Privacy Policy

1. Data We Collect

• Landlord Account Data: When you log in via Google OAuth, we receive your email address and basic profile information. This is used solely to identify you and manage your subscription.
• Property & Financial Data: We store the property details, unit information, and financial transactions you enter.
• Tenant Data: You may choose to enter tenant names, emails, or phone numbers. This data is stored in our application database and is never used by us to contact your tenants.

2. How We Use Data

• To provide the core services of the app (Ledger, Reminders, Reporting).
• To show automatic in-app reminders for rent due dates and lease renewals, plus manual reminders you create.
• If you explicitly enable automatic reminder email in Settings, we send those best-effort, retryable emails only to the email address on your signed-in landlord account. We do not use tenant contact details to send reminder email.
• To manage billing and subscriptions via our payment processor.
• To format rental amounts and exports in CAD for the current Canada-first service.
• To maintain private, first-party aggregate product measurements. These use only an internal account ID, a small allowlist of product events and upgrade triggers, timestamps, and retry-deduplication data. They do not include tenant, property, transaction, receipt, amount, email, IP, device, referrer, UTM, payment-provider payload, or free-text data. We do not use third-party analytics scripts, advertising pixels, session replay, or fingerprinting for this measurement.
• When someone follows our fixed The Brief Article 1 link, we may count an eligible navigation request in a daily aggregate bucket. This is a request count, not a unique-person count. The bucket contains only the UTC day, fixed source, article, and action labels, a count, and timestamps; it does not contain IP address, user agent, referrer, cookie, account, session, query string, or other personal data. We do not link this count to later signups or purchases.
• To detect release regressions with first-party, aggregate browser-error diagnostics. These retain only a server-generated fingerprint of a small allowlisted error kind, route class, release identifier, optional first-party Nuxt asset path and bounded line/column, server-derived signed-in state, timestamps, and an occurrence count for up to 30 days. They exclude account IDs, email, IP, user agent, referrer, full URLs, query strings, fragments, messages, stacks, console output, form values, storage, cookies, authorization data, request/response data, and arbitrary metadata. We use no third-party analytics, session replay, advertising pixels, or cross-site fingerprinting for these diagnostics.

3. Third-Party Services

We use a small number of trusted partners to provide our infrastructure:

• Cloudflare: Hosts our database and file storage.
• Lemon Squeezy: Processes payments and manages tax compliance.
• Resend: Delivers transaction and reminder emails.
• Google: Provides secure authentication.

4. Data Security & Isolation

• Isolation: Your data is strictly isolated. Every database query is filtered by your specific user ID so other users cannot access your ledger.
• Secure Transport: Connections use HTTPS/TLS, and EaseLease runs on managed Cloudflare infrastructure with standard platform security controls.
• Financial Precision: We do not store credit card numbers; all payment data is handled securely by Lemon Squeezy.

5. Your Rights

You own your data. You may:

• Export your transactions to CSV at any time.
• Request the permanent deletion of your account and all associated data (Properties, Units, Tenants, Receipts, and private product-measurement events).

6. Contact

For privacy-related inquiries, please contact: privacy@easelease.app