Privacy Policy
Last updated 3 September 2026
LeaseCollab is operated by The Tenant Agency. This explains what we collect, why, and who else touches it. It is written to be read rather than to cover us, so if something here is unclear, ask.
What we collect
- Your account: name, email address, company name, and which organisation you belong to.
- What you enter: lease details, dates, rent, options, the documents you upload, and the notes and check-ins your team adds.
- Billing: handled by Stripe. We see your plan and whether payment succeeded. We never see or store your card number.
- Operational records: which reminders were sent to which address, and standard server logs.
We do not use advertising trackers, and there is no analytics cookie following you around. The only cookies are the one that keeps you signed in and one that remembers you asked to see the sample portfolio.
Why we hold it
To run the service you are paying for: showing your portfolio, working out deadlines, emailing you about them, and letting your teammates see the same thing. We do not sell it, we do not share it for marketing, and we do not use it to train machine-learning models.
Who else processes it
Running a service means using other companies. Each of these sees only what it needs to do its job:
- Supabase — database, sign-in, and document storage
- Netlify — hosting the site
- Stripe — subscriptions and payment
- Resend — sending reminder and invitation email
- Cloudflare — the checkbox that keeps bots off the sign-in form
Who inside your company can see your data
Everyone you invite to your organisation sees the whole portfolio. That is the point of a shared account, and it is worth knowing before you invite somebody: there is no per-lease permission. Remove a person from your team and their access ends immediately.
How long we keep it
For as long as your account is open. Delete a lease and it is removed from your portfolio; we clear it from our systems within 90 days. Close your account and we delete your data, keeping only what we are required to keep for tax and accounting.
Security
Data is encrypted in transit and at rest. Access is enforced at the database itself, so one company’s portfolio cannot be read from another’s account. Documents are stored privately and served through short-lived links rather than public URLs. Sign-in is by emailed link, so there is no password of yours for us to lose.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Your portfolio can be exported from settings at any time without asking. Email us and we will act within 30 days.
Where data is held
On servers in the United States. If you are outside the US, using the service means your information is transferred there.
Children
This is a tool for businesses. It is not intended for anyone under 18 and we do not knowingly collect their information.
Changes
If we change this policy in a way that matters, we will email account owners before it takes effect.
Contact
Questions, or a request about your data: hello@leasecollab.com