Privacy policy

3lanse (the website at https://3lanse.com and the 3lanse mobile app) is run by 3lanse. We are the controller of the personal data described in this policy.

Contact us about privacy at hello@3lanse.com.

We only collect what we need to run the service. Depending on how you use 3lanse, this includes:

• Account details: your name, email address and sign-in details. Passwords are handled by Google Firebase Authentication and we never see them. If you sign in with Apple or Google we receive your name and email from them.
• Profile details: your role, location, travel radius, day rate, work status, experience, accreditations, skills, sectors, photo and anything else you add. 3seekers add company name, contact name, logo and the roles they hire for.
• Compliance documents: insurance certificates, cards, identity and right-to-work documents and their expiry dates, if you upload them.
• CVs: if you upload a CV (including while signing up) we read it to fill in your profile for you to check. The file itself isn't kept by this feature.
• Receipts: on 3lanser Pro, photos of receipts you add, so the details can be read and saved to your expenses.
• Support: messages you send to the 3lanse team, fault reports (with your browser or app version and the screen you were on) and notes our team keeps to help with your account.
• Usage: which platform you last used (web, iPhone or Android) and when, which paid features you tried on a free plan (so we can suggest the right plan), and overall counts of which screens are used, so we can improve 3lanse.
• Business and invoicing details: trading name, address, VAT and company numbers, bank details, clients and invoices you create, so they can be printed on your invoices.
• Messages and activity: messages, photos and files you send, connections, job posts, interest in jobs, interview requests, testimonials, recommendations and PQQ submissions.
• Payments: if you buy a paid plan, our payment provider (Stripe) handles your card. We see your plan, payment status and the last four digits only.
• Device and usage information: device type, app version, push notification token, IP address and logs of sign-ins and errors, used to keep the service secure and working.
• Addresses and postcodes you look up, and site addresses on your projects, to fill in addresses and work out mileage.
• Safety reports: if you report or block someone, we keep the report and who it concerns.

We use your data for these purposes, relying on the lawful bases in UK GDPR and EU GDPR Article 6:

• To provide your account and the features you use, including your profile, search, messaging, jobs, interviews, documents, compliance checks and invoicing tools (performance of our contract with you).
• To show your profile to other signed-in members so they can find and contact you, which is the point of the service (contract).
• To check compliance and review PQQ submissions, including human review by 3lanse reviewers (contract, and our legitimate interest in keeping the network trustworthy).
• To keep 3lanse safe and secure, prevent fraud and misuse, act on reports and enforce our terms (legitimate interests).
• To send service emails and notifications such as confirmations, security alerts, messages and interview requests (contract).
• To send tips, product news and offers about 3lanse (see section 9).
• To improve the service using aggregated information (legitimate interests).
• To keep accounting and tax records and respond to lawful requests (legal obligation).

Where we rely on legitimate interests we have weighed them against your rights. You can object at any time (section 8).

Identity and right-to-work documents can show nationality. We use them only to support compliance checks you ask for, keep them private to you and our reviewers, and never use them to make decisions about you automatically.

Some features use artificial intelligence provided by OpenAI (in the United States). We send only the content each feature needs, under OpenAI's business terms, which do not allow it to use the data to train its models. OpenAI may keep it for a short time to detect abuse.

What goes to OpenAI: the text of a CV you import (including during sign-up); receipt photos you scan on 3lanser Pro; and, when you use Aidmin, your request and the parts of your own account needed to answer it (for example invoice totals, a client's name, your tasks, calendar or expenses). Receipt photos themselves are stored in your 3lanse account, not by OpenAI.

If you switch on Read messages, Aidmin can read recent messages in a chat you ask about, including what other members sent you. If you ask Aidmin to message someone, it writes a draft from your request and sends it only when you tap Send, and only to people you can already message. For 3seekers, when Aidmin searches for 3lansers it uses the names, roles, areas, availability and day rates shown on their profiles (never their contact details or documents).

Aidmin is part of 3lanse and covered by these terms and this policy; you don't sign up to anything with OpenAI. The first time you open Aidmin we show you how it uses your data. It only creates, changes or sends something after you confirm. Conversations stay on your device; we keep a short record of the actions it took (what, when and the outcome) so you can review them. You can choose what Aidmin can use, or stop using it, at any time.

AI suggestions are drafts for you to check. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. Compliance badges follow published rules, and PQQ decisions are made by people.

• Other members: your profile, photo, role, area, work status and badges are visible to signed-in members. Your email and phone are only added to your profile while you switch “show” on; otherwise they stay private to you. Messages are visible to the people in the conversation. Posts, comments and likes in the Hub are visible to all signed-in members.
• Anyone with your public profile link (3lanse.com/p/…): your name, photo, role, area, work status, experience, accreditations, skills and published testimonials, and your day rate if you show it. Never your email, phone or documents. You can switch the link off in Settings, and these pages are kept out of search engines.
• Private to you: documents, clients, invoices, business and bank details, and CVs. 3lanse staff can access them only to support you, review compliance or investigate misuse.
• Service providers who process data for us under contract: Google (Firebase hosting, database, storage and authentication, and Google Maps for road distances), Vercel (website hosting), Resend (email delivery), OpenAI (CV reading, receipt reading and Aidmin), Stripe (payments), Expo (app updates and push notifications), postcodes.io and Ideal Postcodes (postcode and address lookup), and Apple and Google (sign-in, app stores and push delivery).
• Authorities, where the law requires it, or to protect someone's safety.
• A buyer of our business, if that ever happens, under the same protections.

We do not sell your personal data and we do not use it for third-party advertising.

Some of our providers store or process data outside the UK and European Economic Area, mainly in the United States. Where they do, we rely on adequacy regulations (including the UK–US data bridge and EU–US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Addendum and EU Standard Contractual Clauses, with additional safeguards where needed.

• Your account, profile and content: while your account is open.
• When you delete your account (in the app, on the website or by asking us), we cancel any subscription and delete your account, profile, photo, documents and files, clients, projects, invoices, work log, mileage, tasks, calendar, expenses and receipts, direct chats, messages you sent in group chats, connections, interviews, testimonials, jobs you posted, Hub posts, comments, likes and applications, support chats and fault reports, and Aidmin's record of your actions. Your sign-in is removed and you're signed out everywhere.
• What we keep after deletion: payment and subscription records held by Stripe, for as long as tax law requires; reports you made about other members and the action we took, while they're needed to keep members safe; our team's internal notes and audit log; and a marker of your email domain so free trials can't be repeated. Invoices you already sent stay with the people you sent them to.
• Backups: deleted data can remain in our providers' encrypted backups for a limited period before it is overwritten.
• Logs: kept by our hosting providers for a limited period for security and troubleshooting.

Under UK and EU data protection law you have the right to:

• access a copy of your personal data
• have inaccurate data corrected (you can edit most of it yourself)
• have your data deleted
• restrict or object to how we use it, including for marketing at any time
• receive your data in a portable format
• withdraw consent where we rely on it, without affecting what we did before

You can download a copy of your data at any time in Settings (Download my data), and delete your account in Settings. See 3lanse.com/delete-account for how deletion works.

Email hello@3lanse.com to use any of these rights. We will reply within one month. It is free unless a request is clearly unfounded or excessive.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113) or, if you live in the EU, to your local data protection authority.

We send account emails (confirmations, receipts, security and activity such as interview requests) because they are part of the service.

We also send occasional tips, product news and offers about 3lanse's own services to members who didn't untick the box when signing up. For individuals and sole traders this relies on the 'soft opt-in' under PECR (similar services, with a chance to refuse at sign-up and in every message); for company addresses, on our legitimate interests. You can turn these off in Settings or with the unsubscribe link in any marketing email, at any time.

Push notifications on your phone are only sent if you allow them. You can turn them off in the app or your phone's settings.

Data is encrypted in transit and at rest by our hosting providers. Access is controlled by security rules so members can only reach their own private data, and staff access is limited and logged. No system is perfectly secure; if a breach affects you we will tell you and the regulator as the law requires.

We use only storage that the service needs, in your browser or phone. We do not use advertising or cross-site tracking cookies. If we add optional analytics we will ask first.

• Sign-in: Firebase Authentication keeps you signed in (browser storage, or secure storage on your phone).
• Offline copy: recent data is kept on your device so 3lanse opens quickly and works on poor signal. It's cleared when you log out.
• Preferences: things like whether the sidebar is collapsed and the last email you signed in with on that device.
• Sign-up progress: so a half-finished sign-up isn't lost if you switch tabs.
• Push notifications: a device token, only if you allow notifications.

3lanse is for people aged 18 and over. We do not knowingly collect data from children.

Please don't upload criminal record (DBS) certificates or details of offences: 3lanse doesn't need them.

We will update this policy when our practices change and show the date at the top. If a change is significant we will tell you in the app or by email.