Privacy Policy

What we collect

When you sign up, we collect your email address and basic account information via Clerk (our authentication provider). If you connect your YouTube channel, we access your channel's public data and analytics through the YouTube API with your explicit consent.

How we use your data

Your data is used to power LaneHive's features: generating content ideas, analyzing video performance, and providing personalized recommendations. We never sell your data to third parties.

Third-party services

• Clerk — authentication and user management
• Turso — database hosting (your data is stored in isolated per-user databases)
• Cloudflare — hosting and content delivery
• Sentry — error monitoring (no personal data sent)
• PostHog — product analytics (anonymized usage data)
• LemonSqueezy — payment processing
• YouTube API — channel and video data (with your OAuth consent)

Data protection

We implement the following measures to protect your data:

• Encryption in transit — All data transmitted between your browser and our servers is encrypted using TLS 1.2+ (HTTPS). API calls to third-party services (YouTube, Clerk, Turso) are also encrypted in transit.
• Encryption at rest — Your data is stored in encrypted databases hosted by Turso. Payment information is processed and stored exclusively by LemonSqueezy; we never store card numbers or payment credentials on our servers.
• Data isolation — Each user's content data (ideas, scripts, calendar entries) is stored in a dedicated, isolated database that is not shared with or accessible by other users.
• Access controls — Access to production systems and databases is restricted to authorized personnel using role-based access controls. Authentication tokens and API keys are stored securely in encrypted environment management systems and are never exposed in client-side code.
• OAuth token security — YouTube OAuth tokens are encrypted at rest using AES-256 encryption before storage. Tokens are only decrypted server-side when making authorized API requests on your behalf.
• Monitoring — We use Sentry for error monitoring and Cloudflare for DDoS protection and web application firewalling. Anomalous access patterns are logged and reviewed.

Google API Services — Limited Use Disclosure

LaneHive's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we limit our use of Google API data as follows:

• We only access YouTube data that you have explicitly authorized via OAuth consent.
• We use your YouTube data solely to provide LaneHive's features — channel analytics, content recommendations, and video performance insights.
• We do not sell, lease, or share your YouTube data with third parties for advertising, data brokering, or any purpose unrelated to LaneHive's core functionality.
• We do not use your YouTube data for surveillance or tracking purposes.
• You can revoke LaneHive's access to your YouTube data at any time through your Google Account permissions.

Data retention

Your data is retained as long as your account is active. If you delete your account, your per-user database and all associated content are permanently deleted. YouTube API data cached for analytics purposes is refreshed periodically and deleted upon account deletion.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke YouTube API access at any time via Google Account permissions
• Export your data by contacting us

To exercise any of these rights, contact us at privacy@lanehive.com.

Contact

Questions about privacy? Email us at privacy@lanehive.com.