Privacy Policy

1. Who we are

LeaseRead is an AI-powered contract analysis service operated from South Africa. When this policy refers to "we", "us", or "our", it means LeaseRead and its operators. For privacy enquiries, contact us at support@leaseread.com.

2. What data we collect

We collect only what is necessary to provide the service:

• Contract text — when you upload a PDF, we extract the text and send it to our AI for analysis. We do not store the original PDF file.
• Email address — optionally provided by you. Used only to send you a link to your report.
• Payment data — processed entirely by Paystack. We never see or store your card details. We receive a transaction reference and status from Paystack to confirm payment.
• Country — detected automatically from your IP address via Vercel's infrastructure. Used only for internal analytics.
• Usage data — basic analytics (page views, referrer) collected by Vercel Analytics. No personal identifiers are stored.

3. How we use your data

We use your data solely to:

• Extract and analyse your contract using AI
• Deliver your report and email you a link if you provided an address
• Confirm and record your payment
• Understand which countries our users come from (aggregate, not individual)

We do not use your data for marketing, profiling, or any purpose beyond delivering the service you paid for.

4. Third-party processors

We use the following sub-processors to operate the service:

• Anthropic (Claude) — your contract text is sent to Anthropic's API for AI analysis. Anthropic's privacy policy applies to this processing. Anthropic does not use API inputs to train their models.
• Supabase — your scan record and report are stored in a Supabase database hosted in the EU (North region). Supabase's privacy policy applies.
• Paystack — payment processing. Your card and financial data is handled entirely by Paystack and subject to their privacy policy.
• Resend — used to send report emails. Your email address is passed to Resend solely for this purpose.
• Vercel — our hosting provider. Basic request metadata (including IP address) is processed by Vercel's infrastructure.

5. How long we keep your data

Your scan record and analysis report are stored indefinitely so that you can revisit your report via the unique link. If you would like your data deleted, contact us at support@leaseread.com and we will remove it within 14 days.

6. Your rights

Depending on your jurisdiction, you may have rights including:

• Access — request a copy of the data we hold about you
• Deletion — request that we delete your data
• Correction — request that we correct inaccurate data
• Portability — request your data in a machine-readable format

These rights apply under GDPR (EU/UK) and POPIA (South Africa), among other laws. To exercise any of these rights, email support@leaseread.com.

7. Cookies

LeaseRead does not use tracking cookies. We use localStorage to remember your dark mode preference. This data stays in your browser and is never sent to our servers.

8. Data security

All data is transmitted over HTTPS. Our database is access-controlled and not publicly accessible. We follow industry-standard practices to protect your data, but no system is completely immune to risk. If you believe your data has been compromised, contact us immediately.

9. Children

LeaseRead is not directed at children under 18. We do not knowingly collect data from minors.

10. Changes to this policy

We may update this policy from time to time. Continued use of LeaseRead after changes are posted constitutes acceptance of the updated policy. The "last updated" date at the top of this page indicates when it was last revised.

Contact

For privacy requests or questions, email support@leaseread.com.