Legal

Privacy Policy

What we collect, why, and how it's protected.

Draft, not lawyer-reviewed. This page is placeholder legal language written to cover the common shape of this document, not certified-compliant legal text. Consult qualified counsel before relying on it.

Last updated: August 2026 (draft)

1. Who this applies to

This policy covers personal data processed through LeaseOps: staff of property management companies using the platform ("Customer"), and tenants, property owners, vendors, and rental applicants who interact with Customer through LeaseOps's self-service portals. LeaseOps acts on Customer's behalf when processing tenant, owner, vendor, and applicant data — see the Data Processing Agreement for that relationship specifically.

2. Information we collect

Depending on your role, this may include:

Account information — name, email, phone, role, and login credentials.
Property and lease data — addresses, unit details, lease terms, rent amounts, occupancy history.
Financial information — payment history and status (card/bank details themselves are handled directly by our payment processor, Stripe, and are not stored by LeaseOps).
Application and screening data — information a rental applicant submits, and, where tenant screening is used, the results of a background/credit check performed by our screening provider, Checkr, under separate FCRA-compliant authorization — see the FCRA Disclosure.
Documents — leases, agreements, and other files uploaded to or generated within the platform.
Communications — messages sent through the platform's messaging features, and support/contact-form submissions.
Usage data — log and device information generated by using the Service (IP address, browser type, pages visited, timestamps).

3. How we use information

To provide and operate the Service (managing properties, leases, maintenance, payments, documents, and communications).
To process rent payments and owner payouts through Stripe, and lease e-signature through DocuSign.
To perform tenant screening through Checkr, only after the applicant's separate FCRA disclosure and consent.
To send transactional communications (invites, notifications, receipts) via our email provider.
To maintain security, detect fraud or abuse, and enforce our Terms of Service.
To comply with legal obligations.

We do not sell personal data.

4. Who we share information with

We share personal data only as needed to provide the Service:

Stripe — payment processing, owner payouts.
DocuSign — lease and document e-signature.
Checkr — tenant screening (background/credit checks), only after applicant consent.
Amazon Web Services (AWS) — cloud hosting and file storage.
Our transactional email provider — sending account and workflow notifications.
Customer's own staff, within their organization, as configured by Customer's account administrators.
Law enforcement or regulators, where required by law.

Each provider above processes data under its own privacy policy and, where applicable, a data processing agreement with LeaseOps.

5. Data retention

We retain personal data for as long as Customer's account is active, and for a reasonable period afterward to allow data export, meet legal/audit obligations (e.g. financial recordkeeping), and resolve disputes. Screening results obtained through Checkr are retained according to Checkr's own data-retention practices and applicable law.

6. Security

Customer data is isolated per organization at the database layer (row-level security) so one organization's data is never visible to another. Data is encrypted in transit. Access to production systems is restricted to authorized personnel. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

Depending on your location and role, you may have the right to access, correct, or request deletion of your personal data. Tenants, owners, vendors, and applicants should contact the property management company they interact with (as the primary data controller for that relationship) or reach us through the contact page; we will route the request appropriately.

8. Children's privacy

The Service is intended for use by adults in a business or rental context. We do not knowingly collect personal data from children.

9. Data location

Data is currently hosted on infrastructure located in the United States. If this changes, this policy will be updated.

10. Changes to this policy

We may update this policy from time to time. Material changes will be posted here with an updated effective date.

11. Contact

Questions about this policy can be sent through the contact page.