and diagnostic information

IP address and general network information available in server logs, browser and device type, pages and paths viewed, referring path, session identifiers, time on page, performance measurements, and error or security diagnostics. Our first-party UX measurement is designed not to collect keystrokes or the contents of form fields.

Advertising and attribution information

Campaign and referral details such as UTM parameters, referral codes, landing page, referring page, and advertising click identifiers. Caller partner records may include contact details, typed legal name, agreement version and text hash, acknowledgments, acceptance time, IP address, browser user agent, call assignments, recordings, transcripts, outcomes, attribution, commission tier or promotion, and payout records. If you respond to a Meta lead ad, we receive the information you choose to submit and campaign-level delivery information from Meta.

We collect information directly from you, automatically from your browser or device, from a client who authorizes your access, and from services you choose to connect or use, such as Meta, Stripe, or an integration included in a project.

Please do not send Social Security numbers, government identification, health records, biometric information, precise geolocation, payment-card details, or other highly sensitive information unless we specifically request it through an appropriate secure process.

03

How we use information

  • Respond to inquiries, qualify requests, prepare proposals, and communicate about a possible project.
  • Create and operate accounts, client portals, managed websites, portfolios, dashboards, integrations, and support services.
  • Process subscriptions, invoices, payments, refunds, renewals, and related records.
  • Review caller partner invitations, record and enforce agreement acceptance, administer compliant calls, attribute referred inquiries, and calculate or pay tiered rewards.
  • Send service messages, authentication codes, project updates, receipts, and requested communications.
  • Understand which pages and campaigns are useful, measure site performance, troubleshoot errors, prevent abuse, and improve our services.
  • Protect LayerLane, our clients, and others; enforce agreements; comply with law; and establish or defend legal claims.

For visitors in the European Economic Area, United Kingdom, or another jurisdiction that requires a legal basis, we rely as appropriate on performance of a contract, steps requested before a contract, legitimate interests, legal obligations, and consent. Our legitimate interests include operating and improving the service, responding to inquiries, measuring our own marketing, and protecting our systems.

04

Cookies, storage, and analytics

We use cookies and similar browser storage for essential sign-in, session continuity, security, preferences, and inquiry protection. We also store a random visitor identifier and campaign-attribution details in local storage so we can understand which referral or ad led to an inquiry.

LayerLane uses Vercel Analytics, Vercel Speed Insights, and a first-party UX measurement system to understand page use and performance. These tools may process device, network, page-path, referral, session, timing, and web-performance information. Our first-party measurement does not intentionally record form-field contents, keystrokes, or full referring URLs with query strings.

You can clear or block browser storage through your browser settings, but doing so may affect sign-in, security, attribution, or other site functions. Because there is no uniform standard for browser “Do Not Track” signals, we do not currently respond to DNT as a standalone instruction. We do not use website visitor information for sale or cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices.

05

When information is disclosed

We disclose personal information only as reasonably needed for the purposes described here, at your direction, or as required by law. The categories of recipients include:

Infrastructure and data services

Hosting, content delivery, database, authentication, file storage, monitoring, and analytics providers, including Vercel and Supabase, receive information needed to operate and secure the service.

Payments and communications

Stripe processes payments and billing information. Email, phone, and messaging providers, including Resend and Twilio, process contact details, calls, recordings when permitted, and message content needed to deliver communications. Our AI provider processes call audio to operate the assistant and produce transcripts and summaries.

Advertising and social platforms

Meta and similar platforms process information under their own policies when you view or respond to our ads. LayerLane may receive lead-form responses, advertising click identifiers, and aggregated or campaign-level performance data.

Project vendors and integrations

A client-approved domain registrar, hosting provider, scheduling tool, content source, automation platform, AI-enabled service, or other vendor may process information when it is necessary for the agreed project or requested feature.

Professional, legal, and business recipients

We may disclose information to professional advisers, insurers, auditors, authorities, or other parties when reasonably necessary for legal compliance, safety, fraud prevention, a business transaction, or the protection of rights.

LayerLane does not sell personal information for money. We may buy interest-based advertising from platforms such as Meta without giving those platforms LayerLane client lists. To the extent applicable law treats any future use of personal information for targeted advertising as a sale or sharing, you may opt out as described below.

06

Retention and security

We keep personal information only as long as reasonably necessary for the purpose collected, the client relationship, security and fraud prevention, dispute resolution, and legal, tax, accounting, or contractual requirements. Retention depends on the type of record: active account and project records generally remain while the relationship continues; managed client content may be retained for up to 90 days after termination to permit recovery; and billing, transaction, consent, and legal records may be kept longer where required or reasonably necessary.

We use administrative, technical, and organizational safeguards designed for the nature of the information, including access controls, authentication, encrypted connections, provider security features, validation, and rate limiting. No internet transmission or storage system can be guaranteed completely secure, so please use care when deciding what to send.

07

Your privacy choices and rights

Depending on where you live and subject to legal exceptions, you may have the right to:

  • Confirm whether we process your personal information and request access to it.
  • Correct inaccurate information you previously provided.
  • Request deletion of personal information, subject to lawful exceptions.
  • Request a portable copy or representative summary of information you provided, where applicable.
  • Opt out of qualifying targeted advertising, sale of personal information, or certain profiling, where applicable.
  • Withdraw consent when processing is based on consent and object to or restrict certain processing where applicable.

Email contact@layerlane.studio with the subject “Privacy request.” Describe the right you want to exercise and the email address connected to the information. We may ask for information reasonably needed to verify your identity or authority. We will respond within the period required by applicable law, generally within 45 days where the Indiana Consumer Data Protection Act applies.

If we deny a request, you may appeal by replying or emailing the same address with the subject “Privacy appeal.” We will explain our decision and any further complaint options available to you. You may also use an authorized agent where applicable. We will not discriminate against you for exercising a privacy right.

You may unsubscribe from promotional email through the link in the message or by contacting us. Transactional, security, billing, and project messages may still be sent when necessary. If you want LayerLane not to use your information for qualifying targeted advertising, use the same privacy-request address and say “targeted advertising opt-out.”

08

Children and international visitors

LayerLane is a business and professional service not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided information, contact us so we can review and delete it as appropriate.

LayerLane is based in Indiana, United States. If you access the service from another country, your information may be processed in the United States and other places where our providers operate. Where required, we use appropriate contractual or legal safeguards for international transfers.

09

Changes and contact

We may update this policy when our services, providers, or legal obligations change. We will post the revised policy here, update the effective date, and provide additional notice when a change is material and applicable law requires it.

Questions, requests, and appeals can be sent to LayerLane at contact@layerlane.studio. LayerLane is based in Indiana and works with clients in multiple locations.

Contact LayerLane

This policy is intended to describe LayerLane’s current practices in clear language. It is not legal advice to LayerLane clients and does not replace a client’s own privacy notice for a website or system LayerLane builds on that client’s behalf.