Privacy Policy — Carlane
Last updated: June 22, 2026
1. Who we are
Carlane ("Carlane", "we", "us", "our") is operated by SIA Juice Digital Agency, a company registered in Latvia (the "Company", "Data Controller").
Registered address: A. Dombrovska iela, Ziemeļu rajons, Rīga, LV-1015, Latvia.
Contact for privacy matters: hello@juicelatvia.lv
This Privacy Policy explains what personal data we collect when you use Carlane (the website at carlane.lt, the Carlane web application, and the Carlane Telegram bot), why we collect it, who we share it with, and what rights you have.
2. What data we collect
We collect the following categories of personal data:
Account data — name, email address, language preference, authentication identifiers (including data received from Google when you sign in with Google).
Telegram data — your Telegram user ID, when you connect a Telegram account to use the Carlane bot.
Voice and text input — voice messages and text messages you send to the Carlane Telegram bot to log expenses, add vehicles, or query your data. Voice messages are transcribed to text as part of processing your request.
Business/fleet data — information you enter about vehicles, purchases, repairs, parts, expenses, and sales, and any documents or photos you upload.
Team and invitation data — email addresses of people you invite to your organization, and the status of those invitations.
Technical data — IP address, browser type, device information, and error logs collected automatically when you use the website or app, for the purpose of fixing bugs and keeping the service secure.
We do not intentionally collect any special categories of data (e.g., health data, racial or ethnic origin, religious beliefs) and ask that you do not submit such data through Carlane.
3. Why we process your data (legal basis)
We process your personal data on the following legal bases under the EU General Data Protection Regulation (GDPR):
- Performance of a contract — to create your account, operate your dashboard, process your fleet and expense data, and deliver the core features of the service.
- Legitimate interest — to keep the service secure, diagnose and fix technical errors, and improve the product.
- Consent — where you explicitly opt in (for example, connecting your Telegram account, or providing voice input).
- Legal obligation — where we are required to retain or disclose data by applicable law.
4. Who we share your data with (processors)
We use the following third-party service providers to operate Carlane. Each acts as our data processor and only processes data on our instructions.
| Service | Purpose | Data involved |
|---|---|---|
| Supabase | Database hosting, authentication | Account data, business/fleet data |
| Lovable Cloud | Application hosting | All data passing through the web app |
| Railway | Hosting for the Telegram bot | Telegram ID, voice/text messages sent to the bot |
| Brevo | Sending transactional emails (e.g., team invitations) | Name, email address |
| OpenAI | Voice transcription (Whisper) and natural-language processing (GPT-4o-mini) of bot messages | Voice recordings (briefly, for transcription), transcribed text |
| Sign-in with Google (OAuth) | Name, email address, Google account identifier | |
| Telegram | Messaging platform for the Carlane bot | Telegram ID, messages you send to the bot |
| Sentry | Error monitoring | Technical/error data, may incidentally include parts of the page state at the time of an error |
We do not sell your personal data to anyone, and we do not share it with third parties for their own marketing purposes.
5. International data transfers
Some of our service providers (including OpenAI and Google) may process data outside the European Economic Area (EEA), primarily in the United States. Where this occurs, we rely on the provider's certification under the EU-U.S. Data Privacy Framework, Standard Contractual Clauses, or another legally recognized transfer mechanism.
6. How long we keep your data
We keep your account and business data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain it for legal, accounting, or security purposes (such as fraud prevention or dispute resolution).
Voice recordings sent to the Telegram bot are processed for transcription and are not stored long-term by us beyond what is necessary to complete that processing.
7. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to legal exceptions.
- Restrict or object to certain processing.
- Data portability — receive your data in a structured, commonly used format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority — in Latvia, this is the Data State Inspectorate (Datu valsts inspekcija).
To exercise any of these rights, contact us at hello@juicelatvia.lv.
8. Children's privacy
Carlane is intended for business use by adults. We do not knowingly collect personal data from individuals under 18 years of age. If you believe a minor has provided us with personal data, please contact us so we can remove it.
9. Cookies and similar technologies
We use a limited number of essential cookies and similar technologies necessary for authentication and keeping you signed in. We do not currently use third-party advertising or tracking cookies. If this changes, we will update this Policy and, where required, request your consent.
10. Security
We take reasonable technical and organizational measures to protect your personal data, including access controls, encrypted connections, and row-level security on our database. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a new "Last updated" date. If changes are material, we will make reasonable efforts to notify you (for example, by email or an in-app notice).
12. Contact us
If you have any questions about this Privacy Policy or how we handle your data, contact us at:
SIA Juice Digital Agency A. Dombrovska iela, Ziemeļu rajons, Rīga, LV-1015, Latvia Email: hello@juicelatvia.lv