Privacy Policy

Lease Velocity Effective October 22, 2026

1. Who we are

Lease Velocity ("Studio" in this policy) is operated by Lease Velocity LLC, a Georgia limited liability company in the United States. In this policy, "Studio," "we," "us," and "our" mean Lease Velocity LLC. "You" means the property management company, owner, or operator that holds a Studio account, and the individual users on it.

Questions about this policy, or about the data we hold: hello@leasevelocity.co.

2. What Studio does

Studio is a marketing tool for apartment communities. You connect a property's website and, if you use one, your property management software as sources of marketing facts. You connect the social, search, and advertising accounts you already own — Facebook, Instagram, Google Business Profile, TikTok, LinkedIn, and Meta and Google ad accounts — as destinations. Inside Studio you generate marketing content with AI, review it, schedule it, and publish it to those accounts. You can also send email campaigns to lists you supply.

Everything Studio publishes goes to accounts you own and connected yourself, on your instruction. Studio does not operate accounts of its own on your behalf, and it does not post anything you have not created, approved, or scheduled.

3. The data we collect

3.1 Account data

Your name, work email address, company name, and a hashed version of your password. We never store your password itself. If you invite teammates, we store the same fields for them plus the role you assign.

3.2 Property marketing data

For each property you add: name, address, unit and floor plan details, availability and pricing, amenities, photos, brand colors, and the tone and positioning notes you write.

Some of this you type. Some Studio reads from your property's public website at the URL you give us. Some comes from your property management software (Buildium first, others as we add them) through a read-only connection you create with your own API credentials. Studio reads that connection for marketing facts only — the property, unit, floor plan, availability, and pricing records that describe what you are advertising.

Studio does not read resident or applicant records from your PMS, and it does not write anything back into your PMS.

3.3 Connected-channel data

When you connect a social, business-profile, or advertising account, the platform issues Studio an access token (and, on some platforms, a refresh token). We store those tokens encrypted, and we use them for exactly two things:

• publishing the content you create, approve, or schedule, to the account you selected; and
• reading back the metrics that platform makes available for your own pages, profiles, posts, and ads.

Alongside the token we store the identifiers and display details the platform returns so you can tell your channels apart — page or profile ID, account name, handle, and avatar — and the performance metrics we fetch for your content (impressions, reach, engagement, clicks, and the equivalents each platform provides).

We do not use these tokens to read your private messages, to browse content that is not yours, to collect data about other people's accounts, or to act on any platform in a way you did not ask for.

3.4 Content you create and upload

The prompts and briefs you write, the images and video you upload, the text, images, and video Studio generates for you, your drafts, your schedule, and the record of what was published where and when.

3.5 Email campaign data

If you use Studio to send email, you supply the recipient list — your prospects, applicants, or residents. We store those email addresses and any names or merge fields you include, the campaigns you send, and the delivery and engagement events our email provider reports back (delivered, bounced, opened, clicked, unsubscribed, marked as spam).

We hold that list to deliver your campaigns and to show you your results. We do not market to your list, we do not merge it with anyone else's, we do not sell or rent it, and we do not send it to AI model providers.

3.6 Lead form data

If you run lead ads through a connected Meta or Google ad account, the contact details a prospect submits on that platform's lead form — typically name, email address, and phone number — pass through Studio so we can show them to you and hand them to your systems. We hold them for you; we do not use them for our own purposes.

3.7 Billing data

Your plan, the properties you are billed for, your credit balance and the ledger of what each generation spent, invoices, and payment status. Payments run through Stripe. Lease Velocity never receives or stores your card number — Stripe holds it, and we see only the last four digits, card brand, and result that Stripe returns.

3.8 Usage and technical data

Sign-in events, IP address, browser and device type, pages and features used, API calls, and error reports. We use these to keep the service running, to investigate problems, and to detect abuse. On our public pages — this site, the legal pages, and shared review links — we also count visits with Vercel Web Analytics; visits inside the signed-in product are not counted.

3.9 Cookies

Studio sets a cookie to keep you signed in and cookies that protect the sign-in form against automated abuse. These are required for the product to work. We do not run advertising or cross-site tracking cookies in Studio.

3.10 Lead forms on our own ads

If you submit the form on one of Lease Velocity's own lead ads on Meta, we receive the name, email address, and phone number the form asks for. Lease Velocity is the advertiser there, and the controller of what you submit. We use it to answer your inquiry. To ask us to delete it, email hello@leasevelocity.co from the address you entered on the form, with the subject "Data deletion."

4. What we do not collect

Studio is a marketing product, not a property management system, and its data footprint reflects that. We do not collect, and the product has no place to put:

• Resident or applicant records from your PMS — no ledgers, no lease documents, no payment history, no maintenance history.
• Social Security numbers, dates of birth, driver's license numbers, credit scores, or background or screening reports.
• Card or bank account numbers — Stripe holds those.
• Rent payments — Studio does not move money between residents and owners.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5. How we use data

We use what we collect to:

• run your account, your properties, and your team's access;
• generate marketing content from the property facts and the brief you give us;
• publish and schedule that content to the channels you connected, and report back how it performed;
• send the email campaigns you compose to the list you supply, and report delivery and engagement;
• meter and bill credits and subscriptions, and produce invoices;
• keep the service secure — rate limiting, abuse detection, fraud prevention, and incident investigation;
• fix bugs and improve the product, using aggregate and technical data;
• send you service messages about your account, billing, failed publishes, and expiring connections; and
• meet our legal and tax obligations.

We do not use your content, your property data, your recipient lists, or platform data to train AI models. See §7.

6. Platform data — Meta, Google, TikTok, and LinkedIn

Data Studio receives from a connected platform is used only to power the features you can see in Studio: composing and publishing your content, and showing you the analytics for it. We do not sell it, license it, or transfer it to data brokers, ad networks, or resellers. We do not use it to build profiles of individuals, to target advertising outside the campaigns you run in your own ad accounts, or to train machine learning models.

When you disconnect a channel, we delete the tokens for that channel immediately and remove every piece of platform data we hold under them — cached records, collected performance metrics, and mirrored reviews. When a platform tells us access was revoked or the token expired, we do the same. Each customer's platform data is kept logically separated from every other customer's.

6.1 Google

Studio uses Google OAuth so you can manage your property's Google Business Profile — updating profile details, publishing posts and photos, and reading the profile's performance metrics. We request only the scopes needed for those features, and we ask for them at the moment you connect the profile.

> Lease Velocity Studio's use and transfer of information received from Google APIs to any other app will adhere to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

We do not transfer Google user data to third parties except as needed to provide the features above, to comply with law, or as part of a merger or acquisition with your prior notice. We do not use Google user data for advertising, credit assessment, or lending, and we do not use it to develop, improve, or train generalized AI or ML models.

If you run Google Ads through Studio, we use your Google Ads account only to create, manage, and report on the campaigns you authorize.

6.2 Meta (Facebook and Instagram)

Studio uses Meta's APIs to publish to the Facebook Pages and Instagram professional accounts you connect, to read the insights Meta provides for your Pages, accounts, and posts, and — if you enable it — to manage lead ad campaigns and retrieve the leads those forms generate.

We process Meta Platform Data only to provide those features. We do not sell, license, or purchase Platform Data. We keep it only as long as it is needed for the feature, we delete it when you disconnect the channel or close your account, and we delete it on Meta's request. Our security safeguards are described in §12.

To request deletion of the data we hold about you, follow §11. That section is our data deletion instructions.

6.3 TikTok

Studio uses TikTok's APIs to publish videos and photo posts to the TikTok account you connect. Nothing is sent to TikTok until you expressly confirm the upload in Studio, and Studio shows you which TikTok account will receive it, the privacy setting you selected, and the disclosures TikTok requires before you publish. We store TikTok data only to run those features and delete it when you disconnect.

6.4 LinkedIn

Studio uses LinkedIn's APIs to publish to the LinkedIn Pages you administer and to read the analytics LinkedIn provides for your Page and its posts. We do not build our own store of LinkedIn member profile data. We store LinkedIn data only within the retention windows LinkedIn's terms allow, we delete Page data on your request or when you disconnect the channel, and we delete it on LinkedIn's request.

7. AI content generation

Studio sends the material needed to generate content to AI model providers. Text and most images are reached through the Vercel AI Gateway; short video clips made from your photos, photo edits and photo extensions are made by Kling AI (Kling AI Pte. Ltd.), which we reach directly. What goes in the prompt is: your brief and instructions, the property marketing facts you have entered or connected (name, location, floor plans, availability, pricing, amenities, brand tone), reference images you supply, and the draft being revised.

What never goes in a prompt: your email recipient lists, your lead form submissions, your billing data, or resident or applicant records.

We instruct our model providers not to use your content to train their models, and we do not use it to train models ourselves. Generated content belongs to you. Because generative models produce similar output for similar prompts, other Studio customers may receive content that resembles yours.

AI output can be wrong. Studio shows you every generation before it goes anywhere, and nothing publishes until you approve it or schedule it. You are responsible for what you publish.

8. Who we share data with

We share data with the service providers below, each for a single purpose, each bound to handle it only on our instruction.

We also disclose data when the law requires it, when we must to protect the safety, rights, or property of our customers or ourselves, and to a successor if Lease Velocity is acquired or merged — in which case this policy continues to govern the data until you are given notice of any change.

Within your own account, data is shared with the teammates you invite, according to the role you give them.

9. Our role

For your account, billing, and usage data, Lease Velocity is the controller — we decide what to collect and why.

For the content you create, the recipient lists you supply, the leads your ads generate, and the platform data we fetch for your channels, Lease Velocity acts on your instruction as your processor. You decide what to publish, to whom, and when. We do not repurpose that data.

10. How long we keep data

Where we say "deleted," we mean removed from our production systems, with backup copies aging out on the cycle above.

11. Deleting your data

You control this from inside Studio, and you can also ask us directly.

Disconnect a channel. Settings → Connections → Disconnect. The access token for that channel is deleted immediately, and so is every piece of platform data we hold under it — cached records, collected performance metrics, and mirrored reviews. Content you already published stays on the platform — delete it there if you want it gone.

Delete a property. Removing a property deletes its marketing data, drafts, schedule, and analytics history in Studio.

Delete your account. Settings → Account → Delete account. This closes the account, deletes every connected token immediately, and deletes your account, property, content, campaign, and lead data within 30 days. Billing records are kept for the period in §10 because tax law requires it.

Ask us. Email hello@leasevelocity.co from the address on your account with the subject "Data deletion." We confirm receipt within five business days and complete the deletion within 30 days. If you connected an account through Facebook, Instagram, Google, TikTok, or LinkedIn and want the data associated with that connection removed, this is the route — tell us which platform and which account, and we will delete it and confirm when it is done.

You can also revoke Studio's access from the platform's own settings at any time. Doing so stops all publishing to that channel; use the steps above to have us delete what we already hold.

12. Security

Passwords are hashed, never stored in readable form. Channel access tokens and other secrets are encrypted at rest. All traffic runs over TLS. Access to production systems is limited to the people who need it, requires strong authentication, and is logged. Each customer's data is isolated at the query layer, and every request that touches a property is checked against that property's access list before it returns anything.

No system is perfectly secure. If a breach affects your data, we will tell you and the appropriate authorities as the law requires, without undue delay.

13. Your choices and rights

You can access, correct, export, or delete the data in your account at any time from inside Studio, or by emailing hello@leasevelocity.co. We respond to requests within 30 days, and we do not charge for them or treat you differently for making one.

Depending on where you live, you may have specific rights to know what we hold, to have it corrected or deleted, and to appeal a refusal. Exercise any of them at the same address. We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.

You can unsubscribe from our marketing emails with the link in any of them. Service emails about your account, billing, and failed publishes continue while your account is open, because they are part of the product.

If you received a campaign a Studio customer sent, use the unsubscribe link in that email — it takes effect immediately and applies to that sender. You can also write to us and we will pass the request to the sender.

14. Children

Studio is a business tool. It is not directed at anyone under 18, and we do not knowingly collect data from children. If we learn we have, we delete it.

15. Where data is processed

Lease Velocity is based in Georgia, USA, and our infrastructure runs in the United States. If you use Studio from elsewhere, your data is transferred to and processed in the United States.

16. Changes to this policy

When we change this policy we update the effective date at the top. If a change materially affects how we handle your data, we will email the address on your account before it takes effect. If a change means using data you already gave us in a genuinely new way, we will ask you first.

17. Contact

Lease Velocity LLC Georgia, United States hello@leasevelocity.co