Privacy Policy
Last updated: October 3, 2026
The short version. Your lease file is deleted from our storage as soon as your analysis finishes. Its extracted text is deleted 30 days after your scan, and your report 12 months after it, automatically and without you having to ask. We have never sold personal information and we don't. To read your lease we send it to two outside processors — LlamaParse for text extraction and Google for the analysis — and neither uses it to train their models. Like most sites, we use an analytics tool; Section 6 says which one and how to turn it off. To delete everything, email support@apartmentleasereview.com.
1. Who this covers
This policy explains how LeasePatrol ("we," "us") handles personal information on apartmentleasereview.com. It applies to visitors, people who run a free lease scan, and Action Kit customers. Our Terms of Service govern use of the Service itself.
We are based in the United States and our processing happens in the United States. The Service is intended for people renting in the states we support. If you use it from outside the U.S., your information is processed here.
2. What we collect
Your lease document. The PDF or photo you upload, and the text extracted from it. Leases contain personal information — your name, the address, rent and deposit amounts, sometimes household members, co-signers, or ID numbers. We ask for it because there is no way to check a lease against the law without reading it.
Your analysis. The flags, clause excerpts, statute citations, estimates, and Action Kit documents generated from your lease, plus the state and city you selected.
Contact and account information. Your email address if you create an account, ask to be notified when your state goes live, or give it to us for a report or support. Passwords are stored hashed by our authentication provider; we never see them.
Payment information. Stripe processes payments and gives us a payment identifier, the amount, and status. Your full card number never reaches our servers and we never store it.
Feedback. If you tell us a flag was wrong or unhelpful, we record that with the flag so we can improve accuracy.
Technical and usage information. IP address, browser and device type, pages viewed, referring page, and interactions with the site, collected through our hosting provider and the analytics tool in Section 6.
We do not ask for, and you should not send us, Social Security numbers, bank account or card numbers by email, immigration status, or health information. If your lease happens to contain something like that, treat it as covered by this policy and the deletion rights below.
3. What we use it for
- Extracting the text of your lease and analyzing it against your state's law.
- Building, showing, and re-showing your report and Action Kit.
- Taking payment and issuing refunds, including automatic refunds for undelivered kits.
- Answering support requests.
- Keeping the Service secure and working — detecting abuse, debugging failures, and recovering stuck analyses.
- Improving accuracy: reviewing flags that our own checks or your feedback marked as questionable, and measuring how the analyzer performs.
- Emailing you if you asked us to — a notification when your state goes live, or occasional product email if you gave us your address for that. Every such email has an unsubscribe link, and we do not sell or rent our email list.
- Measuring how the site is used, in aggregate, so we can improve it.
We do not use your lease or your analysis to advertise to you, and we do not build marketing profiles from your lease content.
4. What happens to your lease file
This is the part most people want to know, so here it is precisely.
- You upload the file. It goes into private, access-controlled storage scoped to your session — it is not publicly reachable.
- We send it to LlamaParse (LlamaIndex, Inc.) to extract the text, because leases arrive as scans and photographs as often as clean PDFs. This is a cloud service, not processing on your own device.
- The extracted text is sent to Google (Gemini API) to be analyzed against our legal database. If your upload has no readable text (a photo, a scanned PDF, or a PDF we can't open), we first send the file itself to Google for a quick automated check that it is a lease, before we pay to extract its text.
- The original file is deleted from our storage as soon as your analysis finishes, usually within a few minutes of upload, and also on every failure path. If an analysis is interrupted, a cleanup job deletes the file it left behind, normally within a few hours.
- The extracted text and the analysis stay in our database so your report works and an Action Kit can be built from it — but not indefinitely. Both are deleted automatically on the schedule in Section 5.
Under our agreements, neither LlamaParse nor Google uses your lease to train their models. They keep transient copies for a limited period for their own abuse monitoring and operations, under their own terms.
5. How long we keep things
Lease files: deleted when your analysis finishes, as described above.
The extracted text of your lease: deleted automatically 30 days after your scan. This is the full text of the document, so it is the part we hold for the shortest time. Nothing in your report depends on it — it is used to generate an Action Kit, which is why an Action Kit can only be purchased within those 30 days. After that you would need to re-scan.
Your report and Action Kit: deleted automatically 12 months after your scan — the flagged clauses, the summary, and the documents in your kit. That is roughly a lease term, which is how long a report stays useful. After that, links to it stop working.
Both of these run on an automated schedule; you do not have to ask. If you want your data gone sooner, email us and we will delete it, normally within 30 days.
Account and email records: kept while your account or subscription to notifications is active, and until you ask us to remove them.
Payment records: retained by us and by Stripe as long as needed for tax, accounting, and fraud-prevention obligations, typically several years. We cannot delete these on request while that obligation lasts.
Logs and analytics: retained on our providers' standard schedules. Backups are overwritten on a rolling basis, so deleted records can persist briefly in backup copies before they age out.
8. Your California rights (and Do Not Sell My Information)
If you are a California resident, the California Consumer Privacy Act as amended by the CPRA gives you the right to know what personal information we collect and why, to request a copy of it, to correct it, to delete it, and not to be discriminated against for exercising those rights.
Do Not Sell or Share My Personal Information. We have never sold personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of — you are already opted out by default. Our business is renters paying us for Action Kits, not advertisers paying us for you.
In the last 12 months we collected the categories described in Section 2: identifiers (email, IP address), commercial information (purchases), internet activity (site usage), and — in the documents you choose to upload — information about your tenancy and, potentially, sensitive information contained in your lease. We collected it from you directly and from the analytics tool in Section 6, for the purposes in Section 3, and disclosed it to the service providers in Section 7 (and, until October 2026, to Microsoft for the Clarity tool described in Section 6).
To make a request, email support@apartmentleasereview.com from the address associated with your account or analysis, or include the report link if you scanned without an account — we use that to verify the request is really yours. We respond within 45 days and may extend once where the law allows. An authorized agent may submit a request with written permission. We do not charge for this and we will not treat you differently for asking.
9. Rights in other states
Residents of Colorado, Connecticut, Virginia, Texas, Oregon, Montana, and other states with comprehensive privacy laws have comparable rights to access, correct, delete, and obtain a portable copy of their personal information, and to appeal a denied request. Use the same email address above; we honor these requests regardless of where you live, because it is simpler and fairer than checking your ZIP code first. Because we do not sell data, run targeted advertising, or make automated decisions that produce legal effects about you, the opt-out rights in those laws have nothing to attach to here.
10. Deleting your data
Email support@apartmentleasereview.com and ask. We will delete your analyses, extracted lease text, flags, Action Kits, and account, normally within 30 days. Your lease file itself is already gone: it was deleted when your analysis finished.
Two things survive deletion: payment records we are required to keep for tax and fraud-prevention purposes, and backup copies until they age out on their rolling schedule. Deleting your data means any report links you have will stop working, and we cannot recover them afterward.
11. Security
Traffic to the site is encrypted in transit with TLS. Lease storage is private and access-controlled, and our database cannot be queried from a browser at all: every record is read through our server, which shows a report only to the browser that created it, using a private session cookie. Knowing a report's link is not enough to open it. Payment card data never touches our servers.
No system is perfectly secure, and we cannot guarantee that ours is. If we discover a breach affecting your personal information, we will notify you and the relevant authorities as required by law. If you find a security problem, please tell us at support@apartmentleasereview.com.
12. Children
The Service is for adults 18 and over. We do not knowingly collect personal information from children under 13, or direct the Service to anyone under 18. If you believe a child has given us information, email us and we will delete it.
13. Changes to this policy
If we change how we handle your information, we will update this page and the date at the top. If a change is material — a new category of data, a new purpose, or a new kind of recipient — we will say so on the site before it takes effect. We will never start selling your personal information under a quietly revised policy; if that ever became the plan, we would ask for your consent first.
14. Contact
LeasePatrol — apartmentleasereview.com
support@apartmentleasereview.com