Privacy Policy
1About This Policy
LanePilot Technologies LLC is a Pennsylvania limited liability company operating an LTL freight intelligence platform at LanePilotTech.com. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have.
This Policy applies to all users of the Service and is incorporated by reference into our Terms of Service (v1.8). By using the Service, you consent to the practices described in this Policy.
This Policy is written to comply with the Pennsylvania Unfair Trade Practices and Consumer Protection Law (73 P.S. section 201-1 et seq.) and the Pennsylvania Breach of Personal Information Notification Act (73 P.S. section 2303). The Service is not directed at consumers for personal, family, or household use.
2Data We Collect
| Category | What It Includes | How Collected |
|---|---|---|
| Account Information | Business email address, company name, job title, phone number (optional). | Provided at registration. |
| Shipment Data | Origin/destination addresses, freight class, weight, dimensions, carrier selections, booking details, shipment status. | Entered by you during use. |
| Uploaded Documents | Bills of lading, invoices, carrier contracts, rate confirmations. May contain names, addresses, signatures. | Uploaded by you for audit or analysis. |
| Payment Information | Last 4 digits of card, card brand, billing address. Full card numbers are never stored by LanePilot. | Processed by Stripe, Inc. |
| Usage Data | Pages visited, features used, query counts, session duration, click behavior. | Automatically collected via PostHog analytics. |
| Technical Data | IP address, browser type, device type, operating system, referrer URL. | Automatically collected by server and Cloudflare. |
| Authentication Data | Session tokens managed by Clerk.dev. No passwords are stored. | Generated at login. |
We do not knowingly collect Social Security numbers, government ID numbers, financial account numbers (beyond the last 4 digits), or health information. Do not submit this type of data through the Service.
3How We Use Your Data
- Service delivery: Processing rate queries, invoice audits, dispute letters, carrier scorecards, and all other platform features you use.
- Account management: Authenticating your identity, managing subscriptions, processing billing, and sending transactional communications.
- Product improvement: Analyzing usage patterns to fix bugs, improve features, and develop new capabilities.
- Fraud prevention and security: Detecting and preventing unauthorized access, abuse, and fraudulent activity.
- Legal compliance: Fulfilling obligations under applicable law, responding to lawful requests, and enforcing our Terms of Service.
- Aggregated market intelligence: Creating anonymized, non-identifiable market benchmarks as described in Section 7. This use requires your opt-in consent.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
4Specific Data Protections
4.1 Data Isolation: Each user Shipment Data is stored in logically isolated records associated with your account. No other user can access your individual Shipment Data. LanePilot employees may access Shipment Data only as necessary to provide customer support or comply with a lawful legal obligation.
4.2 No Sharing with Carriers or Competitors: LanePilot does not share individually identifiable Shipment Data with carriers. LanePilot does not share your individual Shipment Data with any competing shipper, 3PL, or logistics provider for competitive intelligence purposes.
4.3 AI Processing of User-Submitted Documents: LanePilot uses AI language models provided by Anthropic, Inc. to power certain platform features. Documents you upload may contain personal information that is transmitted to Anthropic API for processing. Anthropic processes submitted content under a data processing agreement. LanePilot does not retain raw AI prompt content beyond the active user session, and does not use your submitted content to train AI models.
4.5 Carrier Contract Data: Contract rate data you upload is stored with encryption at rest, used exclusively for the contract vs. spot rate comparison feature, and not transmitted to any third party other than the platform hosting provider. You may delete this data at any time from your account settings.
4.6 Invoice Data: Invoice data is processed by the invoice audit engine and stored as part of your Shipment Data. Raw invoice files are retained for ninety (90) days following audit completion; thereafter only structured data fields are retained.
5Do Not Sell Request Mechanism
LanePilot does not sell personal data as that term is commonly understood. LanePilot voluntarily provides this mechanism modeled on emerging U.S. privacy standards. This mechanism applies to personal data. Aggregate Market Data is not subject to Do Not Sell requests.
6Cookies, Local Storage, and Tracking Technologies
| Category | Purpose | Duration |
|---|---|---|
| Essential / Strictly Necessary | Authentication session tokens, CSRF protection, Cloudflare bot-detection. Required for the Service to function. Cannot be disabled. | Session to 24 hours. |
| Functional | User preferences, account settings, subscription tier display, UI state. | Up to 12 months. |
| Analytics | Page views, feature usage events, session behavior (PostHog). | Up to 24 months. |
| Security / Bot Protection | Cloudflare security tokens, IP-based fingerprinting. DDoS protection, fraud prevention. | Session to 30 days. |
You may disable non-essential cookies through your browser settings. Disabling essential cookies will prevent you from using the Service. LanePilot does not currently respond to browser Do Not Track signals.
7Network Benchmarking Data
LanePilot Network Benchmarking feature allows users on eligible tiers to compare their lane rates against anonymized market averages derived from other users Shipment Data. Participation is voluntary and requires your affirmative consent at account creation or feature activation.
7.1 What Is Anonymized: Before any Shipment Data is incorporated into the Network Benchmarking pool, LanePilot strips all personally identifiable fields. Only lane-level data (origin ZIP, destination ZIP, freight class, weight, charge) is contributed. This data cannot be reverse-engineered to identify your company or shipments.
7.2 Opt-Out: You may withdraw consent for Network Benchmarking contribution at any time from account settings. Opt-out removes active contribution within 30 days. Withdrawal does not affect historical anonymized data already incorporated into statistical datasets.
7.3 Data Licensing: LanePilot licenses Aggregate Market Data to LTL carriers, 3PLs, freight brokers, and logistics technology companies. All subscribers execute a Data Licensing Agreement prohibiting re-identification attempts and data resale.
8Sharing Your Data
| Vendor | Role | Data Shared |
|---|---|---|
| Stripe, Inc. | Payment processing | Billing address, payment method details. Full card numbers go directly to Stripe. |
| Bubble.io | App hosting & database | All platform data under Data Processing Agreement. |
| Cloudflare | Security, DDoS protection, SSL | IP address, traffic metadata, cookie data. |
| PostHog | Product analytics | Usage events, pseudonymous user identifiers, session data. |
| Clerk.dev | Authentication, SSO | Email address, session tokens. |
| Anthropic, Inc. | AI processing (Claude API) | Document content and query text submitted for AI processing. See Section 4.3. |
| SMC3 | LTL rate data API | Shipment parameters for rate retrieval. No personal account data transmitted. |
8.4 Legal Requirements: LanePilot may disclose your data if required by applicable law, court order, or government request.
8.5 Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity. You will be notified of any such transfer.
9Data Retention
| Data Type | Retention Period | Notes |
|---|---|---|
| Account information | Account duration + 3 years after closure | Retained for legal, compliance, and fraud-prevention purposes. |
| Shipment Data | Account duration + 3 years after closure | Exportable at any time from account settings. |
| Invoice data (raw files) | 90 days post-audit completion | Structured fields retained as part of Shipment Data record thereafter. |
| Contract rate data | Deleted upon user request or account closure | Encrypted at rest during retention period. |
| Payment records | 7 years from transaction date | Required for tax and legal compliance. |
| Usage and analytics logs | 12 months rolling | Security monitoring, product improvement, and fraud prevention. |
| Pause Tier — active subscription | Fully retained during Pause subscription (up to 12 months) | No purge occurs during an active Pause period. See Section 9B. |
| Pause Tier — after expiration | 90 days from Pause expiration, then permanent deletion | Countdown emails sent at Day 1, 30, 60, and 85. See Section 9B. |
9BPause Tier Data Handling and Purge Schedule
9B.1 What the Pause Tier Is: The Pause tier is a cancellation-retention option available only when you initiate account cancellation. It is not displayed on the public pricing page. Pause is priced at $19.00/month or $190.00/year. It preserves your complete shipment history, carrier scorecard, audit log, and analyzed contracts in read-only form. No new queries or bookings are permitted on Pause.
9B.2 Data Retention During the Pause Period: While your Pause subscription is active, all of your account data is fully retained. LanePilot does not initiate any purge or deletion during an active Pause period. The Pause period has a maximum duration of twelve (12) consecutive months per Pause election and does not auto-renew.
9B.3 Early Reactivation: You may reactivate to any paid subscription tier at any time before the 12-month Pause period ends. If you reactivate early and later choose to Pause again, your Pause eligibility resets to a full new twelve (12) month period.
9B.4 What Happens at the End of the Pause Period: When your Pause subscription expires, you may resubscribe to a paid tier (full account restored, no data loss) or allow the account to lapse and enter the 90-day data retention window described in Section 9B.5.
9B.5 The 90-Day Data Retention Window: If you do not resubscribe when your Pause subscription expires, your account enters a 90-day data retention window. You retain read-only access for the full 90 days. LanePilot will send countdown emails at Day 1, Day 30, Day 60, and Day 85. You may resubscribe at any time during the window to stop the purge.
10Your Rights and Choices
- Access: Request a copy of all personal data LanePilot holds about you by contacting privacy@LanePilotTech.com.
- Correction: Update your account information at any time from account settings or by contacting support.
- Deletion: Submit a deletion request to privacy@LanePilotTech.com. LanePilot will delete your data from active systems within thirty (30) days, subject to legal retention requirements. Alternatively, allow your Pause subscription to expire without resubscribing — your data will be permanently deleted on Day 91 of the post-expiration retention window.
- Data Export: Request an export of your Shipment Data in CSV format at any time from account settings.
- Do Not Sell: Submit a request as described in Section 5.
- Network Data Opt-Out: Withdraw consent for Network Benchmarking contribution at any time from account settings.
- Marketing Communications: Opt out of non-transactional emails using the unsubscribe link in any marketing email. Transactional emails related to your account, subscription, and Pause data purge countdown cannot be disabled while your account is active.
To exercise any of these rights, contact privacy@LanePilotTech.com. LanePilot will respond within ten (10) business days.
11Data Security
- Encryption of data in transit using TLS 1.2 or higher.
- Encryption of sensitive data fields at rest, including contract rate data and payment credentials.
- Logical isolation of user data in the application database.
- Passwordless authentication reducing credential-based attack vectors.
- Cloudflare bot protection (Turnstile) on all account creation and login forms.
- Account lockout after five (5) failed login attempts.
- IP anomaly detection for Professional tier and above.
No security measure provides absolute protection. In the event of a data breach, LanePilot will notify affected users in accordance with the Pennsylvania Breach of Personal Information Notification Act (73 P.S. section 2303).
12Children's Privacy
The Service is designed for use by business professionals and is not directed at individuals under the age of eighteen (18). LanePilot does not knowingly collect personal data from anyone under 18. If you become aware that a minor has provided LanePilot with personal data, please contact privacy@LanePilotTech.com immediately.
13Changes to This Privacy Policy
LanePilot may update this Privacy Policy to reflect changes in practices, technology, legal requirements, or other factors. Material changes will be communicated to your registered email address with at least thirty (30) days advance notice. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.
| Version | Effective Date | Summary of Changes |
|---|---|---|
| v1.0 | Initial launch | Initial Privacy Policy. |
| v1.1 | Prior to May 2026 | Added Section 4.3 (AI processing disclosures), updated sub-processor table. |
| v1.2 | May 15, 2026 | Added Do Not Sell mechanism (Section 5), updated cookie table, added backup retention disclosure. |
| v1.3 | May 18, 2026 | Added Section 9B (Pause Tier Data Handling and Purge Schedule). Updated data retention table. Aligned with ToS v1.8. |
14Contact Information
8370 Wattsburg Road
Erie, Pennsylvania 16509