Privacy Policy
Last updated: February 2026
Leasella is operated by Gedik Management LLC ("we", "us", or "our"). This policy describes how we collect, use, and protect your information when you use the Service.
1. Information We Collect
When you create an account, we collect your name, email address, and password (stored as a salted hash). When you upload documents, we store the files and any data extracted from them (text, entities, metadata) to provide our services.
2. How We Use Your Information
- To provide, maintain, and improve Leasella's lease intelligence services
- To extract structured data from your documents using AI models
- To send you service-related notifications (lease expirations, maintenance updates)
- To process payments through our payment processor (Stripe)
3. Document Data
Your documents and extracted data belong to you. We process documents solely to provide our services. We do not sell, share, or use your document content for training AI models. Documents are stored with customer-level isolation — no other user can access your data.
4. AI Processing
We use a third-party AI provider to extract information from your documents — this includes extracted text and, for scanned or low-text pages, page image renders. Your document content is never used to train the provider's models or ours. Whether the provider retains request data, and for how long, depends on our current contract with them; we disclose the exact, live-configured retention mode (rather than assert a fixed claim here) on our Security page.
5. Data Storage & Security
- All data is encrypted in transit (TLS 1.2+) and at rest
- Documents are stored in isolated, access-controlled storage
- Database access is restricted by customer ID across all queries
- We conduct regular security reviews of our infrastructure
6. Data Retention
We retain your data for as long as your account is active. If you request deletion of your account, we complete deletion of your personal data and documents within 30 days of your confirmed request. Some data may be retained in backups for up to 90 days after that. See our Security page for how this is verified against our live configuration.
7. Your Rights
You have the right to:
- Access, correct, or delete your personal data
- Download your documents and extracted data
- Delete your account and all associated data
- Opt out of non-essential communications
8. Third-Party Services
We use the following third-party services:
- Stripe — payment processing (see Stripe's privacy policy)
- An AI provider — document processing. See our Security page for the currently configured provider and retention mode; content is never used to train its models.
9. Cookies
We use essential cookies for authentication (JWT tokens stored in secure, httpOnly cookies). We do not use advertising or tracking cookies.
10. Contact
Data controller: Gedik Management LLC. For privacy questions or data requests, contact us at [email protected].