Privacy policy

Who handles your information

FigureLane provides the document preparation service described in this policy. Contact support@embrella.app for questions or privacy requests.

FigureLane uses account and support information to operate the service. Businesses and bookkeeping firms decide why their records are uploaded and how they are used; FigureLane processes that paperwork to provide their workspace. If someone else manages your records, contact that business or firm first about its use of them.

Information we process

Account information includes your name, email address, business or firm name, workspace type and sign-in details. Passwords are stored as protected hashes rather than readable passwords.

Workspaces contain business or client names and email addresses, original uploads, filenames, extracted text and financial fields, checklists, review notes, evidence matches, questions and answers, description mappings and preparation times. If you email support, we receive the information you send.

How we use it

We use this information to provide your workspace, read documents, prepare records, perform checks, collect answers and produce exports. Account processing is needed to perform our service agreement with you. Security and support processing serves our legitimate interest in running and protecting the service. Workspace owners are responsible for the lawful basis for the paperwork they upload.

Connection information, including IP addresses, is used for abuse prevention and request limits. Server errors may be recorded to diagnose failures.

Documents, storage and access

Files are uploaded to the FigureLane server. PDF reading and OCR run there using local tools; documents are not sent to an external OCR or AI service in this version. Records and originals are stored on the server’s persistent disk.

Business and firm accounts can access their own workspace and originals. Authorised server and hosting operators may access stored data to operate, maintain or restore the service. We may also disclose information where legally required. We do not sell personal information.

Subscription payments through Paddle

When you purchase a subscription through Paddle, Paddle acts as merchant of record and authorised reseller. Paddle processes checkout and payment information, such as your name, email, billing address, payment details and transaction information, for billing, tax compliance, fraud prevention and customer support under its privacy notice.

FigureLane receives the customer and subscription identifiers, contact and billing information, plan, payment status and transaction records needed to provide access, manage subscriptions and handle support. We do not receive or store your full card number or card security code. We use billing information to perform our agreement, meet applicable legal obligations and address payment disputes. Paddle does not receive your uploaded business paperwork as part of subscription billing.

Paddle and hosting providers may process personal information outside your country. Where applicable, international transfers must use the safeguards required by data protection law. Contact us for information about the providers and safeguards relevant to your workspace.

Shared upload links

Anyone holding a valid link can see the business or client name, month, checklist, questions and existing answers for that folder, and submit documents and answers. The link does not allow original-file downloads or access to the private workspace. Links expire after 14 days; generating a replacement revokes the previous link.

Cookies and browser preferences

The necessary figurelane_session cookie keeps you signed in for up to 14 days. Signing out clears it. Your browser also remembers the last selected monthly folder for your account; this preference remains after sign-out.

This version does not include advertising cookies or analytics trackers. Hosting providers may process connection logs; contact us for information about the hosting of your workspace.

Retention and deletion

Workspace records remain available until removed; this version has no automatic retention schedule. Workspace owners can delete documents, transactions and saved description mappings. Deleting a document removes its original and the rows extracted from it, but separate questions, answers and saved mappings may remain.

Billing records may be retained after cancellation or account closure where needed for tax, accounting, fraud prevention or legal claims. Paddle retains its own transaction records under its privacy notice. Account closure and broader deletion requests are handled through support@embrella.app. Backups, where maintained, may retain earlier copies. Contact us about the scope and timing of removal, including backups; deleting a workspace item does not guarantee immediate removal of every copy.

Your choices and rights

Depending on applicable law, you may be able to request access, correction, deletion, restriction or a copy of your personal information, or object to its use. Email support@embrella.app. We may verify your identity and involve the business or bookkeeping firm responsible for the records.

You can also raise a concern with your local data protection authority. In the UK, this is the Information Commissioner’s Office.

Changes to this policy

We will update this page when the service’s data handling changes and revise the date above. Contact us if you need clarification before uploading paperwork.