// legal

Privacy Policy

Last updated: March 4, 2026

1. Who we are

Northpane Labs, Inc. ("Northpane", "we", "us") is the data controller for the information described here. We're a Minnesota corporation based at 728 Washington Ave N, Suite 410, Minneapolis, MN 55401. We provide browser-based remote server access for technical teams in the United States, Canada, and beyond. Questions about this policy go to hello@northpane.io.

2. What data we collect

We keep collection narrow. Depending on how you use the site and product, we may hold:

• Form submissions: your name, work email, company name, and (if you provide it) phone number, sent through the trial signup form.
• Account and session metadata: which hosts a user connected to, connection timestamps, and session recordings — held on behalf of your organization as the account owner.
• Technical data: IP address, browser type, device type, and pages viewed, gathered through cookies and analytics.
• Support correspondence: anything you send us by email or phone.

We do not knowingly collect data from children. The service is built for businesses, not consumers.

3. Why we collect it (legal basis)

We process personal data on these grounds: to respond to your inquiry and set up a trial (steps taken at your request before a contract); to provide the service under our agreement with your organization; for our legitimate interest in keeping the service secure and understanding how it's used; and, for analytics and marketing cookies, on the basis of your consent, which you can withdraw at any time.

4. How we use your data

• To contact you about a trial request and answer your questions.
• To provide, secure, and support the service.
• To keep audit and session records that account owners rely on for compliance.
• To measure site traffic and improve the pages you're reading.
• To meet legal, tax, and accounting obligations.

We never sell your personal information. We don't share it with data brokers.

5. Third-party services

We use a small set of processors. Google Analytics helps us count visits and see which pages matter; IP anonymization is enabled. Google Ads conversion tracking tells us whether an ad led to a signup. These load only after you click "Accept all" on our cookie banner. Our hosting and email providers process data strictly to deliver the service. Each is bound by a data processing agreement.

6. Cookies

Cookies fall into three groups:

• Necessary — keep the site working and remember your cookie choice. Always on.
• Analytics — measure traffic and usage. Off until you accept.
• Marketing — measure ad performance. Off until you accept.

You can change your mind anytime by clearing your browser storage for this site, which brings the banner back. Your browser settings also let you block or delete cookies directly.

7. Data retention

Form submissions from prospects are held for 24 months, then deleted. Session recordings and audit logs are retained per your organization's plan settings — the account owner controls that window. Analytics data is kept for 14 months. Records we must keep for tax or legal reasons are held for the period the law requires.

8. Your rights

Wherever you live, you can ask us to show you the data we hold, correct it, delete it, hand it over in a portable format, or stop certain processing. You can also object to processing based on legitimate interest. To exercise any of these, email hello@northpane.io. We reply within 30 days. If you believe we've mishandled your data, you may complain to your local data protection authority.

United States — California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, and to correct inaccurate information. You also have the right to opt out of the "sale" or "sharing" of personal information. Northpane does not sell or share personal information as those terms are defined under California law. We will not discriminate against you for exercising any of these rights. To make a request, email hello@northpane.io with "California Privacy Request" in the subject.

Canada — PIPEDA

For our Canadian users, we handle personal information in line with the Personal Information Protection and Electronic Documents Act. We collect only what we need, use it for the purposes described here, and obtain consent where required. You may request access to your information or file a concern with the Office of the Privacy Commissioner of Canada.

EU / UK visitors

If you access the site from the EU or UK, the GDPR/UK GDPR rights above apply, including the right to lodge a complaint with a supervisory authority. Where data leaves your region, we rely on standard contractual clauses for the transfer.

9. Data security

Traffic is encrypted with TLS 1.3. Stored recordings use AES-256. Access to production systems is limited to staff who need it, logged, and reviewed. We build to SOC 2 and ISO 27001 standards and run independent penetration tests twice a year. No system is perfect — if a breach ever affects you, we'll notify you and the relevant authority as the law requires.

10. Changes to this policy

We update this page when our practices change. The "last updated" date at the top always reflects the current version. Material changes get a clearer heads-up, usually by email to account owners.

11. Contact

Northpane Labs, Inc.
728 Washington Ave N, Suite 410, Minneapolis, MN 55401
Email: hello@northpane.io
Phone: (612) 384-2170