Privacy Policy

1. Who we are

DocumentLane is a service of Bluazure Inc. (“Bluazure”, “we”, “us”, or “our”), a company based in British Columbia, Canada. DocumentLane provides document collection and compliance tracking for general contractors, including subcontractor certificate of insurance (COI) workflows (the “Service”). Terms not defined here have the meaning given in our Terms and Conditions.

This Privacy Policy explains how we collect, use, and disclose information about identifiable individuals (“Personal Information”) when you visit documentlane.ai, request early access, download our resources, or use the Service. By visiting the website or using the Service, you acknowledge this policy and consent to the handling of your Personal Information as described here. This policy does not apply to companies we do not own or control.

2. Website visitors

When you visit our website without an account, we may collect information browsers and servers typically make available, such as browser type, language preference, referring website, the date and time of each request, and IP address. We use it to understand how the website is used and to keep it secure. We may publish or share non-identifying information in aggregate, for example usage trends.

3. Information we collect

Information you give us: your name, work email address, company name, and (if you provide it) how many subcontractors you manage, when you request early access, download our COI checklist, or contact us.

Account and Content: when a Customer registers, we process account details, user profiles, and the documents uploaded to the Service, such as certificates of insurance, endorsements, and licences. These documents may contain Personal Information about subcontractors and their staff.

Usage and device data: log data, browser type, pages visited, and similar technical information collected as you use the Service. If you have an account, this data is linked to it.

Authentication data: when you sign in, including single sign-on (SSO) via your employer’s identity provider, we process identifiers needed to authenticate you and link you to your Customer’s account.

4. How we use information

We use Personal Information to: provide and maintain the Service (including storing and organizing the documents you upload); respond to early-access requests and support enquiries; send service notices and reminders related to documents and expiries; authenticate users and enforce account security, including per-customer SSO; investigate and prevent unauthorized access or illegal activity; comply with legal obligations; and improve the Service. If we want to use your information for a new purpose, we will tell you and ask for consent where required.

We do not sell Personal Information, and we do not use documents you upload to train artificial-intelligence models.

5. Our role for Customer Content

For documents and data a Customer collects through the Service (for example, a subcontractor’s COI), the Customer decides why and how that information is used, and we process it on the Customer’s behalf. Requests about that information are best directed to the Customer; we will help them respond.

6. AI features

Some Service features use artificial intelligence to help analyze documents, answer questions, or draft content. Documents and data you submit are processed only to deliver the feature you requested and are not used to train third-party models. AI output can be inaccurate — you remain responsible for reviewing Content and compliance decisions.

7. Legal bases

Where the GDPR or UK GDPR applies, we process Personal Information under these bases: performance of a contract (providing the Service); legitimate interests (securing and improving the Service, responding to enquiries); consent (optional communications, marketing emails); and legal obligation (retaining records where required).

8. Service providers

The Service is built and hosted on Lovable Cloud, operated by Lovable Labs Sweden AB, which stores our database and files using its own infrastructure providers (for example, Supabase). Lovable acts on our instructions, does not use our users’ data to train its models, and publishes its own sub-processor list at trust.lovable.dev. We also use providers of email delivery, payment processing (Stripe), bot protection (Cloudflare), and AI processing. They may use Personal Information only as needed to perform services for us, under contractual confidentiality and security obligations. A current list is available on request from hello@documentlane.ai.

9. When we disclose information

We do not disclose Personal Information to unaffiliated third parties without your consent, except: to the service providers described above; to a Customer’s organization, where you are a User of that organization’s account; to comply with a law, regulation, subpoena, court order, or other lawful government request; or where we believe in good faith that disclosure is reasonably necessary to protect the rights, property, or safety of Bluazure, our users, or the public.

Documents you upload are visible only to your organization’s account members and to our personnel who need access to support you.

10. Business transfers

If Bluazure or the DocumentLane business is sold, merged, or acquired, Personal Information may be transferred to the new owner where permitted by law. The new owner may continue to use it as described in this policy, and we will notify you where required.

11. Storage location and international transfers

Personal Information is stored with our hosting provider, Lovable Cloud, and may be processed in Sweden, the United States, Canada, and other countries where our service providers operate. By using the Service, you agree to this transfer, storage, and processing. Information stored in another country may be accessible to courts, law enforcement, and government agencies there under lawful access rules. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers from the EEA or UK.

12. Retention

We keep Personal Information as long as needed to provide the Service, to meet legal, accounting, and record-keeping obligations, and to resolve disputes. If a Customer closes its account, we make its Content available for export for 30 days and then delete or de-identify it, subject to mandatory retention.

13. Access and correction

You may ask to see the Personal Information we hold about you and to have it corrected, updated, or deleted. Email hello@documentlane.ai; we may need to verify your identity first. In limited cases permitted by law we may not be able to provide everything — for example, where the information also concerns another person — and we will give reasons on request. We aim to respond within 30 days.

If you are a User, your organization may also manage your data through its account.

14. Residents of the EEA and UK

Where the GDPR or UK GDPR applies, you have the right to: request access to your Personal Information; request correction of inaccurate information; request erasure where there is no good reason for us to keep it; object to processing based on legitimate interests or for direct marketing; request restriction of processing; receive your information in a structured, machine-readable format; and withdraw consent at any time, without affecting earlier processing.

You also have the right to complain to your local data protection authority.

15. Canadian residents

We handle Personal Information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act. You may contact us with any concern, and you may also complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

16. Cookies and similar technologies

We use essential cookies and browser storage to keep you signed in, protect the Service and remember preferences. When configured, Google Analytics uses cookies to understand site visits. Optional Google Ads cookies measure early-access requests and support ad conversion optimization: Google receives technical device and page information, ad-click identifiers and the fact that a request was submitted, not the content of your form.

Acknowledging our cookie notice saves a refusal of optional advertising cookies; acknowledgment is not advertising consent. Accept optional cookies saves advertising permission. Either choice stops the notice automatically appearing again in the same browser, including future visits. Existing saved choices remain valid. This preference does not transfer to another browser or device, and clearing browser storage causes the notice to appear again.

Advertising tracking stays blocked without permission in the EEA, UK, Switzerland, Canada and unresolved regions; elsewhere it may run by default until you refuse. A saved refusal is honored everywhere. You can review or withdraw your choice anytime through Cookie settings below or in the homepage footer. We retain the time, notice text/version and choices shown alongside your decision in this browser, preserving earlier acceptance when you later withdraw. Withdrawal applies to future reporting, not information already sent. Browser controls can also delete or block cookies, which may affect sign-in or payments.

17. Security

We protect Personal Information with technical and organizational measures, including encryption in transit and at rest, regular backups, access controls, and role-based permissions, and we limit access to authorized personnel. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

18. Third-party websites

Our website may link to third-party websites. We do not control them and are not responsible for their content or privacy practices, which are governed by their own policies.

19. Children

The Service is not directed to children under 16, and we do not knowingly collect their Personal Information.

20. Changes to this policy

We may update this Privacy Policy as the Service evolves. We will post the current version on this page with a new “Last updated” date and, for material changes affecting Customers, notify by email or through the Service.

21. Contact

Questions or requests about privacy can be sent to our privacy contact at Bluazure Inc., British Columbia, Canada, at hello@documentlane.ai.