Privacy Policy

1. Who this policy covers

MyLeaseGenie is a lease-management tool used by property managers and landlords (our "customers") to run application, signing, and renewal workflows for their rental units. This policy applies to:

• Property managers / landlords who create an account with us.
• Tenants and applicants whose information a property manager submits or invites into the platform.
• Visitors to myleasegenie.com and related pages.

For tenant and applicant data, the property manager is the party who decides what data is collected and why (the "controller" in privacy-law terms). MyLeaseGenie processes that data on their behalf.

2. Information we collect

Account information

When a property manager signs up we collect name, email address, company name, and (optionally) a company logo, brand colors, and public application URL.

Authentication information

We store email + password credentials (passwords are hashed; we never see the plaintext), and — if enabled — two-factor authentication (TOTP) enrollment data. If you sign in with Google, we receive your name, email, and Google account identifier. We check new passwords against the HaveIBeenPwned breach database and reject known-compromised passwords.

Property, lease, and tenant data

Property managers upload properties, units, lease templates, tenant records, rental applications, e-signatures, renewal offers, and related documents. Applicants may submit personal details (name, contact info, employment, references, ID documents) via public application links.

Payment information

Subscription payments and application fees are processed by Stripe. We do not store full card numbers on our servers; Stripe returns non-sensitive metadata (last-four digits, subscription status, price tier) which we retain.

Email and inbox content

If you enable the inbound-email inbox feature, we receive and store messages sent to your MyLeaseGenie address along with attachments, sender addresses, and headers.

Automatic technical information

When you use the app we automatically log IP address, browser type, pages requested, timestamps, and error diagnostics. These are used for security, debugging, and rate limiting.

3. How we use information

• Operate the service — sign-in, workflows, e-signing, renewals, notifications.
• Send transactional emails (account confirmation, password reset, invites, lease notifications) from our verified sender domain.
• Process subscription and application-fee payments via Stripe.
• Detect abuse, prevent unauthorized access, and enforce rate limits.
• Respond to support requests you send us.
• Improve the product (aggregate usage patterns; we do not sell your data).

We do not sell personal information, and we do not use it for cross-context behavioral advertising.

4. Service providers (subprocessors)

To run MyLeaseGenie we share data with the following processors, each of whom is contractually required to safeguard it:

We do not share personal information with any other third parties except when required by law, to enforce our terms, or to protect the rights, property, or safety of MyLeaseGenie, our customers, or others.

5. How we protect information

• Data is encrypted in transit (HTTPS/TLS) and at rest by our hosting provider.
• Row-level security policies scope every database read to the account that owns the data.
• Two-factor authentication is available for every account in Settings → Security.
• Email confirmation is required for new sign-ups.
• Passwords are hashed and checked against known-breached password lists.
• Administrative roles are stored in a separate table that end users cannot write to.

No online service can guarantee perfect security. If you believe your account has been compromised, contact us immediately at hello@myleasegenie.com.

6. Data retention

We keep account and property data for as long as your account is active. When you delete your account, we remove your personal data within 30 days, except where we must retain limited records for legal, tax, or fraud-prevention purposes (for example, Stripe payment records). Backups are purged on our provider's rolling schedule (typically within 30 days).

7. Your choices and rights

Regardless of where you live, you can:

• Update your account information in Settings.
• Enable or disable two-factor authentication at any time.
• Request a copy of the personal information we hold about you.
• Request that we correct or delete your personal information.
• Withdraw consent to receive non-essential email.

To make a request, email hello@myleasegenie.com. We will respond within a reasonable timeframe and will verify your identity before acting.

If you are an applicant or tenant whose data was submitted by a property manager, direct your request to that property manager first — they control your record. If they cannot fulfill your request, contact us and we will assist.

8. Children

MyLeaseGenie is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

9. International users

MyLeaseGenie is operated from the United States and our providers store data in the United States. By using the service you understand that your information will be processed in the United States, which may have different data-protection laws than your country.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Effective" date at the top and, for material changes, notify account owners by email.

11. Contact

Questions or requests: hello@myleasegenie.com.