PRIVACY POLICY
Lease Velocity LLC
Notice: This document was drafted with AI assistance and has not been reviewed by a licensed attorney. The Company recommends obtaining a Georgia-licensed attorney one-shot review prior to executing or publishing this document.
Lease Velocity LLC (“Lease Velocity,” “we,” “us,” or “our”) operates a software-as-a-service platform for residential property managers, including a customer-facing dashboard, public property marketing websites (at “/p/{slug}” paths and at custom domains assigned to our customers’ properties), and a resident portal (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with the Service and our website at leasevelocity.co (the “Site”).
This Privacy Policy applies to personal information we process in our own right, including information about visitors to the Site, property managers who sign up to use the Service (our “Customers”), and prospective applicants and residents who interact with property marketing sites or resident portals operated through the Service. When we process personal information on behalf of a Customer (for example, information that the Customer collects from its applicants or residents through the Service), the Customer is the controller of that information, and our processing is governed by our Data Processing Addendum. In those cases, the applicable Customer’s privacy notice governs the relationship between the Customer and its applicants or residents.
The Service is intended for, and provided to, customers operating residential rental properties located in the United States. It is not directed to individuals located outside the United States, and we do not knowingly collect personal information from individuals outside the United States.
1. WHO WE ARE; HOW TO CONTACT US
Lease Velocity LLC is a Georgia limited liability company with its principal place of business at 3500 Lenox Rd NE, Suite 1500, Atlanta, GA 30326. Questions about this Privacy Policy or our privacy practices may be sent to hello@leasevelocity.co or to the postal address above, attention: Privacy.
2. PERSONAL INFORMATION WE COLLECT
The categories of personal information we collect depend on how you interact with us and the Service. We collect personal information directly from you, automatically through your use of the Service or the Site, and from third parties as described below.
2.1 Information We Collect from Site Visitors and Prospective Customers.
-
Contact and Lead Information. Name, business name, email address, phone number, role, property details, and any other information you submit through contact forms, demo requests, or signup flows on the Site.
-
Marketing Interaction Data. Information about your interactions with our marketing emails, blog posts, and landing pages, including click events and email open events.
2.2 Information We Collect from Customers (Property Managers).
-
Account Information. Name, business or organization name, email address, password (stored as a hashed, salted value), phone number, and account preferences.
-
Multi-Factor Authentication Information. If you enable two-factor authentication, we store an encrypted TOTP secret and (if you opt in) a device-trust fingerprint and IP-class-B identifier.
-
Property and Listing Information. Property addresses, unit information, amenities, pricing, photographs, descriptions, and other content you submit through the property intake wizard or otherwise provide to be displayed on your property marketing sites.
-
Payment Account Information. Identifiers and metadata associated with your Stripe and Stripe Connect accounts (such as account IDs, subscription IDs, and the last four digits of payment cards or bank accounts). We do not store full payment card numbers or full bank account numbers; those are handled by Stripe.
-
Service Usage and Communications. Records of your activity in the Service, support inquiries, and other communications with us.
2.3 Information We Collect from Applicants and Residents Through the Service.
When applicants and residents interact with a Customer’s property marketing site or resident portal, we collect personal information on the Customer’s behalf as a processor. The categories include:
-
Applicant Information. Name, contact information, employment and income information, rental history, references, co-applicant and guarantor information, pet information, and any documents an applicant submits as part of an application (such as paystubs, offer letters, W-2s, bank statements, or tax returns).
-
Identity-Verification, Background-Check, and Income-Verification Information. Where a Customer uses these tools, certain sensitive categories of information (such as social security numbers, dates of birth, driver’s license numbers, government-issued ID images, and selfie images) are collected by, and processed at, specialized third-party vendors (such as Stripe Identity, Checkr, and Plaid). We do not store this information; we store only opaque vendor reference identifiers, timestamps, status enums, and where applicable, a vendor-hosted deep link to the underlying record.
-
Resident Information. Name, contact information, preferred name and language, lease details, payment history, maintenance request submissions (including photographs), vehicle and pet registrations, guest records, emergency contact information, move-in and move-out notices, and inspection records.
-
Payment Information. Records of rent payments, security deposits, application fees, late fees, and other property charges, including transaction IDs, amounts, and the last four digits of the payment instrument. Full payment card or bank account information is handled by Stripe.
-
Communications. Records of communications sent or received through the Service, including email send and event logs, SMS metadata, and operational signals from voice-agent calls. We do not retain voice-call recordings or transcripts on our servers; voice recordings, where created, are retained by our voice-agent vendor (Vapi) and accessed via deep link only. Where voice operational signals are persisted, they are first redacted for personal information.
2.4 Information We Collect Automatically.
-
Device and Connection Information. IP address (often truncated for analytics purposes), browser type and version, operating system, device identifiers, referring URL, and language preferences.
-
Usage Information. Pages viewed, features used, links clicked, search queries within the Service, timestamps, lead-source parameters (such as UTM tags, gclid, fbclid), and route-level performance metrics.
-
Cookies and Similar Technologies. We and our service providers use cookies and similar technologies to maintain your session, remember your preferences, prevent fraud and bot abuse, measure performance, and analyze usage. See Section 7 for more detail.
-
Error and Diagnostic Data. When an error occurs in the Service, we may collect diagnostic information through our error-tracking provider (Sentry), including a stack trace, the URL where the error occurred, and contextual technical details.
2.5 Information We Collect from Third Parties.
-
Payment Processors. Stripe and Stripe Connect provide us with metadata about subscription billing, identity-verification sessions, and payments processed through the Service.
-
Screening Vendors. Where a Customer uses identity-verification, background-check, or income-verification tools, the applicable vendor (Stripe Identity, Checkr, or Plaid) provides us with status and reference-identifier information.
-
Communication Providers. Resend (email), Twilio (voice and SMS), and Vapi (voice agent) provide us with delivery, bounce, and engagement signals associated with communications sent through the Service.
-
Mapping Providers. Mapbox and Google Maps may provide us with geocoding information for property addresses.
3. HOW WE USE PERSONAL INFORMATION
We use personal information for the following purposes:
-
Provide and Operate the Service. To create and manage accounts, deliver the features of the Service, generate property marketing sites, process applications, facilitate communications, route payments, and respond to support requests.
-
Account Security and Fraud Prevention. To authenticate users, enforce multi-factor authentication, detect and prevent fraudulent activity, enforce rate limits and bot protection, and protect the integrity of the Service.
-
Billing and Payments. To bill Customers for subscriptions and Add-Ons, process platform fees on resident-facing payments through Stripe Connect, collect past-due amounts, and maintain accurate ledgers.
-
Improve the Service. To analyze usage, debug and resolve errors, develop new features, train internal models on aggregated and de-identified data, and otherwise improve the Service. We do not train third-party large language models on personal information, and we do not send sensitive personal information (such as social security numbers, driver’s license numbers, dates of birth, or credit scores) to any large language model.
-
Customer Communications. To send transactional messages (such as account confirmations, password resets, billing receipts, and security notices), service-related notices (such as outage notifications and material changes to our terms), and, where permitted, marketing communications. You may unsubscribe from marketing communications at any time using the link in any marketing email.
-
Legal Compliance. To comply with applicable laws, respond to valid legal process, enforce our agreements, protect our rights and the rights of others, and address security incidents.
-
With Your Consent. For any other purpose disclosed at the time of collection or with your consent.
4. HOW WE SHARE PERSONAL INFORMATION
We share personal information only as described in this Privacy Policy. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act and similar U.S. state privacy laws. If our practices change, we will update this Privacy Policy and provide any opt-out mechanism required by applicable law.
4.1 Service Providers and Subprocessors.
We share personal information with third-party service providers that process information on our behalf to deliver the Service. A current list of these providers, the data they process, and their purpose is maintained in our Data Processing Addendum. All of our subprocessors are bound by written agreements that require them to protect personal information and to use it only for the purposes for which it was disclosed.
4.2 Customers (Property Managers).
Where you submit information through a Customer’s property marketing site, application flow, or resident portal, that information is disclosed to the applicable Customer for the Customer’s own use in marketing the property, evaluating applications, and managing the tenancy. The Customer is the controller of that information, and its own privacy notice governs how it uses the information after it receives it.
4.3 Screening Vendors.
Where you submit information for identity verification, background checks, or income verification, that information is disclosed to the applicable third-party vendor (such as Stripe Identity, Checkr, or Plaid) to perform the verification. These vendors are independent controllers of the sensitive information you submit to them, and their own privacy notices govern their handling of that information.
4.4 Payment Processors.
Payment information (including card and bank account information) is submitted directly to Stripe through Stripe’s hosted forms or embedded elements. We never receive or store full payment card or bank account numbers. Stripe’s privacy practices are described in Stripe’s privacy notice.
4.5 Legal Disclosures.
We may disclose personal information when we believe in good faith that disclosure is necessary to (a) comply with applicable law, a court order, or other valid legal process; (b) enforce our terms of service or other agreements; (c) protect the rights, property, or safety of Lease Velocity LLC, our Customers, or others; or (d) detect, prevent, or address fraud, security, or technical issues.
4.6 Business Transfers.
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, personal information may be transferred as part of that transaction. We will notify affected individuals as required by applicable law.
4.7 With Your Consent.
We may share personal information for any other purpose disclosed to you at the time of collection or with your consent.
5. SENSITIVE INFORMATION; FIELDS WE DO NOT STORE
We have designed the Service to minimize our handling of sensitive personal information. The following categories of information are routed directly to specialized third-party vendors through hosted flows and are not stored on our servers in plaintext: full social security numbers, full driver’s license numbers, dates of birth, credit scores, full payment card numbers, full bank account numbers, government-issued identification images, selfie or biometric images, and raw background-check or credit-report content. For these categories, we store only opaque vendor reference identifiers, status enums, and timestamps.
Customers are not permitted to submit, store, or otherwise process the above categories of information through the Service except through the designated vendor-hosted flows. Customers are also not permitted to submit protected health information regulated under HIPAA, education records regulated under FERPA, or information about a child under thirteen (13) years of age. See Section 9 regarding children.
6. HOW LONG WE KEEP PERSONAL INFORMATION
We retain personal information only for as long as is necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal and contractual obligations, to resolve disputes, and to enforce our agreements. We follow a retention schedule by record type with secure disposal at the end of each period; period-by-period detail for the main record types is published in our Record Retention Schedule. Specific retention practices include:
-
Customer Account Data. Retained for the duration of the Customer’s active account, and for a reasonable period thereafter to support audits, dispute resolution, and ledger integrity. Accounts that are deleted are processed through a two-phase deletion: a soft-delete window during which the account may be restored, followed by hard deletion.
-
Application Data. Retained for seven (7) years from the date of submission, after which the application payload is purged and only a summary audit record is preserved for compliance purposes. This retention period reflects fair-housing and recordkeeping considerations.
-
Payment and Ledger Data. Retained on an indefinite basis to maintain accurate financial records, including for tax, audit, and dispute-resolution purposes.
-
Communications Logs. Email send logs and event logs are retained on a rolling basis to support deliverability, abuse prevention, and Customer audit needs.
-
Security and Audit Logs. Authentication events, access logs, and security-relevant audit-log entries are retained for a period appropriate to their security purpose.
-
Aggregated and De-Identified Data. May be retained indefinitely, as it is not associated with any identifiable individual.
7. COOKIES AND SIMILAR TECHNOLOGIES
7.1 What We Use.
-
Strictly Necessary Cookies. Required to operate the Service, including session cookies, authentication cookies, multi-factor authentication trust-device cookies, and security cookies for bot-fingerprint protection. The Service cannot function without these.
-
Performance and Analytics Cookies and Technologies. Used to measure traffic, understand usage patterns, and diagnose errors. We currently use Vercel Web Analytics and Sentry for these purposes.
-
Preference Cookies. Remember your preferences (such as language, dismissed onboarding tips, and feature toggles) so you do not have to set them on every visit.
We do not currently use advertising or cross-context behavioral advertising cookies, and we do not maintain pixels for third-party advertising networks. If this changes in the future, we will update this Privacy Policy and provide any opt-out mechanism required by applicable law.
7.2 Managing Cookies.
You can control cookies through your browser settings, which typically allow you to refuse cookies or notify you when a cookie is being set. If you disable strictly necessary cookies, parts of the Service will not function. You may also adjust your performance and analytics preferences at any time through the cookie banner displayed on the Site, which includes a “Customize” option for per-category control.
7.3 Do Not Track Signals.
Some browsers offer a “Do Not Track” (“DNT”) signal. Where we detect a DNT signal at first page load, we automatically decline non-essential cookies (analytics and marketing) for your session and suppress the cookie banner. Strictly necessary cookies continue to load so the Service can function.
8. YOUR PRIVACY CHOICES AND RIGHTS
8.1 General Choices.
-
Access and Update. Customers may access and update their account information directly within the Service. Residents and applicants may access and update certain information through the resident portal or by contacting the applicable Customer.
-
Marketing Communications. You may opt out of marketing emails by using the unsubscribe link in any such email. We will continue to send transactional and service-related communications.
-
Account Deletion. Customers may close their account at any time using the in-product cancellation function. Closure is subject to the retention practices described in Section 6.
8.2 State Privacy Rights (United States).
Depending on where you reside, you may have specific rights under your state’s comprehensive privacy law. As of the Effective Date, the following states have enacted comprehensive privacy laws that may apply: California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Delaware (DPDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), New Hampshire (NHPA), New Jersey (NJDPA), Maryland (MDPA), Minnesota (MNCDPA), and Rhode Island (RICDPDPA). Additional states may adopt similar laws over time. The rights available to you depend on your state of residence and may include:
-
Right to Know / Access. The right to confirm whether we process your personal information and to access the categories and specific pieces of personal information we hold about you.
-
Right to Delete. The right to request that we delete personal information we hold about you, subject to exceptions provided by applicable law.
-
Right to Correct. The right to request correction of inaccurate personal information we hold about you.
-
Right to Portability. The right to receive a copy of certain personal information in a portable format.
-
Right to Opt Out of “Sale” or “Sharing.” Although we do not currently sell personal information or share it for cross-context behavioral advertising, you have the right to direct us not to do so should our practices change.
-
Right to Opt Out of Targeted Advertising. Although we do not currently engage in targeted advertising, you have the right to opt out should our practices change.
-
Right to Limit Use of Sensitive Personal Information. Although we have designed the Service to avoid retaining sensitive personal information ourselves, you have the right to direct us to limit such use where applicable.
-
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
-
Right to Appeal. If we deny your request, you may appeal our decision. We will respond to your appeal within the time required by applicable law.
8.3 How to Exercise Your Rights.
To exercise any of these rights, please email hello@leasevelocity.co or use the contact methods in Section 1. We will need to verify your identity before responding to a request, which may include asking you to confirm information you previously provided to us or the applicable Customer. We do not charge a fee for exercising your rights, except as permitted by applicable law for repeated or excessive requests. You may also authorize an agent to make a request on your behalf, subject to applicable verification requirements.
8.4 Requests Concerning Information Held on Behalf of a Customer.
If your request relates to personal information that we process on behalf of a Customer (for example, information you submitted as an applicant or resident through a Customer’s property site or resident portal), we will refer your request to the applicable Customer, who is the controller of that information. Where required by law, we will also assist the Customer in responding to your request.
8.5 California “Shine the Light.”
California Civil Code § 1798.83 permits California residents to request certain information regarding our disclosure of personal information to third parties for those parties’ own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
9. CHILDREN
The Service is not directed to children under thirteen (13) years of age, and we do not knowingly collect personal information from children under thirteen (13). If you believe we have inadvertently collected personal information from a child under thirteen (13), please contact us at hello@leasevelocity.co and we will take steps to delete the information. Where information about minor occupants of a rental property is submitted to the Service in the ordinary course of leasing, the submitting Customer (or, where applicable, the parent or legal guardian) is solely responsible for the lawfulness of that submission and represents that they have the authority to make it.
10. SECURITY
We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, or disclosure. These include encryption of data in transit using TLS, encryption of certain sensitive data at the application layer, multi-factor authentication for privileged accounts, multi-tenant data isolation, role-based access controls, rate limiting and bot protection on critical routes, error and security monitoring, and a structured audit log of security-relevant events. No security measure is perfect, however, and we do not guarantee that personal information will never be subject to unauthorized access. If you suspect that your account has been compromised, please contact us immediately at hello@leasevelocity.co.
11. INTERNATIONAL USERS
The Service is operated from the United States and is intended for use only by individuals located in the United States. If you access or use the Service from outside the United States, you do so at your own risk, and you acknowledge that your personal information will be transferred to and processed in the United States, which may have data-protection laws that differ from the laws of your country.
12. THIRD-PARTY LINKS AND SERVICES
The Site and the Service may contain links to third-party websites and services, including payment processors, vendor partner sites, and mapping providers. We are not responsible for the privacy practices of those third parties, and this Privacy Policy does not apply to them. We encourage you to review the privacy notices of any third-party services you use.
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where required by law or where the changes are significant, we will provide additional notice (such as by email to Customers or by an in-product notification). Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated Privacy Policy.
14. CONTACT US
Questions, comments, or complaints about this Privacy Policy or our privacy practices may be sent to:
Lease Velocity LLC
Attention: Privacy
3500 Lenox Rd NE, Suite 1500, Atlanta, GA 30326
Email: hello@leasevelocity.co