Privacy policy
Effective June 10, 2026
LeaseLookout reads your lease against Connecticut housing law. Doing that means you trust us with one of your more personal documents, so this page says exactly what we collect, where it lives, and what we will and won't do with it.
Only what the service needs.
- Your account. An email address and a password. Passwords are handled by our sign-in provider and stored only as a salted hash — we never see them.
- Your lease. The PDF you upload, the text we extract from it, and the report we generate — the flagged clauses, their severity, and the statute citations.
- Invite requests. The email you give us when you ask for an invite.
- Operational logs. Standard server logs (IP address, browser type, request timestamps) kept by our hosting provider for security and debugging.
That's the whole list. No advertising trackers and no third-party analytics cookies — the only cookies we set are the ones that keep you signed in.
To read your lease. Not to monetize it.
We use your data to run the analysis, show you your report and history, keep the service secure, and send the email you asked for — an invite, or messages about your account.
We don't sell your data.We don't share your lease with landlords, brokers, advertisers, or anyone else. We don't use your documents to train AI models — the analysis is deterministic software running on our own infrastructure, and your lease is never sent to a third-party AI service.
Encrypted, access-controlled, in the U.S.
Your account, leases, and reports are stored with Supabase (database and file storage) in the United States (AWS us-east-1). Every analysis is tied to your account under row-level security, so only you can read your leases and their flags. Data is encrypted in transit (TLS) and at rest by our infrastructure providers.
Who processes data on our behalf.
- Vercel. Hosts and serves the application.
- Supabase. Sign-in, database, and file storage for your account and analyses.
- Sinch Mailgun. Sends our email — invites and account messages.
- Cloudflare. Domain registration and DNS.
Each provider processes only what it needs to do its job for us.
Yours until you say otherwise.
We keep your leases and reports while your account is active so your history works. Email [email protected] and we'll delete your account and every analysis tied to it within 30 days. If you only asked for an invite, we'll remove your email from the list on request.
Ask, and we'll show you.
You can request a copy of the data we hold about you, ask us to correct it, or ask us to delete it — use the email above. We'll respond within 30 days.
Adults only.
Leases are adult contracts, and LeaseLookout isn't directed at children under 13. We don't knowingly collect their data.
The standing disclaimer applies here too.
LeaseLookout is not a law firm, and nothing it produces — or anything in this policy — is legal advice or creates an attorney–client relationship. Every flag cites the Connecticut statute so you can read the law yourself; for a specific situation, talk to a tenant-rights attorney or Connecticut Fair Housing.
We'll keep this page honest.
If this policy changes, we'll update it here and revise the effective date. If a change is material, we'll email account holders before it takes effect.
One address, a human reads it.
Questions, requests, complaints: [email protected].