Privacy Policy

Summary

Lana is built for U.S. immigration petitioners. The data you give us is the most sensitive data you have. We treat it that way.

• We collect only what we need to assemble your EB-1A package.
• We do not sell, rent, or trade your data.
• We do not train third-party AI models on your data.
• You can request export or deletion at any time.

What we collect

Account data: your email address, used only for one-time-password sign-in and case-related notifications.

Petition data: CV, LinkedIn export, evidence files you upload (press articles, award certificates, employment letters, etc.), notes you record in the Remember tool, and chat transcripts from interview sessions.

Derived data: structured profile fields, per-criterion analysis, brief drafts, recommender shortlists. These are generated by Lana from the data you provided.

Technical data: standard server logs (IP address, user-agent, timestamps) for security and abuse prevention; Google Analytics 4 (via Google Tag Manager) for aggregate traffic analytics. We do not place advertising cookies.

What we do with it

We use your data to operate Lana for you:

• Extract a structured profile from your CV and LinkedIn export.
• Search the public web for press coverage, citations, awards, and platform profiles that strengthen your case.
• Draft per-criterion brief sections and recommender letters.
• Verify uploaded files against the claims in your profile.
• Generate an attorney-ready output package for download.

Who we share data with

Lana relies on a small number of subprocessors. Each is contracted to handle your data only on our instructions:

• Anthropic — operates the Claude API used to draft and analyze your case. Anthropic does not train its models on Claude API inputs by policy.
• Cloudflare — DNS, CDN, and DDoS protection for the website.
• Google — aggregate analytics (Google Analytics 4 via Google Tag Manager).

We do not sell your data. We do not share it with immigration attorneys without your explicit instruction. We do not provide it to USCIS unless legally compelled by a court order.

Where data lives

Your data is stored on servers we operate directly. Uploaded files are encrypted at rest. Backups are encrypted and rotated on a 30-day cycle.

Your rights

You may, at any time:

• Export everything Lana has on you (request via /contact).
• Correct or delete any field, file, or note.
• Permanently delete your account and all associated data. We complete deletion requests within 14 days.

If you are an EU/UK resident, the legal basis for processing is your consent (account creation) and our legitimate interest in operating a usable product. You may lodge a complaint with your national data protection authority.

Data retention

We keep your data for as long as your account is active. After deletion, residual copies in backups are purged within 60 days.

Changes

If we change how we handle your data, we will update this page and the Last updated date above. Material changes will be emailed to you in advance.

Contact

Questions, requests, or complaints: [email protected].