Privacy Policy

1Overview

Palmer Software (“we,” “us,” or “our”) operates LeaseAI at tryleaseai.com. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our AI-powered lease abstraction service.

We are committed to transparency and minimizing data collection. We collect only what we need to provide the Service, and we give you meaningful control over your data.

By using LeaseAI, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the Service.

2Data We Collect

2.1 Account Information

When you create an account, we collect:

• Name — to personalize your experience
• Email address — for authentication, notifications, and support
• Password — stored in hashed form; we never store plaintext passwords
• Company/organization name — optional, for business accounts

2.2 Lease Documents

When you use the Service, you upload lease documents for AI-powered processing. These documents may contain:

• Lease agreement text and terms
• Names of parties (landlords, tenants)
• Property addresses and descriptions
• Financial terms (rent, deposits, fees)
• Dates and duration of tenancy
• Other lease-specific clauses and provisions

You control whether documents are retained after processing. See Section 5 for details.

2.3 Billing Information

For paid subscriptions, billing is handled by Stripe. We do not store your full credit card number, CVV, or banking details on our servers. We receive from Stripe only:

• Last four digits of your card
• Card type and expiration month/year
• Billing name and address
• Stripe customer ID

2.4 Usage Data

We automatically collect certain usage data when you interact with the Service:

2.5 Communications

If you contact us via email or support channels, we collect the content of those communications to respond and improve the Service.

3How We Use Your Data

We use the data we collect for the following purposes:

• Providing the Service: Processing lease documents, generating abstractions, and delivering results to you
• Account management: Creating and maintaining your account, authentication, and security
• Billing: Processing payments, managing subscriptions, and handling billing inquiries
• Customer support: Responding to your questions and resolving issues
• Service improvement: Analyzing usage patterns to improve features and user experience (using aggregated, anonymized data where possible)
• Communications: Sending transactional emails (receipts, security alerts), and product updates if you opt in
• Legal compliance: Meeting our obligations under applicable laws and regulations
• Security: Detecting and preventing fraud, abuse, and unauthorized access

We do not use your lease documents or extracted data to train AI models, sell to third parties, or for any purpose beyond providing and improving the Service.

4AI Processing

LeaseAI uses third-party AI model providers to perform lease extraction and abstraction. When you upload a document for processing:

4.1 How It Works

1. Your document is uploaded to our secure servers (hosted on Vercel infrastructure)
2. The document content is transmitted to an AI provider (Anthropic or OpenAI) via encrypted API call
3. The AI model processes the document and returns extracted data
4. We receive and display the results to you
5. By default, the document is then deleted from our systems (see Section 5)

4.2 AI Provider Data Handling

Our AI providers process your document content under data processing agreements that include:

• Processing data only to fulfill the API request
• Not using your data to train their base AI models (we opt out of training data sharing)
• Maintaining confidentiality and appropriate security measures
• Complying with applicable data protection laws

4.3 Data Minimization

We send only the document content necessary for processing. We do not transmit your account information, billing data, or other personal information to AI providers.

5Data Retention

When you close your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it (e.g., billing records for tax purposes).

You may request deletion of specific documents or your entire account at any time by contacting us at hello@tryleaseai.com.

6Third-Party Services

We use the following third-party services to operate LeaseAI:

We do not sell your personal data to any third party. We only share data with third parties as necessary to provide the Service or as required by law.

If we are required to disclose your information by law, court order, or government request, we will notify you to the extent permitted by law before doing so.

7Cookies & Tracking

7.1 Essential Cookies

These cookies are required for the Service to function and cannot be disabled:

• Authentication cookies: Keep you logged in during your session
• Security cookies: Protect against CSRF attacks and session hijacking

7.2 Analytics

We may use privacy-respecting analytics to understand how the Service is used. Any analytics we use are configured to anonymize IP addresses and not share data with advertising networks.

7.3 No Advertising Tracking

We do not use advertising cookies, retargeting pixels, or third-party tracking for advertising purposes. We do not participate in behavioral advertising networks.

7.4 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

8Data Security

We take the security of your data seriously and implement the following measures:

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher
• Encryption at rest: Stored data is encrypted at rest using industry-standard encryption
• Access controls: Access to production systems and user data is restricted to authorized personnel only, with multi-factor authentication required
• Password hashing: Passwords are stored using bcrypt or equivalent one-way hashing algorithms
• API security: All API communications use encrypted channels and authenticated requests
• Regular security reviews: We periodically review and update our security practices

Despite these measures, no system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

If you discover a security vulnerability, please report it responsibly to hello@tryleaseai.com.

9Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at hello@tryleaseai.com with the subject line “Privacy Rights Request.” We will respond within 30 days (or sooner as required by law). We may need to verify your identity before processing your request.

We will not discriminate against you for exercising your privacy rights.

10GDPR — EEA & UK Users

If you are located in the European Economic Area (EEA) or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR apply to our processing of your personal data.

10.1 Legal Bases for Processing

10.2 International Data Transfers

LeaseAI is operated from the United States. If you are located in the EEA or UK, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards for such transfers in compliance with GDPR Chapter V.

10.3 Data Protection Officer

We do not currently have a designated Data Protection Officer, as we are a small company and are not required to appoint one under GDPR. Privacy inquiries can be directed to hello@tryleaseai.com.

10.4 Right to Lodge a Complaint

If you believe we have violated your GDPR rights, you have the right to lodge a complaint with your local supervisory authority. A list of EEA supervisory authorities is available at edpb.europa.eu.

11CCPA — California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants you additional rights.

11.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

• Identifiers: Name, email address, IP address, account ID
• Commercial information: Billing records, subscription plan
• Internet or electronic network activity: Usage logs, feature interactions
• Professional/employment-related information: Company name (if provided)
• Inferences: Preferences derived from usage patterns

11.2 California Privacy Rights

• Right to Know: Request disclosure of what personal information we collect, use, disclose, and sell
• Right to Delete: Request deletion of personal information we have collected
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising
• Right to Limit Use of Sensitive Personal Information: We do not use sensitive personal information beyond what is necessary to provide the Service
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

11.3 How to Submit a CCPA Request

To submit a request, email hello@tryleaseai.com with the subject line “California Privacy Request.” We will verify your identity and respond within 45 days. You may designate an authorized agent to submit requests on your behalf.

11.4 Do Not Sell or Share

We do not sell your personal information or share it for cross-context behavioral advertising purposes, as defined by the CCPA/CPRA.

12Children's Privacy

LeaseAI is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a child under 18, we will promptly delete that information and terminate the associated account.

If you believe we may have collected information from a minor, please contact us at hello@tryleaseai.com.

13Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy on this page with a new “Last Updated” date
• Send an email notification to registered users
• Display a notice within the Service

We will provide at least 14 days' notice before material changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your data.

14Contact Us

For privacy-related questions, requests, or concerns, please reach out:

We aim to respond to all privacy inquiries within 5 business days and to fulfill data requests within 30 days (or as required by applicable law).