Privacy Policy

Parthiv Paul is responsible for personal information collected and held by LeaseGuard. Questions or complaints about our privacy practices may be directed to parthiv.paul5545@gmail.com.

We collect only the personal information necessary to provide the LeaseGuard service. Specifically:

• Lease PDF files you upload — processed to identify clauses and assess risk under Ontario law. These files may contain personal information including names, addresses, unit numbers, and financial terms.
• Email address — collected only if you create an account, used solely to authenticate you and associate your analyses with your account.
• IP address — collected automatically for rate-limiting (max 5 analyses per hour) and security purposes. An IP address may constitute personal information under PIPEDA if it can identify an individual; we do not attempt to identify individuals from IP addresses and do not link them to account records.

Cookies and session storage: We use a strictly necessary session cookie issued by our authentication provider (Supabase Auth) to maintain your logged-in session. We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party cookie-based tracking. The session cookie is deleted when you sign out or after a period of inactivity.

We do not collect payment information, government identification, or any information beyond what is described above.

We obtain your consent before processing your lease PDF. The upload form displays a clear consent notice that you must acknowledge before submitting. By ticking the consent checkbox, you confirm that you understand the PDF will be processed and temporarily stored.

If you create an account, you consent to us storing your email address and associating your analyses with your account. You may withdraw consent at any time by deleting your analyses and requesting account deletion (see Section 9).

Guest uploads (without an account) are processed with your in-session consent. No account is created and no email is stored.

We collect personal information only by fair and lawful means, and only to the extent necessary for the stated purposes. We do not read, store, or index the names, addresses, or identifying details within your lease PDF — the AI analysis processes clause text for legal risk patterns only.

Clause text stored in our database is used for risk scoring and benchmarking. Any personally identifying details within clause text (e.g., a name appearing in a lease clause) are incidental and are not extracted, indexed, or used for any other purpose.

Reports — automatically expire and are deleted after 90 days from the date of upload. This includes the full analysis, clause breakdown, and all associated data.

Lease PDF files — stored in encrypted cloud storage (Supabase Storage) for the duration of the 90-day report period. Deleted with the report or immediately upon your request.

Account email — retained for as long as your account exists. Deleted immediately upon account deletion.

Authenticated users can delete individual analyses at any time from the Dashboard. To request deletion of your account and all associated data, email parthiv.paul5545@gmail.com. We will complete the deletion within 30 days.

Your personal information is used exclusively to provide the LeaseGuard service. We do not:

• Sell, rent, or trade your personal information to any third party.
• Share your lease content with other users or organizations.
• Use your lease data to train AI models.
• Send marketing emails or share your email with mailing lists.

We may disclose information only if required by law (e.g., a valid court order) or to protect the safety of users or the public. We will notify you of any such disclosure to the extent permitted by law.

We do not modify the content of uploaded lease PDFs. The AI analysis may contain errors — it is educational information, not legal advice. If you believe our analysis contains a material error, you may use the feedback mechanism on the report page to flag it.

To operate LeaseGuard, we transfer personal information (including lease content) to the following third-party data processors located outside Canada. Under PIPEDA, we remain accountable for information transferred to these processors and require them to provide comparable protection.

• Anthropic, Inc. (United States) — your lease document text is transmitted to Anthropic's Claude API for AI analysis. Anthropic's commercial API terms prohibit using customer data to train AI models. Privacy policy: anthropic.com/privacy.
• Google LLC / Gemini API (United States) — clause text is transmitted to Google's Gemini API to generate embeddings for semantic legal search. Privacy policy: policies.google.com/privacy.
• Supabase, Inc. (United States) — your uploaded PDF and analysis results are stored in Supabase's database and encrypted file storage. Supabase is SOC 2 Type II certified.
• Vercel, Inc. (United States) — application hosting and serverless functions. All web requests, including file uploads, are routed through Vercel's infrastructure.

By using LeaseGuard, you consent to your personal information being transferred to and processed in the United States by these providers, subject to US federal and state law including the US Cloud Act. If you do not consent to cross-border transfer, do not use LeaseGuard.

We use the following technical safeguards to protect your information:

• TLS encryption for all data in transit between your browser and our servers.
• Supabase (our database and storage provider) encrypts data at rest using AES-256.
• Lease PDFs are stored in a private Supabase Storage bucket — not publicly accessible. Access requires a time-limited signed URL (valid 1 hour).
• Database access is restricted to service-role credentials held server-side. No client-side access to raw data.
• Rate limiting (5 analyses per hour per IP) reduces abuse risk.

In the event of a breach of security involving personal information that creates a real risk of significant harm to individuals, we will:

• Notify the Office of the Privacy Commissioner of Canada as soon as feasible after determining a reportable breach has occurred.
• Notify affected individuals directly as soon as feasible, with information about the breach and steps they can take to protect themselves.
• Maintain a record of every breach of security safeguards for a minimum of 24 months.

To report a suspected security vulnerability or data incident, contact us immediately at parthiv.paul5545@gmail.com.

Under PIPEDA, you have the right to:

• Access the personal information we hold about you.
• Challenge the accuracy of your personal information.
• Request deletion of your personal information.

To delete a specific analysis: Sign in to your Dashboard and click the delete button on any lease row.

To delete your account and all data: Email parthiv.paul5545@gmail.com from the email address associated with your account, with the subject line “Delete my account”. We will confirm deletion within 30 days.

Guest analyses: If you uploaded without an account, your report will auto-delete after 90 days. For earlier deletion, email us with your report URL.

If you have a complaint about our privacy practices, please contact us first at parthiv.paul5545@gmail.com. We will respond within 30 days.

If you are not satisfied with our response, you may escalate to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

We may update this policy from time to time. Material changes will be noted at the top of this page with a new “Last updated” date. Continued use of LeaseGuard after a change constitutes acceptance of the updated policy.