§ Privacy
Privacy Policy.
▸ Last updated · April 28, 2026
Lease Abstractor AI ("we," "us," "our") is operated by CogniCrew. This Privacy Policy explains what data we collect, how we use it, and the rights you have over it. By using leaseabstractor.ai (the "Service"), you agree to this policy.
What we will never do
We want to be direct about this before anything else.
- We do not sell your data. Not your contact information, not your company information, not your lease documents, not your abstracts. Not to advertisers, not to data brokers, not to any third party.
- We do not share your lease documents or abstracts with anyone outside our service infrastructure. Your documents are visible only to you and to the systems required to process them.
- We do not use your lease documents or abstracts to train AI models. Customer documents are excluded from any model training, fine-tuning, or evaluation dataset.
- We do not allow other customers to see your data. All accounts are isolated.
Information we collect
Account information
When you sign up, we collect:
- Full name
- Company email address
- Company name
- Password (stored as a salted hash; we never see your plaintext password)
Documents and content
When you use the Service, we collect:
- Lease documents you upload (PDF, DOC, DOCX)
- Templates you upload (Excel)
- Questions or instructions you provide to the Lease Analyst
- Generated lease abstracts (Excel output)
- Chat messages exchanged with the agent
Usage data
- Log data: IP address, browser type, pages viewed, timestamps
- Device data: operating system, screen size
- Performance data: errors, response times
Payment data
Stripe processes payments for credit purchases. We never see or store your full card number. We retain only the last four digits, card brand, and Stripe transaction IDs for receipt and reconciliation purposes.
How we use your information
We use your information to:
- Provide the Service: process lease abstractions, deliver results, manage your account
- Authenticate you and secure your account
- Send transactional email (account confirmation, password reset, abstract-ready notifications, receipts)
- Process payments through Stripe
- Provide customer support
- Maintain and improve the Service (using aggregate, anonymized usage metrics — never the contents of your documents)
- Comply with legal obligations
We do not use your data for advertising, profiling, or any purpose unrelated to providing the Service.
How your data is processed
AI lease abstraction
When you upload a lease, the document is processed by our AI agent infrastructure to generate the abstract. This processing involves:
- Storing the document in encrypted private storage scoped to your account
- Passing document content to our AI agent (CogniCrew) for extraction
- Storing the resulting abstract in your account
Document content is sent to AI model providers as a transient processing step under zero-data-retention or short-retention agreements and is not used for model training.
Data security
- All data is encrypted in transit (TLS 1.2+) and at rest.
- Files are stored in private, user-scoped buckets. Cross-account access is prevented at the database and storage layer (row-level security).
- Authentication uses industry-standard email + password with confirmation. Passwords are stored only as salted hashes.
- Guest download links expire after 24 hours. Account files require signing in.
- We follow the principle of least privilege for internal access. Only authorized engineering staff can access production systems, with audit logging.
No system is perfectly secure. If we discover a breach affecting your data, we will notify you within 72 hours of confirmation, in compliance with applicable law.
Data retention
- Lease documents and abstracts are retained in your account until you delete them or close your account.
- Account information is retained while your account is active.
- Payment records are retained for seven years to comply with tax and accounting requirements.
- Logs are retained for 90 days.
When you delete a document, it is removed from active storage immediately and from backups within 30 days. When you close your account, all customer content is deleted within 30 days, except where retention is legally required.
Your rights
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format (JSON or original file formats)
- Object to processing or restrict specific uses
- Withdraw consent for processing where consent is the legal basis
To exercise any of these rights, contact us through the support channel listed in your account dashboard. We respond within 30 days.
If you are a resident of the EU/UK, California, or another jurisdiction with specific privacy rights (GDPR, CCPA, etc.), those rights apply in full and we honor verified requests at no cost.
California residents (CCPA)
We do not sell personal information as defined by the CCPA. We do not share personal information for cross-context behavioral advertising. California residents may request disclosure of categories of information collected, deletion, and correction through the support channel listed in their account dashboard.
EU/UK residents (GDPR)
The legal bases for our processing are:
- Contract: processing necessary to deliver the Service you signed up for
- Legitimate interests: account security, service improvement, fraud prevention
- Consent: where required for specific optional features
- Legal obligation: tax, accounting, lawful requests
You have the right to lodge a complaint with your local data-protection authority. For data-protection inquiries, contact us through the support channel listed in your account dashboard.
International data transfers
The Service is operated from the United States. If you access it from outside the US, your data will be transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms.
Cookies and tracking
We use only the cookies necessary to operate the Service:
- Authentication session cookies
- Security cookies (CSRF protection)
- Functional cookies (e.g., theme preference)
We do not use advertising cookies or third-party tracking pixels. We do not display ads. We use privacy-respecting analytics that do not set persistent identifiers across sites.
Children's privacy
The Service is intended for business use by adults. We do not knowingly collect data from anyone under 16. If you believe we have collected data from a minor, contact us through the support channel listed in your account dashboard and we will delete it.
Confidentiality of lease documents
We recognize that commercial leases contain sensitive business terms — rent, options, exclusivity, party identities, and other competitive information. We treat all uploaded documents as confidential.
- Our processing infrastructure handles your documents. Your account controls access to them.
- We do not respond to government, law enforcement, or third-party requests for customer data except where legally compelled, and we will notify you unless legally prohibited from doing so.
Changes to this policy
We may update this policy from time to time. Material changes will be communicated by email and reflected in the "Last updated" date at the top. Continued use of the Service after a change constitutes acceptance of the updated policy.
Contact
For questions, requests, or concerns regarding this policy, contact us through the support channel listed in your account dashboard.
CogniCrew
operator of Lease Abstractor AI
▸ Lease Abstractor AI is operated by CogniCrew · Last updated April 28, 2026
