Outlane

Privacy policy

Last updated: September 16, 2026

Outlane is month-end reporting and driver-based forecasting for finance teams. This policy explains what we collect when you use the Outlane website and the Outlane app, what we do with it, and what we never do.

In this policy, “Outlane”, “we” and “us” mean the company that runs Outlane. If you have a question, email hello@outlane.ai.

The short version

• We never sell your data.
• We do not use your data to train AI models.
• There are no advertising or analytics trackers on this website or in the app.
• Your financial data belongs to you. We use it only to run Outlane for you.
• Your data is hosted in the United States on Fly.io.

What we collect

When you ask for early access

The form on our website asks for your name, work email, company and accounting system. It is sent to our team as an email through Resend. The website does not store it in a database. We use it to reply to you and set up your workspace.

Your account

You sign in with your email address. There are no passwords. We keep:

• your email address;
• the workspaces you belong to and their names, your role in each, who added you and when;
• when you last signed in;
• for each signed-in session, your browser’s user agent and when the session was last used.

When you ask to sign in, we store a hashed copy of the sign-in link and code, never the link or code itself, and a hashed copy of your network address to limit repeated requests. Sign-in records more than a day old are deleted whenever a new sign-in starts.

Your workspace’s data

A workspace holds what your team puts into it, by uploading files or connecting an accounting system:

• trial balances and ledger detail, such as accounts, vendors, customers, classes and departments;
• budgets, drivers, forecasts and scenarios;
• sales, marketing, payroll and team roster templates;
• commentary, report layouts, the close checklist, the due-date calendar and your company profile;
• questions asked of the assistant, and its answers.

Payroll and roster data can include employees’ names. A workspace setting decides whether the org chart shows people’s names or their roles only.

Files you upload are kept as the sources behind a report, with a fingerprint of each file, so a report can be checked against exactly what it was built from.

Shared reports

When someone in your workspace shares a published report by link, we keep the recipient’s email address. Each time the link is opened we record the time, a hashed copy of the network address, and the browser’s user agent. This lets the sender see whether the report was opened.

Access changes

Every change to who is in a workspace, their role, or what a role can do is written to the workspace’s access log, with who made the change and when.

How we use it

• To run Outlane for you: build reviews, forecasts and reports from your data, and show them to the people in your workspace.
• To sign you in, and to send sign-in emails and “you were added to a workspace” emails.
• To keep Outlane secure, for example by limiting repeated sign-in requests.
• To reply when you contact us.

We do not sell your data. We do not use it for advertising. We do not use it to train AI models.

AI features

Outlane uses OpenAI for a few tasks. AI only ever suggests. A person confirms a suggestion before it is used, and AI never changes a figure on its own. What each task sends:

Sorting accounts

Account names, numbers and types. Never amounts.

Suggesting drivers

Names and the shape of each series. Never amounts.

Customizing report pages

Measure and company names, and the current page layout.

Workspace assistant

The figures and names needed to answer a question, such as amounts, accounts, vendors, and roster names if the org chart shows names. It is sent with OpenAI’s storage turned off, so OpenAI does not keep the conversation.

Outlane can run with AI switched off entirely. When it is off, nothing is sent to OpenAI and no suggestions are made.

Connected accounting systems

You can connect QuickBooks Online or NetSuite. Outlane only reads from them. It never writes to your accounting system.

• QuickBooks Online connects through Intuit’s sign-in. We never see your Intuit password. Disconnecting asks Intuit to end the connection and deletes the stored tokens.
• NetSuite connects with token-based credentials you create in NetSuite. Removing the connection deletes them from Outlane. You should also revoke the token in NetSuite.

Connection tokens and credentials are stored encrypted. Reports already built from a connection stay in your workspace after you disconnect.

Connections to Stripe, App Store Connect, Google Play, Xero, Gusto, HubSpot, Shopify, Google Ads, Meta Ads and TikTok Ads are planned. This policy will be updated before any of them is offered.

Who we share it with

We use a small number of service providers to run Outlane. They process data only to provide their service to us.

Fly.io

Hosts the app, its data and this website, and stores encrypted backups (through its storage partner Tigris Data), in the United States.

Resend

Sends sign-in and notification emails, and early-access requests.

OpenAI

AI features, as described above.

Intuit, Oracle NetSuite

Only when you connect them, to read your accounting data.

We may also disclose data if the law requires it. We will tell you first where the law allows.

Cookies and tracking

The app sets two cookies, both needed to sign you in:

• a session cookie, which keeps you signed in for 30 days from when you last used Outlane;
• a short-lived cookie that lets you type your sign-in code in the browser that asked for it. It lasts 15 minutes.

Neither can be read by scripts on the page. There are no analytics, advertising or tracking scripts on this website or in the app. Both load their fonts from Google Fonts, so your browser contacts Google to fetch them.

Where your data is kept

The app and its data are hosted in the United States on Fly.io, in the Ashburn, Virginia region.

How long we keep it

Each customer has a retention period. Unless we agree another with you, it is 84 months (7 years). When an imported trial balance passes that period, our retention process deletes the source file and its trial balance lines.

Published reports are kept, so anyone holding a link still sees exactly what they were sent. Links stop working when they expire or are revoked.

If you stop using Outlane, email us and we will delete your workspace’s data. See our terms for how this works.

Your choices

• Ask for a copy of the personal data we hold about you, or ask us to correct or delete it, by emailing hello@outlane.ai.
• If your workspace belongs to your employer, they decide what is in it. We may pass your request to them.
• A workspace admin can remove people, change roles, disconnect accounting systems and hide names on the org chart.

Children

Outlane is a tool for businesses. It is not meant for children, and we do not knowingly collect children’s data.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell workspace admins by email before it takes effect.

Contact