Privacy Policy

Last updated: October 17, 2026

1. Who we are

RedFlagLease ("we", "us") operates this website and the lease-scanning service. You can reach us through our contact page. We designed the service to work without an account.

2. What we collect

  • The lease you submit (file, photos or pasted text) and the state you select. Uploads are anonymous: no account or name is required.
  • Your email address, only if you choose to give it (for example to receive your report link or to contact us).
  • The report we generate from your lease.
  • Basic technical data such as IP address, browser type and pages visited, used for security, rate limiting and analytics. Analytics cookies are only set if you accept them.
  • Payment details are entered with Stripe; we never see or store your card number.

3. How we use it

  • To analyze your lease and produce your report.
  • To take payment, unlock your report and send receipts or your report link.
  • To prevent abuse, fix bugs and improve the service.

4. AI processing by a third party

To analyze your lease, its text (or the images of its pages) is sent to a third-party AI provider that processes it on our behalf. We send only what is needed to produce your report. We do not sell your lease or share it with your landlord or property manager.

5. Retention and deletion

The text and files of your lease are deleted after 30 days. The generated report is kept so that your report link keeps working. You can ask us to delete your report and email address at any time through the contact page.

6. Sharing

We share data only with service providers needed to run the product: the AI provider described above, Stripe (payments), our hosting and email providers, and analytics tools if you consent. We may disclose information if required by law.

7. Your choices

You can use the service without giving an email, decline analytics cookies, and request access to or deletion of your data. Depending on where you live (for example California), you may have additional privacy rights; contact us to exercise them.

8. Security

Data is transmitted over HTTPS and access is limited. No online service is perfectly secure, so avoid uploading information you do not want processed; you may redact personal details such as account numbers before uploading.

9. Children

The service is not directed to children under 13 and we do not knowingly collect their data.

10. Changes

We may update this policy and will change the date above when we do.