Privacy policy

What Lance Road collects

We collect the email address used to sign in, a display name derived from that address, candidate facts you provide, job links and details you save, application documents and progress, capture source and timing, device connection labels, and security events needed to operate your account. Mobile clipboard content is read only after you press Import, and only a detected public job URL is saved.

How the data is used

We use this information to authenticate you, isolate your workspace, deduplicate and classify saved jobs, synchronize devices, prepare and run application workflows you start, show recovery actions, provide support, prevent abuse, and keep the service reliable.

Sign-in

The iPhone app supports Sign in with Apple. The web app and other supported clients use short-lived email links and never ask for the password to your sign-in account. Apple may provide a private relay address when you choose Hide My Email.

Optional Gmail connection

You can separately connect a Gmail mailbox for application email and employer verification codes. Lance Road asks for the Gmail address and a 16-character App Password generated by Google after 2-Step Verification is enabled. Do not provide your normal Google Account password. The App Password is encrypted at rest and used only to authenticate Gmail IMAP and SMTP access for the features you enable.

During an active application, Lance Road may read a bounded set of recent Gmail messages to find a matching verification code and may send application-related email from the connected address. Message bodies and verification codes are processed only for the active request and are not retained in your workspace, logs, analytics, or generated documents. Gmail is optional for capture and applications that do not require email verification.

Sharing and processors

We do not sell personal information. Infrastructure, email delivery, app-store, monitoring, and support providers may process limited data on our behalf to operate the service. Employers and recruiting systems receive information only when you direct an application workflow to them.

Retention and deletion

Your workspace data remains available until you delete your account or it is removed under an applicable retention requirement. Short-lived sign-in challenges expire automatically. Disconnecting Gmail removes the encrypted App Password from the active connection. Account deletion removes the connection with the rest of the workspace. Operational backups and security logs may remain for a limited period before routine deletion.

Security

Web sessions use secure HTTP-only cookies; mobile and device sessions use revocable tokens stored in platform-secure storage. Data is encrypted in transit. No system can guarantee absolute security, so report suspected account misuse promptly.

Your choices

You can disconnect Gmail inside Lance Road, revoke its App Password from your Google Account, sign out, revoke connected devices, or permanently delete your Lance Road account. Account deletion removes the workspace, captures, saved jobs, application records, encrypted provider credentials, and active sessions. See account deletion instructions.

Contact

For privacy questions or access requests, email hello@lanceroad.com.