1. Who we are and what this policy covers

Huber Lane Holdings LLC d/b/a Redline Growth (Redline, we, us, or our) operates Lanyard. This policy describes personal information handled through Lanyard’s website, application, APIs, research services, account management, connected workflows, and related communications. It also explains how people whose professional information appears in research can contact us, even without an account.

For questions or privacy requests, email nick@redlinegrowth.com. Our mailing address is 1105 Pleasant St, Oak Park, IL 60302, USA.

Our role depends on the activity. We determine the purposes and means of processing account, billing, security, support, public-source research, and our own business-development information. Where privacy law uses that terminology, we act as a controller. For customer-supplied records processed solely to deliver requested work, we generally act as a processor or service provider, subject to customer instructions and any applicable data processing agreement.

2. Information we handle, sources, and purposes

Payment credentials are handled by the payment provider shown at checkout. Do not send full card numbers or sensitive credentials in uploads, prompts, or support messages. Professional information can remain personal information even when public. We do not use Lanyard rankings for eligibility decisions about employment, credit, insurance, housing, or similar benefits.

3. How research and outreach work

A customer supplies its company context, conference, goals, and optionally an authorized attendee list. Lanyard may discover additional relevant professionals from permitted public business and event sources; use research, enrichment, and AI providers; and generate campaign-specific scores, rankings, dossiers, and suggested messages.

Customer-uploaded person-level records remain within that customer’s scope. The same customer may reuse its contacts, enrichment, and—when campaign goals match—research and scoring across its own campaigns. Public-search identity, professional, and event-attendance facts may support campaigns for other customers at the same event. Those shared facts do not include another customer’s uploaded list, private materials, scores, dossiers, decisions, or outreach history.

Lanyard may send operational email and, with consent, text messages to its own users. It sends or dispatches outreach to researched contacts only when a customer or authorized operator directs that action through a supported connected workflow. The customer is responsible for recipient selection, lawful basis, message review, identification, opt-outs, and suppression.

We do not use nonpublic customer inputs to train general-purpose AI models or authorize providers to do so without separate affirmative permission. We may use AI providers to process inputs for the requested task and create deidentified, aggregated service statistics without attempting to reidentify anyone.

4. When information is disclosed

• Customer workspaces and deliverables. Authorized users and administrators can access information in their organization’s workspace. The commissioning customer receives research prepared for it.
• Service providers. Providers and authorized contractors may process information for hosting, databases, authentication, payments, email and text delivery, security, professional research, enrichment, connected workflows, or AI processing.
• Public-search reuse. Publicly sourced identity, professional, and event-attendance facts may be reused to avoid duplicate research. Customer-uploaded lists and private customer materials are not shared across customers.
• Customer-directed disclosure. We may send information to a service an authorized user connects or directs us to use, including an export, webhook, enrichment workflow, or outbound tool.
• Legal and protective purposes. We may disclose information to comply with law or valid legal process, protect rights or safety, investigate abuse, or establish or defend claims.
• Business transactions. Information may be disclosed during a proposed or completed merger, financing, reorganization, or sale of relevant assets, subject to appropriate protections.

Sale, sharing, and targeted advertising: Redline does not sell personal information for money or other valuable consideration and does not share it for cross-context behavioral advertising. We do not use Lanyard for targeted advertising. Disclosures to contracted service providers and customer-directed tools are made to operate the Service or fulfill customer instructions, not to sell information.

5. Cookies and similar technologies

Lanyard currently uses browser storage, cookies, and similar technologies needed for authentication, security, user preferences, payment flows, and reliable operation. Blocking necessary storage can affect sign-in and other functionality.

We do not currently use advertising trackers, retargeting pixels, or optional cross-site behavioral advertising technologies in Lanyard. Because there is no sale, targeted-advertising sharing, or optional advertising tracking to opt out of, browser Do Not Track and Global Privacy Control signals do not change Lanyard’s current behavior. If those practices change, we will update this policy and provide choices required by law before using them.

6. Retention and deletion

We retain information according to its purpose, the customer relationship, legal obligations, security needs, and valid customer or individual requests.

Specific legal preservation duties may require longer retention. Deletion removes active copies within the stated period. Residual encrypted backup copies may remain until a provider’s ordinary backup cycle expires; they are isolated from ordinary use and are not restored except for recovery, security, or legal needs. Deletion from Lanyard does not delete copies a customer previously exported or information maintained by an independent public source.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. Access is limited according to operational need. No service, transmission, or storage method is completely secure. Users should protect credentials and report suspected unauthorized access. We provide personal-data incident notices where required by law or contract.

8. Your choices and privacy requests

Email nick@redlinegrowth.com to ask about information concerning you, request access, correction or deletion, object to its use, opt out where applicable, or exercise other rights available under law. Include enough context to locate the information, such as a work email, organization, event, or professional profile URL. You do not need a Lanyard account to submit a request.

We may verify identity or an authorized agent’s authority proportionately. We will respond within the period required by applicable law, explain permitted extensions or denials, and provide any required appeal process. To appeal, reply to our response or email with the subject Privacy appeal. We will not unlawfully discriminate or retaliate for exercising privacy rights.

You can opt out of Redline marketing email through the message’s unsubscribe instructions or by emailing us. Reply STOP to opt out of Lanyard text messages and HELP for help. Necessary account, security, billing, and legal messages may still be sent where permitted.

9. Additional information for U.S. residents

Depending on where you live and whether a law applies, you may have rights to know or access personal information, correct it, delete it, obtain a portable copy, opt out of certain sales, sharing, targeted advertising, or profiling, limit certain sensitive-information uses, and appeal a denied request. Exceptions may apply for security, legal duties, the rights of others, public information, and records we must retain.

Redline does not currently sell personal information or share it for cross-context behavioral advertising. If you submit a request concerning research that we process solely for a customer, that customer generally determines the response; we will direct the request appropriately or assist as required. Authorized agents may submit requests, subject to reasonable verification of their authority.

10. International processing and European privacy rights

Redline is based in the United States. We and our service providers may process information in the United States and other countries, whose laws may differ from those where you live. Where required, we use contractual safeguards or another lawful transfer mechanism appropriate to the provider and transfer. We do not claim participation in a transfer certification unless separately stated and verified.

Where the GDPR, UK GDPR, or similar law applies to processing for which we are controller, our legal basis depends on the activity: performing a contract, legitimate interests in administering business relationships, securing the Service and conducting proportionate professional research, compliance with legal obligations, or consent where required. You may have rights to access, correct, erase, restrict, object, withdraw consent, receive portable data, and complain to a competent authority.

Rankings and suggested openers support human business judgment. We do not use them to make solely automated decisions with legal or similarly significant effects about individuals.

11. Children

Lanyard is a business service for adults and is not directed to children under 18. We do not knowingly collect children’s information for use in the Service. Contact us if you believe a child’s information was submitted so we can investigate.

12. Changes to this policy

We may update this policy as practices or legal requirements change. We will revise the effective date and give notice of material changes through the Service or another appropriate channel before they take effect where required. Publishing an updated policy does not create consent to an incompatible new use of previously collected information.

13. Contact