Privacy Policy

1. INFORMATION WE COLLECT

When you use FlagMyLease, we collect:

Account Information: Email address, name (if provided), and authentication data when you create an account.

Lease Document Content: When you upload or paste a lease document, we temporarily process the text content. This document may contain personal information such as names, addresses, and other identifying information.

Analysis Data: The results of your lease analysis, including risk scores, clause classifications, and generated explanations.

Payment Information: Payment is processed by Stripe. We do not store your credit card number. We retain your Stripe customer ID and transaction records.

Usage and Analytics Data: Pages visited, features used, technical data such as browser type and operating system, approximate geographic location (city or region level), referring website, and IP address. This data is collected through cookies and similar technologies, as described in Section 3.

Performance Data: Core Web Vitals metrics such as page load times, interactivity, and visual stability. This data is collected without cookies and does not include personal information.

2. HOW WE USE YOUR INFORMATION

We process your lease document solely to generate your lease analysis report. We do not sell, share, or use the content of your lease document for any purpose other than providing you with your analysis.

We use account, usage, and analytics data to provide and improve the Service, understand how visitors use FlagMyLease, communicate with you about your account, and ensure the security of the Service.

3. COOKIES AND TRACKING TECHNOLOGIES

FlagMyLease uses cookies and similar technologies for two purposes:

Essential Cookies (always active): Required for the Service to function. These include authentication cookies that keep you signed in and session cookies that maintain your activity during a visit. The Service cannot function without these.

Analytics Cookies (consent required): Used to understand how visitors interact with the Service. These cookies are set by Google Analytics 4, and only after you provide consent through our cookie banner. You can decline analytics cookies and the Service will function normally.

You can review or change your cookie preferences at any time using the "Cookie Preferences" link in the footer.

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as an opt-out request for analytics cookies and do not load Google Analytics for your session.

Performance monitoring (Vercel Speed Insights) does not use cookies and does not collect personal information.

4. AI PROCESSING DISCLOSURE

FlagMyLease uses artificial intelligence (AI) technology to analyze your lease document. Specifically:

• Your lease text is processed by an AI system (Anthropic Claude) that identifies and categorizes lease clauses.
• The AI compares your lease terms against a database of legal standards and state laws.
• Risk scores and classifications are generated by the AI system based on predefined thresholds.
• No human reviews your individual lease document unless you specifically request human review.

AI analysis may not identify all relevant provisions and may occasionally misclassify clauses. The analysis is informational and is not a substitute for professional legal review.

5. DATA RETENTION

We do not retain the full text of your lease document after your analysis is complete. We store only a cryptographic hash of the document for deduplication purposes.

Your analysis report is retained to allow you to access it. You may request deletion of your analysis report at any time by contacting support@flagmylease.com.

Account information is retained as long as your account is active.

Analytics data collected via Google Analytics 4 is retained according to Google's default retention period (currently 2 months for user-level and event-level data) unless we configure a different period.

6. DATA SHARING

We do not sell your personal information. We share data only as follows:

• Anthropic (AI processing): Your lease text is sent to Anthropic's Claude API for AI processing. Under Anthropic's API terms, data submitted through the API is not used to train Anthropic's AI models. Anthropic processes your lease text solely to generate your analysis and does not retain it after processing is complete. For more information, see Anthropic's API Data Usage Policy.
• Stripe (payment processing): Payment data is processed by Stripe under Stripe's privacy policy.
• Supabase (data hosting): Account and analysis data is stored in Supabase's hosted database.
• Vercel (web hosting and performance monitoring): The Service is hosted by Vercel. Vercel processes server logs and Core Web Vitals data to deliver the Service and monitor performance.
• Google (analytics, with consent only): If you consent to analytics cookies, usage data including pages visited, events, device information, and approximate geographic location is shared with Google Analytics 4. We do not share your name, email address, payment information, or lease content with Google. Google may use this data subject to its own privacy practices. We have configured Google Analytics 4 with advertising features and Google Signals disabled.
• Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.

7. YOUR RIGHTS UNDER CALIFORNIA LAW (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request a copy of your personal information in a portable format
• Request correction of inaccurate personal information
• Request deletion of your personal information
• Opt out of the sale or sharing of your personal information (we do not sell your personal information)
• Limit the use of sensitive personal information
• Not be discriminated against for exercising these rights

We honor the Global Privacy Control (GPC) signal as a valid opt-out request for analytics tracking.

To exercise these rights, contact support@flagmylease.com.

8. YOUR RIGHTS UNDER OTHER STATE PRIVACY LAWS

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states with comprehensive privacy laws have similar rights to those described in Section 7, including the right to access, correct, delete, and opt out of certain processing of their personal information. Several of these states recognize universal opt-out signals such as GPC; we honor GPC for residents of all such states.

To exercise these rights, contact support@flagmylease.com.

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

10. CHILDREN'S PRIVACY

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service.

12. CONTACT

For questions about this Privacy Policy or to exercise your privacy rights, contact: support@flagmylease.com