Outlane

Privacy policy

Last updated: October 22, 2026

Outlane provides month-end reporting and driver-based forecasting for finance teams. This policy explains what personal information and Customer Data we collect when you use the Outlane website and app, how we use and disclose it, how long we keep it, and the choices available to you.

← Back to Outlane

In this policy, “Outlane”, “we” and “us” mean Outlane LLC, a New Jersey limited liability company. “Customer” means the business or organization that controls a workspace. “Customer Data” means data submitted to or collected through a workspace. Questions may be sent to hello@outlane.ai.

The short version

• We do not sell personal information or Customer Data.
• We do not use Customer Data to train our own or third-party AI models, and we do not opt in to provider programs that use API data for model training.
• Our website counts its own visits without third parties. Advertising cookies from Meta, Google and LinkedIn are used only if you accept them. The app itself has no analytics or advertising trackers.
• Customers control their financial data. We use it to provide, secure, maintain and support Outlane, and as otherwise described in this policy.
• Outlane and its primary application data are hosted in the United States.

Information we collect

Early access requests

The early access form asks for your name, work email, company and accounting system. The form is sent to our team through Resend. We use it to respond and, if appropriate, to set up a workspace.

Account and session information

You sign in with your email address. We collect and maintain:

• your email address;
• the workspaces you belong to, workspace names, your role, who added you and when;
• when you last signed in; and
• session information, such as your browser user agent and when the session was last used.

When you request a sign-in link or code, we store a hashed copy of it, not the readable link or code, and a hashed copy of your network address to limit repeated requests. Sign-in records more than one day old are deleted when a new sign-in starts.

Workspace data

A workspace may hold information that a Customer or its users upload, enter or connect, including:

• trial balances and general ledger detail, including account, vendor, customer, class and department information;
• budgets, drivers, forecasts and scenarios;
• sales, marketing, payroll and team roster data;
• commentary, report layouts, close checklists, due-date calendars and company profiles;
• questions submitted to the assistant and its responses; and
• source files and file fingerprints used to show what a report was built from.

Payroll, vendor, customer and roster data may include personal information. A workspace setting controls whether the organization chart displays a person’s name or their role only.

Published and shared reports

When an authorized workspace user shares a published report by link, we may collect the recipient’s email address. When the link is opened, we record the time, a hashed copy of the network address and the browser user agent, so the sender can see whether the report was opened. Anyone with a valid link may be able to view the report, so Customers should share and revoke links carefully.

Access and activity records

We record changes to workspace membership, roles and permissions, including who made the change and when. We may also maintain security and operational logs needed to protect and operate Outlane. Access and activity records are kept for 400 days.

How we use information

• Provide Outlane, including reports, forecasts, reviews and workspace collaboration.
• Authenticate users, and send sign-in, invitation, service and support communications.
• Secure, troubleshoot, maintain and improve the service.
• Respond to questions and provide support.
• Comply with law, enforce our terms, and protect Outlane, our Customers and others.

We do not sell Customer Data or use it for targeted advertising. We do not use Customer Data to train AI models.

AI features

Outlane uses OpenAI’s and Anthropic’s APIs for limited product features. AI output is a suggestion for a person to review. Outlane is designed so that an AI suggestion does not change a financial figure unless an authorized user confirms the change.

Depending on the feature, Outlane may send the following information to OpenAI (the first four features) or Anthropic (the last three):

Sorting accounts

Account names, numbers and types, without amounts.

Suggesting drivers

Series names and structure, without amounts.

Customizing report pages

Measure names, company names and the current page layout.

Workspace assistant

The figures and names reasonably needed to answer the user’s question, which may include amounts, accounts, vendors, and roster names if the workspace displays names.

Designing a board deck template

The company name, brand colours and logo, and an example deck built on sample figures. No Customer financial figures are sent.

Drafting board deck commentary

The tables and key figures the board deck shows, which include amounts, accounts and company names.

Lane in the report editor

The report’s blocks and the words and figures they show, and the person’s request.

OpenAI states that API inputs and outputs are not used to train its models by default, unless the customer expressly opts in. Outlane does not opt in. Depending on the API feature and Outlane’s approved data controls, OpenAI may retain limited API content in abuse monitoring logs for up to 30 days, unless a shorter retention control or Zero Data Retention applies. Anthropic states that it does not use inputs and outputs from its commercial API to train its models. Anthropic may retain API content for a limited period, generally up to 30 days, for safety and abuse monitoring, unless a shorter retention arrangement applies. Outlane may disable AI features for a workspace; when they are disabled, Outlane does not send workspace content to OpenAI or Anthropic for those features.

Connected services

A Customer may connect the services below. Outlane’s current integrations are designed to read from, not write to, the connected systems.

• QuickBooks Online connects through Intuit’s sign-in flow. We do not receive the Customer’s Intuit password. Disconnecting asks Intuit to end the connection and removes the stored connection tokens from Outlane.
• Xero connects through Xero’s sign-in flow, with read-only access to the organisation’s settings, chart of accounts and trial balance. We do not receive the Customer’s Xero password. Disconnecting asks Xero to end the connection and removes the stored connection tokens from Outlane. Data read from Xero is not used to train or improve any AI model.
• Gusto connects through Gusto’s sign-in flow, one company at a time, and reads the company’s employees (department, hire and termination dates) and processed payrolls (gross pay by employee, employer taxes and benefits), which Outlane turns into monthly headcount and payroll cost by department. We do not receive the Customer’s Gusto password, and Outlane does not keep employees’ names, pay rates or other personal details: only monthly totals by department (where a department has one person, its total is that person’s pay). Disconnecting removes the stored connection tokens from Outlane.
• Merge (Merge API, Inc.) connects other payroll and HR systems, such as Paylocity, ADP, Paychex, Rippling and BambooHR. The Customer chooses their system and signs in within Merge’s own window on Outlane’s page; some systems ask the Customer to create an API user for Merge. Merge reads the system on its own schedule and holds the data it reads on Outlane’s behalf. Outlane reads from Merge the company’s employees (department, start and termination dates, employment type and pay rate) and pay statements (gross pay, employer taxes and company-paid deductions), which it turns into monthly headcount, payroll cost and annual pay by department. We do not receive the Customer’s password to their system, and Outlane does not keep employees’ names, pay rates or other personal details: only monthly totals by department (where a department has one person, its total is that person’s pay). Disconnecting asks Merge to delete the linked account and the data it holds, and removes the stored connection token from Outlane.
• HubSpot connects through HubSpot’s sign-in flow with read-only access to deals and contacts. Outlane reads deals (amount, stage, create and close dates) and counts contacts created each month, and keeps only monthly totals: bookings, deals won and lost, new deals, open pipeline and new contacts. It does not keep contacts’ names, emails or other details. Disconnecting removes the stored connection tokens from Outlane.
• Google Sheets connects through Google’s sign-in flow, for each person who chooses to open workbooks in Google Sheets, with access only to the files Outlane creates in that person’s Google Drive or that they pick (Google’s drive.file permission), and their email address to show which account is connected. Outlane cannot see anything else in their Drive. When they open a workbook in Google Sheets, Outlane creates it in their Drive; when they bring changes back, Outlane reads that sheet. We do not receive their Google password. Disconnecting asks Google to end the connection and removes the stored connection tokens from Outlane; sheets already created stay in the person’s Drive. Data read from Google is not used to train or improve any AI model.
• Meta Ads (Facebook and Instagram) connects through Facebook’s sign-in flow with read-only access to ad results (the ads_read permission). Outlane reads each ad account’s monthly spend, impressions, clicks and leads, and keeps only monthly totals. It does not read or keep ad audiences, creative, or the people who saw or answered an ad. We do not receive the Customer’s Facebook password. Disconnecting asks Meta to remove the permission and removes the stored access token from Outlane.
• TikTok Ads connects through TikTok for Business’s authorization flow, where the Customer chooses the ad accounts to share and confirms by email. Outlane asks only for ad account information and reporting. It reads each ad account’s monthly spend, impressions, clicks, conversions and form submissions, and keeps only monthly totals. It does not read or keep audiences, creative, or the people who saw or answered an ad. We do not receive the Customer’s TikTok password. Disconnecting asks TikTok to revoke the authorization and removes the stored access token from Outlane.
• NetSuite connects through token-based credentials created in NetSuite. Removing the connection removes those credentials from Outlane. The Customer should also revoke the token in NetSuite.
• Stripe connects through Stripe’s authorization flow, and reads charge and payout summaries used as revenue drivers.
• App Store Connect connects through a finance-role key the Customer creates, and reads monthly sales summary reports.
• Google Play connects through a service account the Customer authorizes in Play Console, and reads earnings reports.

Connection tokens and credentials are stored in encrypted form. Reports already created from a connection remain in the workspace until they are deleted under the workspace’s retention settings or a verified deletion request.

Connections to Shopify, Google Ads and LinkedIn Ads are planned. This policy will be updated before any of them is offered.

How we disclose information

We disclose information to service providers only as reasonably needed for them to provide services to Outlane, subject to contractual or other appropriate protections. Current providers include:

Fly.io

Application hosting, data storage and encrypted backups, with its storage partner Tigris Data, in the United States.

Resend

Sign-in, invitation, notification and early access emails.

OpenAI

The AI features described above.

Anthropic

The AI features described above, in the United States.

Merge API, Inc.

Only when a Customer chooses to connect a payroll or HR system through Merge: to read that system’s data on Outlane’s behalf, in the United States (or the Customer’s Merge region).

Intuit, Xero, Gusto, HubSpot, Oracle NetSuite, Stripe, Apple, Google

Only when a Customer chooses to connect those services: to read the Customer’s data from them, and for Google Sheets, to create sheets in a person’s own Google Drive.

We may also disclose information when required by law, to protect rights and security, in connection with a merger, financing, acquisition or sale of assets, or at the Customer’s direction or with consent. Where legally permitted and reasonably practicable, we will notify the affected Customer before a compelled disclosure of Customer Data.

Cookies and external resources

Outlane uses cookies that are necessary to authenticate users and protect sessions:

• a session cookie that keeps a user signed in for 30 days after the user’s most recent activity; and
• a short-lived cookie that allows a user to enter a sign-in code in the browser that requested it, which expires after 15 minutes.

These cookies are configured so that page scripts cannot read them. The app has no analytics or advertising trackers. The website and app load fonts from Google Fonts, which causes the user’s browser to contact Google and disclose technical information such as the user’s network address and browser information.

Website visits

Our website (outlane.ai, not the app) counts its own visits. Your browser keeps a random identifier in its local storage, and each page reports to our own servers which page was opened, how long it stayed open, the website you came from, the campaign name in the address (if any), and whether you are on a phone or a computer. When we email someone, the link may carry a short code for that person, so we can see whether they visited and what they read. If you then ask for a consultation, the form is linked to those visits. This information is not shared with anyone outside Outlane, and we use it only to follow up on our own outreach and improve the website. You can clear it by clearing your browser’s storage for outlane.ai.

Advertising cookies

If you accept them in the cookie notice on outlane.ai, the website loads the Meta pixel, the Google tag and the LinkedIn Insight Tag. They let Meta, Google and LinkedIn recognize that you visited, so they can show you Outlane ads on their services (including Instagram and YouTube) and tell us how our ads perform, under their own privacy policies. They are not loaded if you decline, or if your browser sends a Global Privacy Control signal. You can change your choice at any time with “Cookie choices” at the bottom of the website. The app never loads them.

Security

Outlane maintains reasonable administrative, technical and organizational safeguards designed to protect Customer Data against unauthorized access, use, alteration and disclosure. These safeguards include access controls and encryption for connection credentials. No system is completely secure, and Outlane cannot guarantee that unauthorized access or loss will never occur. Our security page describes what the app does today.

If Outlane confirms a security incident involving Customer Data, we will notify the affected Customer without undue delay and as required by applicable law. Customers are responsible for maintaining secure email accounts, managing workspace access, and promptly removing users who should no longer have access.

Where information is kept

Outlane and its primary application data are hosted in the United States, in Fly.io’s Ashburn, Virginia region. Service providers may process information in other locations under their terms and our agreements with them.

Retention and deletion

While a workspace is active, Customer Data is retained according to the Customer’s configured or agreed retention period. Unless Outlane and the Customer agree otherwise, Outlane applies an 84-month (7-year) retention period to historical imported financial data. When imported data passes that period, Outlane’s daily retention process deletes the related source files and trial balance lines, subject to legal holds and backup limitations.

Published reports and shared links remain available only while the Customer keeps them published and the link remains valid. Links expire 90 days after they are issued unless a different period is set, and a workspace admin may revoke a link at any time.

When a Customer submits a verified workspace deletion request, Outlane will disable published report links and delete Customer Data from active systems within 30 days, unless a different period is agreed or retention is required by law.

Residual copies may remain in encrypted backups for up to 30 days, until they are overwritten through Outlane’s ordinary backup cycle. Backup copies are not used for ordinary business purposes and, if restored for disaster recovery, remain subject to the deletion request. Outlane may retain limited account, billing, security and legal records for as long as reasonably necessary for legitimate business or legal purposes.

Privacy rights and choices

Depending on where a person lives and applicable law, that person may have rights to request access to, correction of, deletion of, or a portable copy of personal information, and to appeal a refusal of a request. Outlane does not sell personal information or use it for targeted advertising.

To submit a request, email hello@outlane.ai. We may need to verify identity and authority before acting. If a workspace belongs to an employer or another Customer, that Customer generally controls the workspace data, and we may direct the request to that Customer or act on its instructions. Authorized agents may submit requests where applicable law permits, subject to verification.

Workspace admins can remove users, change roles, revoke shared links, disconnect accounting systems, export the workspace’s data, delete the workspace, and choose whether names appear in the organization chart.

Children

Outlane is a business service and is not directed to children. We do not knowingly collect personal information directly from children. If you believe a child has provided personal information to Outlane, contact us so that we can review and delete it as appropriate.

Changes to this policy

We may update this policy as Outlane changes. We will update the date at the top. If a change materially reduces privacy protections, or materially changes how we use Customer Data, we will provide advance notice to workspace admins when reasonably practicable.

Contact