Security & Data Handling
This page describes exactly how Leasella processes your documents. Where possible, the values below — like the retention mode — are read from our own live configuration (/api/v1/public/trust) rather than written as fixed marketing copy.
We couldn't load the live configuration just now — the values below reflect our documented policy.
1. What we send to our AI provider
Leasella uses a third-party AI provider (currently openai) to read your documents. Two kinds of content leave our infrastructure for processing:
- Extracted text — the text layer of your document, used for classification, structured-field extraction, and question answering.
- Page images — for scanned or low-text documents, page renders are sent to a vision-capable model as an OCR fallback.
2. Text masking and image masking are different
Text masking: before any extracted text is sent to the AI provider, we mask high-sensitivity patterns — card-like numbers, Social Security numbers, and bank routing numbers are replaced with masked placeholders (card numbers keep their last 4 digits for classification). This runs on every text-based request.
Image masking: Page images sent for OCR are not currently masked. If a scanned page shows a visible card, SSN, or account number, that number is visible to the AI provider — treat page-image OCR the same way you'd treat emailing a scan to a vendor: assume anything visible on the page is visible to the processor.
3. Data retention: Standard retention (up to 30 days)
Our AI provider's standard tier may retain request and response payloads for up to 30 days for abuse monitoring, then deletes them. This is the truthful default unless a Zero Data Retention agreement is confirmed below.
4. Uploaded content is not used for training
Your document content is never used to train the AI provider's models or ours. This is a product and contractual commitment, independent of the retention mode above.
5. Encryption & tenant isolation
- All data is encrypted in transit (TLS 1.2+) and at rest.
- Every database query is scoped by customer ID — no customer can read another customer's data.
- Documents are stored in isolated, access-controlled object storage.
6. Deletion timeline & backups
Requesting account deletion opens a brief cancellation window, after which the request is processed. We complete deletion of your personal data and documents within 30 days of your confirmed request. Because we run periodic backups, some data may persist in backup storage for up to 90 days after that before it's fully purged.
7. Not legal, accounting, or tax advice
Leasella extracts information and generates summaries using AI. It is a tool to help you keep track of your documents — it is not legal, accounting, or tax advice, and it is not a substitute for a qualified professional. Always verify critical information against your original documents before acting on it.
8. Contact
Questions about security or data handling? Contact us at [email protected]. See also our Privacy Policy and Terms of Service.