Privacy Policy

This Privacy Policy explains how [Company legal name] ("Leasvo," "we," "us") collects, uses, and shares information when you use the Leasvo website, apps, and services (the "Service"). Lease documents can be sensitive, so we try to collect only what the Service needs and to keep it private.

The short version

• We use your information to give you lease exit estimates, and for nothing unrelated.
• We don't sell your personal information, and we don't use it for advertising.
• Your documents are stored privately and are only shown to you.
• We use one cookie, to keep you signed in. There are no advertising or analytics cookies, and our emails don't contain tracking pixels.

What we collect

Account information: your email address, your name if you give it, and your password, which we store only as a secure one-way hash.

Lease case details: what you enter about your vehicle and lease, such as the year, make, model, VIN, leasing company, state, ZIP code, monthly payment, mileage, lease dates, and what you think the car is worth.

Documents you upload: lease contracts, payoff quotes, dealer and buyer offers, and photos. These can include personal information such as your name, address, account numbers, and signatures, and the details we read from them. When you upload from a phone, we also record when the file was captured and how (for example, camera or file picker).

Payments: which plan you bought, the amount, its status, and reference IDs from Stripe. Stripe collects your card or bank details directly; we never see or store your full card number.

Technical information: a session cookie that keeps you signed in, and the records our servers and hosting provider keep to run and secure the Service, such as IP addresses, request times, and error logs.

How we use it

• To provide the Service: read your documents, calculate estimates, write report summaries, and show you your results.
• To process payments and send receipts.
• To send emails about your account and cases, such as a welcome email, password reset links, "your report is ready" notices, and a one-time reminder to upload your lease. We don't send marketing email [unless you opt in].
• To answer your questions and support requests.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To meet legal obligations.

Who helps us process it

We share information only with service providers that help us run Leasvo, only for that purpose, and under contracts that limit how they can use it:

• Supabase hosts our database and stores your documents in private storage.
• Render hosts our web servers.
• OpenAI reads the documents you upload, writes plain-English report summaries, and answers questions in the in-app assistant. We send it the documents and the calculated numbers it needs, and the assistant conversation with any pictures you add to it. We ask OpenAI not to store our requests, and OpenAI doesn't use data sent through its API to train its models by default. OpenAI may keep data for a limited time to monitor for abuse, under its own policies.
• Stripe processes payments.
• Amazon Web Services (Amazon SES) delivers our emails.
• Zoho Mail hosts our support inbox, so it holds any emails you send us.

We may also share information if the law requires it, to protect the rights, safety, or property of Leasvo, our users, or others, or as part of a merger, acquisition, or sale of assets, in which case this policy will continue to apply to your information.

We don't share your information with leasing companies, dealers, or buyers. If you send them a report or script from Leasvo, that's your choice.

How long we keep it

Assistant conversations: we don't store what you type or the pictures you add in the assistant. The conversation stays in your browser tab until you close it, and each message is sent to OpenAI to answer it.

Uploaded documents: we delete the files you upload 90 days after a lease case's last activity (its newest upload, report, or payment). We keep what we read from them and your reports, so you can still see your results; the original files are gone. You can also remove a document from a lease case at any time, which deletes the file right away.

Your account: we keep your account and lease cases until you delete them. You can delete your account at any time from your account page. That permanently deletes your lease cases, documents, and reports, and signs you out everywhere. To delete a single lease case, email support@leasvo.com.

Other records: sign-in sessions expire after 30 days and password reset links after 1 hour, and both are then deleted. To slow down password guessing we count recent sign-in attempts, keyed by a one-way hash of the email or IP address, and delete the counts within a day. We keep payment records, without your account, as long as tax and accounting laws require. Backups are kept for a limited time [backup retention period, per the Supabase plan].

How we protect it

Information is encrypted in transit. Documents are stored privately and are never given public links; uploads from our app go to storage through short-lived signed links. Every request is checked against the signed-in account, so one person can't see another's cases. Passwords are stored as one-way hashes. No system is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.

Your choices and rights

You can see your lease case details in the Service and delete your account from your account page. You can also ask us to give you a copy of your information, correct it, or delete it by emailing support@leasvo.com. We'll verify the request comes from you and answer within the time the law requires. We won't treat you differently for making a request.

[State-specific rights, such as those under the California Consumer Privacy Act, to be added by counsel.]

Children

Leasvo is for adults. We don't knowingly collect information from anyone under 18. If you think a child has given us information, email us and we'll delete it.

Changes to this policy

We may update this policy. If a change is significant, we'll tell you by email or in the Service before it takes effect.

Contact

Questions or requests? Email support@leasvo.com or write to [Company legal name], [mailing address].