Gladlane Privacy Policy

Last updated: 13 April 2026

1. Who we are
   Gladlane Limited is a company registered in England and Wales (company number 16785799) with its registered office at Camburgh House, 27 New Dover Road, Canterbury, Kent CT1 3DN, United Kingdom.
   When we say "Gladlane", "we", "us" or "our" in this policy, we mean Gladlane Limited.
   For any privacy-related queries, contact us at security@gladlane.com.

2. What this policy covers
   This policy explains how we collect, use and protect information when you use the Gladlane browser extension ("Extension") and the Gladlane platform services it connects to, including the API at app.gladlane.com and the realtime service at realtime.gladlane.com.

3. Information we collect
   3.1 Configuration data
   When you set up the Extension, we store your configuration locally in your browser using Chrome's storage API. This includes your workspace identifier and per-site preferences (whether the Extension is enabled on a particular website). This data stays on your device and is not transmitted to us unless required to verify your workspace.

3.2 API call metadata
When you enable the Extension on a website and opt in to API call observation, the Extension captures metadata about HTTP requests made by that website (such as request URLs, methods, status codes, and response data). This data is sent to Gladlane's servers so the AI assistant can understand the application's data model and provide relevant support answers.

3.3 Domain verification
When you enable the Extension on a website, we send the site's hostname to our API to verify that it is registered with a Gladlane workspace. No other browsing activity is recorded or transmitted.
3.4 Chat messages
When an end user interacts with the Gladlane chat widget injected by the Extension, their messages and the AI assistant's responses are processed by Gladlane's servers to provide the support service.

3.5 Information we do not collect
We do not collect passwords, payment details, health data, precise geolocation, keystroke logs, browsing history, or any data from sites where the Extension has not been explicitly enabled by the user.

4. Legal basis for processing (UK GDPR)
   We process personal data on the following bases:
   Legitimate interests (Article 6(1)(f)) — to provide and improve the Gladlane support assistant service.
   Contract performance (Article 6(1)(b)) — where processing is necessary to deliver the service you or your organisation has signed up for.
   Consent (Article 6(1)(a)) — the Extension only activates on sites you explicitly enable, and API call observation requires a separate opt-in.

5. How we use information
   We use the information described in Section 3 to:
   Provide AI-powered support responses through the chat widget.
   Give the AI assistant context about the application's APIs so it can answer user questions accurately.
   Verify that websites are registered with a valid Gladlane workspace.
   Retry failed data deliveries using a local queue with exponential backoff.
   We do not use your data for advertising, profiling, credit scoring, or any purpose unrelated to the Gladlane support service.

6. Data sharing
   We do not sell or rent your data. We may share data with:
   Infrastructure providers who host and operate the Gladlane platform (such as cloud hosting and database providers), acting as our data processors under appropriate agreements.
   AI model providers who process chat messages to generate responses, acting as sub-processors under data processing agreements.
   We do not transfer data to third parties for their own independent purposes.

7. International transfers
   Some of our infrastructure providers and sub-processors may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the UK Information Commissioner's Office.

8. Data retention
   Configuration data is stored locally in your browser and persists until you uninstall the Extension or clear your browser data.
   API call metadata and chat messages are retained on our servers for as long as your workspace account is active, or until you request deletion.
   We delete data within 30 days of receiving a valid deletion request.

9. Your rights
   Under UK data protection law, you have the right to:
   Access the personal data we hold about you.
   Rectify inaccurate data.
   Erase your data ("right to be forgotten").
   Restrict or object to processing.
   Data portability.
   Withdraw consent at any time (where consent is the legal basis).
   To exercise any of these rights, contact us at security@gladlane.com. We will respond within one month.

10. Security
    We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and secure infrastructure. API call data and chat messages are transmitted over HTTPS and WSS (secure WebSocket) connections.

11. Children
    The Extension and Gladlane platform are not directed at children under 13. We do not knowingly collect data from children.

12. Changes to this policy
    We may update this policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Extension after changes constitutes acceptance of the updated policy.

13. Complaints
    If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact
    Gladlane Limited Camburgh House, 27 New Dover Road Canterbury, Kent CT1 3DN United Kingdom
    Email: security@gladlane.com