Privacy Policy

1. Introduction

Lease Easy AI ("Company," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our lease and fixed asset management software service ("Service").

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, company name, password, and billing information when you create an account
• Financial Data: Lease agreements, payment schedules, asset information, depreciation data, and related financial records you upload or enter
• Payment Information: Credit card numbers, billing addresses, and payment history (processed securely through Stripe)
• Communications: Emails, support tickets, and other correspondence you send to us
• Uploaded Documents: PDF files, images, and other documents you upload for AI processing

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns
• Device Information: IP address, browser type, operating system, device identifiers
• Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience
• Log Data: Server logs that record access times, pages viewed, and system activity

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and send related information, including purchase confirmations and invoices
• Create and manage your account
• Provide AI-powered document scanning and data extraction services
• Calculate depreciation, amortization, and compliance metrics
• Generate reports, journal entries, and financial statements
• Send administrative information, such as updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues, fraud, and security concerns
• Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share data with third-party vendors who perform services on our behalf:

• Stripe: Payment processing (PCI-DSS compliant)
• Amazon Web Services (AWS): Cloud hosting and data storage
• AI/ML Providers: Document processing and optical character recognition
• Analytics Providers: To help us understand Service usage

4.2 Legal Requirements

We may disclose your information if required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls limit who can view your data
• Infrastructure: Our systems are hosted on AWS with SOC 2 Type II compliance
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular automated backups with point-in-time recovery
• Payment Security: We never store complete credit card numbers; all payment data is handled by Stripe (PCI-DSS Level 1)

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Financial Records: Retained for 7 years to comply with accounting and tax regulations
• Usage Logs: Retained for 90 days for security and performance analysis
• Backup Data: Retained for 30 days in our backup systems

You may request deletion of your data by contacting us at bkocan15@gmail.com. Some data may be retained as required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access your data at any time through our Data Management features. You can export your data in standard formats (CSV, Excel, JSON).

7.2 Correction

You can update or correct your account information at any time through your account settings.

7.3 Deletion

You can request deletion of your account and associated data. Note that we may retain certain information as required by law or for legitimate business purposes.

7.4 Opt-Out

You can opt out of marketing communications by clicking "unsubscribe" in any email or updating your notification preferences.

7.5 Cookie Preferences

You can manage cookie preferences through your browser settings. Disabling cookies may affect Service functionality.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at bkocan15@gmail.com.

9. International Data Transfers

Our Service is hosted in the United States. If you access our Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using our Service, you consent to such transfer.

For users in the European Economic Area (EEA), we rely on Standard Contractual Clauses approved by the European Commission for international data transfers.

10. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at bkocan15@gmail.com, and we will take steps to delete such information.

11. Third-Party Links

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

We will respond to your inquiry within 30 days.