Privacy Policy

What we collect

• Lease files you upload. Files are processed in memory or temporary storage to extract text and generate your analysis, then deleted. We do not retain the original PDF after the analysis completes.
• Lease analysis results. The structured summary we generate (key clauses, fees, red flags) is stored so you can return to it: with your account when you're signed in, or against a private link when you buy a report as a guest. We also keep a copy keyed to a fingerprint of the document text so an identical lease doesn't have to be re-analyzed. Email us to have an analysis deleted.
• Account information. If you sign up, we store your email address and (for Google sign-in) the basic profile fields Google returns. We do not store passwords — authentication is handled by our identity provider.
• Payment information. Subscriptions and one-time purchases are processed by Stripe. We never see or store your full card number; we only receive a token and the subscription status.
• Usage analytics. We log page views, button clicks, and product events (e.g. "lease uploaded", "analysis completed") to understand what's working. Where possible this data is associated with a random visitor ID, not your email. We also capture ad attribution parameters (such as UTM tags or click IDs) so we can tell which campaigns bring visitors.
• Email addresses you give us. If you optionally leave an email (for example to receive your results or hear from us again), we store it and may send a small number of follow-up emails. Every marketing email includes a one-click unsubscribe link, and unsubscribing suppresses your address from future sends.

What we use it for

• Generate your lease analysis and chat responses.
• Keep your account, billing, and saved analyses working.
• Improve the product (which guides get read, which features get used).
• Detect abuse and keep the service running.

We do not sell your personal information such as your name, email, or exact address. With your consent, selected de-identified rental terms may be included in aggregated market reports sold to landlords and real estate companies (see Rental research below). We do not share your lease contents with advertisers.

AI processing

Lease text, lease photos, and chat messages are sent through our AI gateway to third-party model providers (currently Google Gemini models) to generate the analysis and answers. We do not use your lease to train any model of our own, and we do not sell or share it for advertising. We cannot independently audit what a model provider does inside its own systems, so please don't paste anything into the chat that you wouldn't want a third-party processor to see (Social Security numbers, banking credentials, etc.).

Rental research

When you accept the consent notice shown before an upload, the following fields may be extracted from that lease and used in aggregated market statistics and commercial research reports that we may sell to landlords and real estate companies. This is the complete list:

• City, county, state, and ZIP code of the rental property
• Property type (apartment, house, condo, room, etc.)
• Bedrooms, bathrooms, and square footage
• Lease start date, lease end date, and lease length in months
• Whether the lease is month-to-month
• Monthly base rent
• Security deposit amount and whether it is refundable
• Total mandatory monthly fees (parking, pet rent, amenity fees, and similar)
• Which utilities the tenant pays (electricity, gas, water, trash, internet, etc.)
• Rent concessions (free months, move-in credits, discounted periods, including their stated value)
• Early-termination fee amount or how it is calculated
• Other recurring and one-time charges stated in the lease, with their frequency and whether they are mandatory, optional, or refundable

Reports exclude names, email addresses, phone numbers, signatures, exact street addresses, unit numbers, and excerpts from the source document. Restricted extracted text and supporting excerpts are retained for internal review only and are never included in reports or exports. Removing direct identifiers does not guarantee anonymity or that information is legally ready for resale.

You can withdraw uploads submitted from this browser below. Withdrawal excludes them from future research queries and exports, but does not remove the analysis needed for your report or required operational records.

Cookies and tracking

We use a small number of cookies and similar storage: a session cookie so you stay signed in, a visitor ID for analytics, and — only with your consent — advertising measurement tags from Google Ads and Reddit that tell us whether our own ads led to a visit or purchase. These tags may let Google or Reddit recognize your browser on their services.

Visitors in the EU, UK, Switzerland, and regions with comparable consent laws see a consent banner before any advertising tag loads; advertising measurement stays off unless you accept. You can change your choice at any time from the "Cookie settings" link in the footer. We do not use advertising cookies to retarget you with third-party offers; the tags only measure our own campaigns.

How long we keep your data

• Uploaded lease files: deleted after analysis.
• Saved analyses: kept until you delete them or close your account.
• Opt-in research records: restricted extracted evidence and selected terms are retained until you withdraw or request deletion.
• Account & billing records: kept while your account is active, then for the period required by tax and payment regulations.
• Analytics events: kept up to 24 months in aggregate.

Your rights

You can request a copy of your data, ask us to delete your account, or correct anything that's wrong at any time. Email marcusahall2005@gmail.com and we'll respond within 30 days. If you're in California, the EU, or the UK, you have additional rights under CCPA and GDPR — the same email works for those requests.

Security

Data is encrypted in transit (TLS) and at rest in our database. Access to production data is restricted to the founder and limited support tooling. We do not claim to be HIPAA-, SOC 2-, or PCI-certified — if your use case requires those, this is not the right tool.

Children

LeaseWise is not directed at children under 16 and we do not knowingly collect data from them.

Changes

If we change this policy in a meaningful way, we'll update the effective date at the top and, for material changes, notify signed-in users by email before the change takes effect.

Contact

Questions about privacy? Email marcusahall2005@gmail.com or use the contact page.