Privacy Policy

The Aetherium Group LLC, doing business as BizLane, operates the BizLane service. This policy explains what we collect, why, who we share it with, and the choices you have.

• Account holders — businesses and their members who sign up for BizLane. For this information, BizLane is the controller.
• Visitors — people who tap, scan, or open a customer's device and fill out that customer's Lane. For this information, the account holder is the controller and BizLane is the processor acting on their instructions. If you submitted a form on a business's card or sign and want your information changed or removed, contact that business first; we will assist them.

• Account data: name, email, business name, role, and authentication identifiers.
• Billing data: plan, subscription status, and the last four digits and brand of a card as reported by Stripe. We never receive or store full card numbers.
• Lane configuration: branding, questions, consent text, actions, and routing settings you create.
• Visitor submissions: contact details, answers, and a consent snapshot recording exactly what was shown and agreed to, with a timestamp.
• Interaction data: tap, scan, and session events, the device or link used, page views, coarse referrer, user agent, and truncated IP for abuse prevention and attribution.
• Communications: emails you send to support and our transactional emails to you.
• Cookies and local storage: strictly necessary items for sign-in sessions, security, and visitor session continuity. We do not run third-party advertising trackers.

To provide and secure the Service; to authenticate users; to deliver submissions to the destinations an account holder configures; to send transactional and confirmation email; to bill subscriptions; to produce analytics and attribution for the account holder; to prevent fraud and abuse; and to comply with law. Where a legal basis is required, we rely on performance of a contract, our legitimate interest in operating and securing the Service, consent (where you gave it), and legal obligation.

We do not sell personal information, and we do not share it with third parties for their own marketing or advertising purposes. We share information only with the service providers below, with destinations the account holder configures themselves, and where required by law or to protect rights and safety.

• Stripe — payment processing, subscription billing, and card ordering checkout. Card data goes directly to Stripe.
• Cloud hosting and database — application hosting, managed PostgreSQL, authentication, and file storage for the Service.
• Resend — transactional and notification email from our verified sending domain.
• Card fulfillment vendor — where card ordering is used, the name and artwork needed to print and ship the order.
• Customer-configured destinations — any webhook, GoHighLevel account, or CRM the account holder connects. Those systems are controlled by the account holder, not by us.

Account and billing records are kept for the life of the account and as long as needed for tax and legal purposes. Submissions, contacts, and consent snapshots are kept until the account holder deletes them or closes the account, after which they are removed in the ordinary course of our backup cycle. Interaction event data is retained in aggregate for analytics.

We use encryption in transit, encryption at rest through our hosting provider, row-level access controls scoped to account membership, and least-privilege service credentials. No system is perfectly secure; we will notify affected account holders without undue delay if a breach affecting their data occurs.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal information, to object to certain processing, and to withdraw consent. Account holders can do most of this directly in the app (edit profile, export CSV, delete records, close the account) or by emailing us. We will not discriminate against you for exercising a right. To make a request, email CEO@theaetheriumgroup.com. We may need to verify your identity before acting.

The Service is not directed to children under 13, and we do not knowingly collect their personal information for our own purposes. If an account holder collects information about minors through their Lane (for example a youth sports registration), the account holder is responsible for obtaining any required parental consent.

We operate in the United States, and information is processed there. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States under appropriate safeguards.

We may update this policy. The "Last updated" date above reflects the current version, and material changes will be communicated to account holders.

The Aetherium Group LLC (d/b/a BizLane), 610 E. Zack St, Suite 110, Tampa, FL 33602. CEO@theaetheriumgroup.com