What happens to your lease
Last updated June 30, 2026
This page is maintained by Marcus A. Hall, the founder of LeaseWise, to spell out exactly what happens to the PDF you upload, how long anything is kept, and how to delete it. If you'd rather skim: the original PDF is deleted right after analysis, the structured summary is yours to delete any time, and nothing about your lease is sold or shared with advertisers.
What happens when you upload a PDF
- Your file is sent over HTTPS (TLS 1.2+) to our backend. It is never written to a public bucket or a shareable URL.
- The PDF is parsed in memory (or in short-lived temporary storage when it must be sent to a server fallback for scanned/image-based PDFs) to extract the lease text.
- The extracted text is sent to an AI model to generate your structured summary, grade, and red-flag list.
- The original PDF is deleted as soon as the analysis completes — typically within seconds. We do not keep a copy, a backup, or a thumbnail of the file.
- Only the structured summary (clauses found, fees, grade, red flags) is saved — and only if you have an account and chose to save it.
Data retention timing
| Data | How long we keep it |
|---|---|
| Uploaded PDF file | Deleted within seconds of analysis completing. Never backed up. |
| Anonymous (no-account) analysis | Held in your browser session only. Cleared when you close the tab or after 24 hours. |
| Saved analysis (signed in) | Kept until you delete it or close your account. |
| Chat messages with the assistant | Kept with your account for follow-up; deleted when you delete the conversation or close your account. |
| Account & billing records | Kept while your account is active, then for the period required by tax / payment regulations. |
| Analytics events (page views, clicks) | Up to 24 months in aggregate. Tied to a random visitor ID, not your email where possible. |
| Server logs | 30 days, then rotated. Do not contain lease contents. |
How to delete your data
- A single analysis: open it from your account and click delete. It's gone immediately.
- Your whole account: email marcusahall2005@gmail.com from the address on the account. Account, saved analyses, and chat history are removed within 7 days.
- Without an account: nothing is stored server-side beyond the temporary processing window — closing the tab clears it.
Security controls
- Encrypted in transit: all traffic uses HTTPS / TLS 1.2+.
- Encrypted at rest: the database storing saved analyses and account data is encrypted on disk.
- Row-level security: the database enforces, at the query layer, that one account cannot read another account's analyses — not just at the app layer.
- Authentication: handled by a dedicated identity provider. We never see or store your password.
- Payments: processed by Stripe. We never see or store full card numbers.
- Access: production data access is restricted to the founder for support and incident response.
AI processing
Lease text and chat messages are sent to third-party AI providers (OpenAI, Google, Anthropic, depending on the model serving your request) to generate the analysis and answers. These providers are contractually prohibited from using your content to train their models on our account. Do not paste anything into the chat that you wouldn't want a third-party processor to see — Social Security numbers, banking credentials, and similar sensitive identifiers don't belong in a lease question.
What this page is not
LeaseWise is not SOC 2, HIPAA, PCI, or ISO 27001 certified, and this page is not an independent audit. It's a plain-English description of the controls actually in place today, maintained by the founder. If your use case requires a formal compliance report, this is not the right tool yet — email us and we'll tell you so honestly.
Reporting a vulnerability
If you believe you've found a security issue, please email marcusahall2005@gmail.com with details and steps to reproduce. We'll acknowledge within 72 hours and won't pursue good-faith researchers who follow responsible-disclosure norms.
