ClientLane — Privacy Policy

Last updated: October 9, 2026

ClientLane ("the Power-Up", "we") is a Trello Power-Up operated by CHPX that turns a Trello board into a branded, filtered portal link you can share with a client who has no Trello account. This policy explains what we collect, why, and your rights under the GDPR and the Brazilian LGPD.

1. Data we collect

• Trello account data: your Trello member ID, your email address, and an authorization token you grant. The token is used only to read the lists you chose to publish and to post a client's comment onto the card they commented on.
• Board content you publish: the names, descriptions, due dates, labels and assignee initials of cards in the lists you selected. Only the boards you explicitly publish are processed, and within them only the lists — and optionally only the labels — you picked. Nothing else from the board is stored or shown.
• Visitor comments: when a portal visitor writes a comment, the name and email address they type, along with the comment text. These are posted onto your Trello card and kept in a short activity log (the 50 most recent comments per portal) so you can review portal activity.
• Portal passwords: stored only as a salted cryptographic hash. We cannot read or recover the password you set.
• Billing data: for Pro subscriptions, your email and a Stripe customer ID. Card details are handled entirely by Stripe; we never see or store them.

If you have a Team subscription, we also store the list of people you added to it: each person's Trello member ID, username and display name, and the date you added them. A person you add can see that they are on a team and can leave it at any time. When you remove someone, or when that person deletes their Trello account or revokes ClientLane's access, we delete that entry.

2. How we use it

To render and refresh your client portal, to post client comments onto the right Trello card and notify you by email that one arrived, to enforce a portal's password and expiry date, and to process subscription billing and provide support. We do not sell your data or use it for advertising.

Product analytics. To learn which features people use and where the upgrade path loses them, the app records a few usage events, such as "opened the app" or "started checkout". Each event holds the event name, this app's name, a short detail like the plan chosen, your country, and a one-way hash of your Trello member ID. It never holds your name, email, IP address, payment details or anything from your boards. Our server sends the events to PostHog (US cloud, hosted in the United States). They are not used for advertising or shared with anyone else, and are kept for at most one year.

3. Service providers

• Vercel — hosting of the application and the public portal pages.
• Upstash (Redis) — storage of your portal settings, published snapshots, and the recent-comment log.
• Stripe — subscription payments.
• Resend — delivery of the "a client commented" notification email.
• PostHog (product analytics, US cloud) — https://posthog.com/privacy

4. Data retention

Portal settings, published snapshots and comment logs are kept until you delete the portal or uninstall the Power-Up. Deleting a portal immediately invalidates its link and removes its snapshot and comment log. We check Trello's compliance API every day. When you revoke the Power-Up's access, we delete your personal data and settings, including every portal, keeping only the record of a purchase (your Stripe customer reference and a Team subscription you own) as needed for billing and tax. When your Trello account is deleted, we erase everything we hold about you. If your token expires, we delete it and ask you to authorize again. You can ask for erasure at any time at support@chpx.io.

5. Your rights

You may access, correct, export, or delete your data at any time. To exercise any right, contact us at the address below.

6. Contact

Questions or requests: support@chpx.io.