Privacy Policy

This policy covers leasetraps.com and the LeaseTraps web application. Our iOS and Android apps are covered by a separate policy, because they handle data differently.

Who we are. LeaseTraps is operated by AI Practica Foundry LLC ("we", "us"), United States. For privacy questions, or to exercise any right described below, contact admin@practicafoundry.com.

2. What we collect, and why

2.1 Documents you upload

When you upload a lease, contract, or image of one, the raw bytes are held in server memory while we analyze it. They are base64 encoded and sent to our AI providers. We do not write raw uploaded file bytes to our own database.

We do retain, for each scan:

• the original filename
• scan metadata such as the selected document category, scan type, status, and timestamps

2.2 Your analysis results

We store the findings: a risk score, category and severity labels, our plain-English explanation, any cost estimates, and — importantly — a short verbatim excerpt of the clause each finding refers to.

We want to be explicit about this because it is the least obvious thing in this policy: your stored results contain fragments of your lease. A finding that says "the deposit clause is unfair" is useless without showing the clause. These reports currently remain in your account database. You may email us to request deletion.

2.3 Your account

Email address, display name, profile image (if provided), and an account identifier from our authentication provider. An account is required for every scan.

2.4 Payments

Payments are processed by Stripe. Card numbers never reach our servers — we never see or store them. We store a Stripe customer identifier, your plan, your billing period, purchase and credit records, and whether payments succeeded or failed.

2.5 Technical and usage data

• IP address — used for rate limiting, abuse prevention, and security.
• Usage events — which plan features you consumed and when, so we can meter your allowance accurately.

2.6 Cookies

We use a small number of strictly necessary cookies and no advertising or analytics trackers. These include authentication cookies managed by Clerk and an app-signed cookie used for session continuity and security.

3. How long we keep things

We retain your account information, scan history, and analysis results (which include excerpts of your documents) for as long as your account is active, or as required for legal, tax, and accounting purposes. We do not enforce fixed period automatic purges for reports. You may request account or data deletion by contacting us.

4. Who we share data with

We do not sell personal data. We do not share it for cross-context behavioural advertising. We use the following subprocessors:

• Replit, Inc.: Application hosting, database, and proxy routing.
• Clerk (managed by Replit): Authentication and user identity.
• Google LLC (Gemini API) (through Replit AI Integrations): AI analysis of your document. Your document content is sent to them for processing.
• Stripe, Inc.: Payment processing.

We may also disclose data if legally compelled by valid process, or to protect our rights or someone's safety. If we are acquired or merge, data may transfer to the successor entity.

5. Personal data inside your documents

Leases usually contain other people's personal data — a landlord's name and address, a property manager, sometimes co-tenants. Occasionally they contain sensitive details like bank account or identity numbers.

Please redact what you don't need analyzed. Bank account numbers, social security or national insurance numbers, and payment card details are not relevant to a lease risk analysis. Black them out before uploading.

By uploading a document, you confirm that you have the right to submit it for analysis. We process the document content at your direction to provide the Service.

6. Security

We employ technical and organizational measures to protect your data, including TLS encryption in transit. However, no system is perfectly secure, and we cannot guarantee absolute security of your information.

7. U.S. State Privacy Rights

Depending on where you live (such as California, Colorado, Connecticut, Virginia, Utah, Texas, or Oregon), you may have the right to access, correct, delete, or obtain a copy of your personal data, and to opt out of the sale or sharing of your personal data for targeted advertising.

We do not sell or share personal information for targeted advertising.

To make a request regarding your data rights, email admin@practicafoundry.com. We will not discriminate against you for exercising these rights. We may need to verify your identity by confirming control of your account email.

8. Children

LeaseTraps is not intended for anyone under 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.

9. Changes to this policy

We will post any updated policy at this URL and change the "Last updated" date. Continued use of the Service after changes take effect indicates your acceptance of the revised policy.