Privacy policy

LastLap is operated by LastLap Lab LLC, a United States company. This page explains what we collect when you use mylastlap.com, why, and what you can ask us to do with it. Questions go to hello@mylastlap.com.

What we collect

• Your account: your email address and the workspace you belong to.
• What you put in: projects, documents, contacts, proposals, invoices, time and contribution records, and anything else you enter into LastLap.
• Connected services: when you connect a service such as GitHub, Slack, Stripe or Google, we store the access it grants, encrypted, and the data we fetch through it to show you.
• Clients you send documents to: their name and email address, and, when they sign or pay, the details of that signature or payment.

How we use it

Only to run LastLap for you: to show your work back to you and your team, send the emails you ask us to send, take payments you request, and produce the AI reviews and suggestions you ask for. We do not sell personal information, and we do not use it for advertising.

Who else handles it

We use a small number of providers to run the service: Supabase (database and sign-in), Railway (hosting), Stripe (payments), Resend (email), and OpenRouter and the AI model providers it routes to (for reviews and suggestions you request). Each handles data only to provide their part of the service.

Google user data

If you connect a Google account, LastLap asks only for permission to work with files it creates itself (the drive.file permission), plus your email address to label the connection. It cannot see, open or list anything else in your Google Drive.

We use that access for one purpose: to create a Google Doc from a document you choose to send to a client, share it with the people you name, add review comments when you ask, and read its text back into LastLap when you bring it back. Text read from those documents may be sent to our AI providers only when you ask for a review of it.

LastLap’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not let people read it except where you ask us to, where needed for security, or where the law requires.

You can disconnect Google at any time in Settings, then Integrations, and remove LastLap’s access entirely at myaccount.google.com/permissions. Documents already created stay in your Drive, where you control them.

How long we keep it

For as long as your workspace exists. Signed documents, payment records and contribution ledgers are kept as long as the law or the agreements they support require. Ask us to delete your account and we will remove everything else.

Your choices

You can ask to see, correct, export or delete your information by emailing hello@mylastlap.com. We will answer within 30 days.

Security

Data is encrypted in transit, access tokens for connected services are encrypted at rest, and each workspace can only see its own data.

Changes

If this policy changes in a way that matters, we will update the date above and tell account holders by email.