Privacy Policy

This Privacy Policy explains how Ellipse by Lanes collects, uses, discloses, stores, and protects information when you use our website, dashboard, agency CRM, content planning, invoicing, showcase, integrations, and related services.

Ellipse is built for agencies. Your agency content, client records, invoices, notes, media, calendar data, and showcase data remain your data. We process it to provide the service, secure the platform, support your account, comply with law, and improve reliability.

Account information: name, email, profile image, authentication identifiers, agency membership, role, and preferences.

Agency and client information: agency profile, team details, client names, contact details, websites, budgets, invoices, notes, shoots, content plans, files, showcase assets, and related operational data that you choose to enter.

Integration information: OAuth tokens, calendar metadata, connected account email, message templates, upload metadata, and billing/subscription references required to operate integrations.

Usage and device information: pages visited, actions taken, browser/device metadata, approximate location derived from network data, cookies, logs, error events, and security signals.

Payment information: billing events, plan status, invoices, payment records, and subscription identifiers. Card and payment method details are handled by our payment processors and are not stored directly by Ellipse.

To provide, maintain, personalize, and secure the Ellipse service.

To authenticate users, manage agency access, enforce entitlements, and support admin controls.

To create and sync Google Calendar events, including client attendee invitations when you schedule content for a client with an email address.

To store and deliver media assets, generate invoice PDFs, publish showcase pages, and operate analytics or activity counters.

To send transactional emails, security notices, support responses, product updates, and legally required notices.

To debug issues, prevent abuse, improve performance, and comply with applicable legal obligations.

We use trusted infrastructure providers to operate Ellipse, including hosting, database, object storage, authentication, email, analytics counters, billing, and calendar integrations.

Current service categories include Vercel-style app hosting, Neon Postgres, Upstash Redis, Cloudflare R2, Better Auth, Resend, Lemon Squeezy, Google OAuth and Google Calendar, and related monitoring or delivery systems.

When you connect third-party integrations, your use of those integrations may also be governed by that provider's terms and privacy policy.

If Ellipse offers AI-assisted features, your prompts, outputs, and selected workspace context may be processed to generate the requested result.

We do not sell your agency data. We do not use private agency workspace data to train third-party foundation models unless you have clearly opted into that use.

We share information with service providers only as needed to operate Ellipse, process payments, deliver emails, store files, run integrations, prevent abuse, or provide support.

We may disclose information if required by law, legal process, security investigations, enforcement of our Terms, business transfers, or to protect the rights, safety, and integrity of Ellipse, users, clients, or the public.

Public showcase pages and public invoice links are visible to anyone with the relevant handle, domain, or token. Do not publish information there unless you have permission to make it public.

We use cookies and local storage for authentication, security, preferences, feature selectors, cookie consent, and basic product functionality.

We may use limited analytics or performance technologies to understand reliability and usage. You can learn more in our Cookie Policy.

We retain information while your account or agency workspace is active, as needed to provide the service, and as required for legal, tax, billing, security, backup, or dispute purposes.

Deleted workspace data may remain in backups for a limited period before being overwritten. We may retain minimal records needed to prevent abuse, resolve disputes, enforce agreements, or meet legal obligations.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of personal information.

California residents may have rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and avoid discrimination for exercising privacy rights. Ellipse does not sell personal information in the conventional sense.

You can contact us to make a privacy request. We may need to verify your identity and authority before acting on a request.

We use technical and organizational safeguards such as encrypted transport, access controls, least-privilege operational practices, token encryption for integrations, and managed infrastructure providers.

No system is perfectly secure. You are responsible for protecting your account credentials, limiting team access, and publishing only content you are authorized to share.

Ellipse is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Ellipse and its providers may process information in countries other than where you live. Where required, we rely on appropriate safeguards for cross-border transfers.

We may update this Privacy Policy as Ellipse evolves. If changes are material, we will provide notice through the product, website, or email where appropriate.