Privacy policy

Effective October 26, 2026

This Privacy Policy explains how GridLane (“GridLane,” “we,” “us,” or “our”) handles information when you visit getgridlane.com, install or use the GridLane application, or contact support. It does not describe how HighLevel or other third parties handle information under their own policies.

Who we are

GridLane is an independent product that provides grid and Kanban board editing, bulk updates, saved views, permissions, blueprints, rollouts, drift checks, and reporting for HighLevel accounts. GridLane is operated as a sole proprietorship based in Pennsylvania, United States. GridLane is not affiliated with or endorsed by HighLevel.

For information in a client account, the HighLevel agency or business that installed GridLane is generally the data controller. GridLane acts as a processor on that customer’s instructions. For our own website, account, billing, support, and security operations, GridLane acts as the controller.

Information we collect

Account and organization information. We receive your name, email address, HighLevel user ID, role, company ID, active location ID, and agency-owner status when you authorize GridLane through HighLevel. We use this information to authenticate you, apply permissions, and attribute changes in the audit log.

HighLevel data you authorize. Depending on the features you use and the permissions you grant, GridLane may access:

• Client accounts and location details you are authorized to manage.
• Custom object schemas, fields, folders, and associations.
• Custom object records, contacts, opportunities, and linked records.
• Custom fields, users, roles, and permission settings.

GridLane accesses this data to provide the features you request. It does not use client record data to create blueprints. Blueprints contain configuration only: objects, fields, sections, associations, views, and permission rules.

Configuration and activity data. We store saved views, layout preferences, permission rules, blueprints, rollout jobs, drift results, reporting snapshots, audit events, and feature settings. We also keep limited technical logs such as request timestamps, error details, browser type, and IP address.

Support information. If you contact us, we receive the contents of your message, your contact details, and any files or screenshots you choose to send.

Billing information. Paid plans are purchased through the HighLevel Marketplace. HighLevel handles payment details. GridLane receives plan, subscription, and entitlement status, but does not receive full payment card numbers.

Cookies and local storage

GridLane uses essential cookies to protect the OAuth installation flow. The app keeps the signed session token in memory and stores grid and board layout preferences in your browser’s local storage. We do not use advertising cookies or sell data for cross-context behavioral advertising. The marketing website does not set advertising or cross-site tracking cookies.

How we use information

• Authenticate users and enforce account, role, and location permissions.
• Display, edit, filter, sort, export, and link HighLevel records you choose to work with.
• Create and compare blueprints, run rollouts and drift checks, and produce reports.
• Maintain audit history, prevent abuse, troubleshoot errors, and secure the service.
• Provide support, respond to requests, and communicate service or policy changes.
• Manage subscriptions, plan limits, taxes, and legal obligations.

We do not sell personal information. We do not use client record data for advertising. We do not use client record data to train machine-learning models.

Legal bases

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases where applicable: performance of a contract (providing GridLane), legitimate interests (security, product improvement, and support), compliance with legal obligations, and consent where required. You may withdraw consent at any time without affecting processing that already occurred.

How we share information

We share information only as needed to operate GridLane:

• HighLevel. We send data to HighLevel APIs to perform the actions you request. HighLevel handles data under its own terms and privacy policy.
• Cloudflare. Hosting, edge delivery, queues, rate limiting, caching, and related infrastructure.
• Neon. Managed PostgreSQL storage for account configuration, blueprints, jobs, audit events, and reporting snapshots.
• Slack. If a customer configures Slack alerts, GridLane sends the selected alert content to that customer’s Slack workspace.
• Professional advisors and authorities. We may disclose information if required by law, to respond to valid legal process, to protect rights and safety, or in connection with a merger, acquisition, financing, or sale of assets.

We require service providers that process personal information on our behalf to protect it and use it only for the services they provide. We do not sell personal information.

Retention

We keep account and configuration data while GridLane is installed or your subscription is active. OAuth credentials are deleted or invalidated when you uninstall the app or revoke access, except where retention is required by law or needed for security. Audit, reporting, and job history are retained according to your plan and settings. Support messages are kept only as long as needed to resolve the request and maintain business records. We may retain limited information in backups for a short period and may retain records required for legal, tax, or security purposes.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including encrypted OAuth tokens, signed sessions, HTTPS, access controls, company-scoped location authorization, and restricted production access. No system is perfectly secure. If we become aware of a breach affecting personal information, we will investigate and notify affected parties and authorities as required by law.

International transfers

GridLane and its service providers may process information in the United States and other countries. Where required, we rely on contractual and organizational safeguards for cross-border transfers, including the data protection terms offered by our service providers.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal information, to receive a portable copy, to withdraw consent, and to lodge a complaint with a supervisory authority. To make a request, contact support@getgridlane.com. We may need to verify your identity before acting on a request.

If your request concerns records inside a customer’s HighLevel account, contact that agency or business first. We will assist our customers with their obligations as required by applicable law.

California privacy rights

If you are a California resident and the California Consumer Privacy Act applies, you may have the right to know what personal information we collect, use, and disclose; to request deletion or correction; to limit the use of sensitive personal information; and to opt out of the sale or sharing of personal information. We do not sell personal information or share it for cross-context behavioral advertising. We will not discriminate against you for exercising a privacy right. Submit requests to support@getgridlane.com. We may verify your request and, where permitted, act on requests from an authorized agent.

Children

GridLane is a business tool and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can delete it.

Changes to this policy

We may update this Privacy Policy as the service or legal requirements change. We will post the updated version here and change the effective date. If a change is material, we will provide additional notice where appropriate. Continued use after the effective date means you accept the updated policy.

Contact

Privacy questions and requests:support@getgridlane.com. You can also review ourTerms of Service.