ClientLane — Privacy Policy

Last updated: September 12, 2026

ClientLane ("the Power-Up", "we") is a Trello Power-Up operated by CHPX that turns a Trello board into a branded, filtered portal link you can share with a client who has no Trello account. This policy explains what we collect, why, and your rights under the GDPR and the Brazilian LGPD.

1. Data we collect

• Trello account data: your Trello member ID, your email address, and an authorization token you grant. The token is used only to read the lists you chose to publish and to post a client's comment onto the card they commented on.
• Board content you publish: the names, descriptions, due dates, labels and assignee initials of cards in the lists you selected. Only the boards you explicitly publish are processed, and within them only the lists — and optionally only the labels — you picked. Nothing else from the board is stored or shown.
• Visitor comments: when a portal visitor writes a comment, the name and email address they type, along with the comment text. These are posted onto your Trello card and kept in a short activity log (the 50 most recent comments per portal) so you can review portal activity.
• Portal passwords: stored only as a salted cryptographic hash. We cannot read or recover the password you set.
• Billing data: for Pro subscriptions, your email and a Stripe customer ID. Card details are handled entirely by Stripe; we never see or store them.

2. How we use it

To render and refresh your client portal, to post client comments onto the right Trello card and notify you by email that one arrived, to enforce a portal's password and expiry date, and to process subscription billing and provide support. We do not sell your data or use it for advertising.

3. Service providers

• Vercel — hosting of the application and the public portal pages.
• Upstash (Redis) — storage of your portal settings, published snapshots, and the recent-comment log.
• Stripe — subscription payments.
• Resend — delivery of the "a client commented" notification email.

4. Data retention

Portal settings, published snapshots and comment logs are kept until you delete the portal or uninstall the Power-Up. Deleting a portal immediately invalidates its link and removes its snapshot and comment log. If you delete your Trello account or revoke the Power-Up's token, we detect that through Trello's compliance API and erase everything we hold about you.

5. Your rights

You may access, correct, export, or delete your data at any time. To exercise any right, contact us at the address below.

6. Contact

Questions or requests: support@chpx.io.