Privacy Policy

LeaseLine is owned and operated by Berry Street Research Group LLC. We are committed to protecting the privacy and security of your personal data. This Privacy Policy describes how we collect, use, and handle your information.

What we collect

When you use LeaseLine, we collect the information you share with us over chat, including your apartment preferences (budget, neighborhoods, bedrooms, move-in date, etc.), your name, and your contact information (email address, phone number).

If you use email outreach, we also collect the email address you verify for copies, the listing contact's email address, the draft you approve, delivery metadata, and replies sent to your LeaseLine reply address. Attachment metadata may be retained, but attachments are not forwarded through outreach.

If you use LeaseLine ReadyPacket, ReadyPacket basics collects your linked verified phone account, application name, application email and contact preference, aggregate adult-applicant and intended- occupant counts, move timing, purpose acknowledgment, and application- email verification records. These basics are available to eligible LeaseLine renters and do not require documents, income, credit, background, government identification, or other people's names. Optional ReadyPacket sections may collect rental-assistance program details and stated dates, additional household and apartment-search details, housing- specialist contact information, separate consent records, and the documents you choose to upload or send to us by text message or email. These files may contain highly sensitive information such as photo identification and household income records.

If you join the LeaseLine Shortlist early-interest list, we collect only the email address you submit plus minimal operational records needed to prevent abuse, deduplicate the request, and track whether the configured LeaseLine administrator was notified. Joining does not create a vacancy, application, screening request, or brokerage relationship.

If you use the LeaseLine Shortlist landlord and agent portal, we collect your email-authenticated account details, name, optional organization, property and listing information, application questions, source and lookup status, and publishing activity. If you apply through a Shortlist public link, we collect the answers requested by that property's application, including the default name, date of birth, email, and phone fields, together with your versioned submission consent. Applicant answers are encrypted before storage and are not returned through the public link. We automatically save the standard name, date of birth, email, and phone fields to a private reusable ReadyPacket application profile; property-specific custom answers remain with that application. An application and its applicant submission are available to every active collaborator in the workspace that owns the listing, not only to the person who created or published it. Workspace access covers all current and future listings in that workspace. An accountless renter receives private profile access in the browser and, when configured, through a secure receipt link sent to the submitted application email. An authorized workspace collaborator may request specific configured fields or broad document categories. If you respond, we record your corrected application snapshot and only the individual current ReadyPacket documents you explicitly select for that application; we do not disclose the rest of your ReadyPacket.

On our website, we collect product-usage information such as page visits, clicks, scrolling, device and browser details, and session recordings on eligible public pages. Authenticated consumer pages, including ReadyPacket and phone sign-in, and the private agent and admin portal are excluded from session recording. Shortlist sign-in, account portals, public application links, and the Shortlist email form are also excluded from capture. Form inputs are masked on other recorded pages, and URL query strings are removed.

Our public pages also use the Meta Pixel and Google Analytics, which collect device and network information such as your IP address, browser type, and ad click identifiers.

How we use your information

We use your information to provide you with the LeaseLine service, which finds and sends you apartment listings that match your criteria, and to measure how people find LeaseLine. Specifically:

• Apartment matching: Your preferences are used to filter and deliver relevant listings to you.
• Communication: Your contact information is used only to send you apartment listings and respond to your messages. We will never use your email or phone number for unsolicited marketing.
• User-approved email outreach:If you choose this feature, we use the exact draft you approve to contact the listing recipient, copy your verified email address, route replies, and relay a reply to you when the sender does not copy you directly. Each approved initial inquiry also blind-copies LeaseLine's support inbox for delivery support and quality review; the listing recipient cannot see that blind copy.
• Payment processing: If you subscribe to a paid plan, payment is processed securely through Stripe. We do not store your credit card details.
• ReadyPacket basics: We use your minimum profile to keep reusable renter-provided application details together and to determine whether the application email that will be copied on landlord outreach is verified. Saving basics is not permission for automatic outreach, and we do not use basics to verify identity, screen or rank renters, determine eligibility or creditworthiness, or make an approval recommendation.
• ReadyPacket document preparation: With your consent, we store, scan, and use automated or human review to check whether an uploaded file appears readable, current, complete, and consistent with the document workflow you selected. Uploading a document in ReadyPacket, or sending one to us by text message or email, is that consent. Automated review may extract a limited set of fields such as names, program, dates, and bedroom size. ReadyPacket does not authenticate a document, decide government eligibility, pull credit, apply an income-multiple screen, or guarantee an apartment approval.
• Optional ReadyPacket document reminders: These texts require a separate portal choice. We retain the current choice, disclosure version, timestamp, and portal source so we can honor and audit an opt-in or opt-out. A general LeaseLine text relationship alone does not enroll you in document reminders.
• Optional landlord fact sharing: If you turn this on in ReadyPacket, LeaseLine, and any agent you separately sign with, may include a few facts when asking a landlord or listing agent about a listing for you: the rental-assistance program you use and the monthly amount and bedroom size your program approved, how many people will live with you, and the kinds of income your household reported, without amounts. We never share your credit estimate, documents, income amounts, or Social Security numbers this way. We retain the current choice, disclosure version, timestamp, and portal source so we can honor and audit it, and turning it off stops future sharing.
• LeaseLine Shortlist early interest: We use the email you submit only to follow up about Shortlist product research or an explicitly offered early pilot. The current form does not collect vacancy or renter information and does not run tenant screening or background checks.
• LeaseLine Shortlist applications:We use landlord and agent account details to create and publish the property-specific application they configure. We use an applicant's answers to receive and preserve that submitted rental application for the authorized collaborators in the listing's identified workspace, save standard fields to the renter's private reusable profile, prefill later LeaseLine applications, provide renter correction, withdrawal and deletion controls, provide an authorized workspace inbox, prevent abuse, and support the service. LeaseLine does not run a credit or background check, score or rank an applicant, recommend approval, or make a housing decision.
• Shortlist application follow-up: We show an exact information request only in your private renter surfaces and use a generic email to tell you that action is available. A phone-authenticated ReadyPacket renter may explicitly share individual matching document previews with one application. The workspace collaborators receive no whole-packet access, storage link, original file, screening result, score, or recommendation. Each preview is re-authorized and audited when opened.
• Product improvement: Website analytics and session recordings on eligible public pages help us understand which pages and features are useful, identify confusing interactions, and fix usability problems. ReadyPacket product events contain only bounded status and step codes, not names, email addresses, household values, assistance status, or documents.
• Advertising measurement: On our public pages, we measure which ads and pages lead people to text us, as described under Third-party services.

What we don't do

• We do not sell your personal information to third parties.
• We do not share application answers, applicant contact details, or documents with advertising platforms. Optional Shortlist ad measurement uses browser identifiers and limited activity events, as described below.
• We do not use your email for any purpose other than delivering and supporting the service you signed up for.
• No mobile information sharing: No mobile phone numbers or opt-in consent data collected through our service will be shared, sold, or rented to third parties or affiliates for marketing or promotional purposes. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties under any circumstances.
• SMS consent records: When you opt in to text messages, we retain the opt-in timestamp, source page, consent disclosure, IP address, and user agent for compliance verification and carrier audit purposes.

Third-party services

We use the following third-party services:

• Stripe for payment processing.
• Telnyx and other configured messaging providers as the messaging carriers.
• Resend to send, receive, and relay email when you use email outreach and to notify the configured LeaseLine administrator of Shortlist interest. When configured, Resend also sends privacy-safe Shortlist application receipts containing a secure renter-profile access link and property-representative inbox notices. Those notices contain no submitted answer values or applicant contact details.
• Google Cloud, Firebase, Google Maps Platform, and Google's AI services for account authentication, server-side databases, ReadyPacket private file storage, malware-scanning and review workflows, limited structured document review, Shortlist address suggestions and walking routes, and bounded Shortlist property-fact normalization. Address autocomplete sends the typed property query and a short-lived provider session token through LeaseLine's server; property research sends only the property address and bounded public-source snippets to Gemini. Generating a listing sends the listing coordinates and up to three nearby stop coordinates from LeaseLine's server to Google Maps to route walking times. These flows do not send applicant answers, guest browser tokens, raw IP addresses, or landlord account credentials to those providers. Opening a directions link takes you to Google Maps. Google Maps use is also governed by the Google Maps/Google Earth Additional Terms and Google Privacy Policy. ReadyPacket account and renter application pages do not load Google Analytics or Meta Pixel.
• Shortlist measurement: Usage and advertising measurement starts automatically on Shortlist and public listing pages. Google Analytics and Google Ads receive browser and session identifiers, ad click identifiers, campaign information, general screen names, and limited activity events such as account creation and first publication. Meta receives the confirmed account and publication events with browser matching identifiers. PostHog receives limited product events without those ad matching identifiers. These events do not include property addresses, application answers, contact details, documents, private links, or page contents. Shortlist does not use session replay or personalized Google advertising. You can turn measurement off using the footer control. We remember your preference for 90 days. Existing opt-outs, Global Privacy Control, and Do Not Track disable this measurement. Turning it off stops future collection and delivery; it does not automatically delete events already received by a provider.
• Meta and Google advertising measurement on our public pages: Our public pages load the Meta Pixel and Google Analytics, which collect device and network information such as your IP address, browser type, pages viewed, and ad click identifiers. Sign-in, ReadyPacket account, rental application, and lease pages do not load them. When you tap a button to text us, we record the click with its page, the number the button texts, browser type, ad click and browser identifiers, and where your visit came from: the page it started on, the linking website’s domain, and the link’s tags. A short-lived copy of that record also holds the click’s IP address and is scheduled for automatic deletion 24 hours after the click. When a new number texts us and exactly one such click happened in the previous 10 minutes, we send Meta that click’s details with the text-in event, so Meta can report which ad led to it. When exactly one visit tapped the number you texted in those 10 minutes, we also save where that visit came from with your LeaseLine account, so we can see how people find us. These events do not include your messages, apartment preferences, or documents.
• U.S. Census Bureau geocoding service to attempt a public standardized-address match when a Shortlist property representative enters an address. Only the property address is sent for this lookup; applicant information is not sent.
• Tavilyfor bounded public web search in a private Shortlist property preview. LeaseLine sends only the property address, requests short search-result snippets without raw page content or images, and stores only normalized facts and source links for the draft's short lifetime. Raw snippets, prompts, search queries, and evidence excerpts are not persisted.
• PostHog for product analytics and session replay on eligible public pages. Authenticated consumer pages, including ReadyPacket and phone sign-in, and the private agent and admin portal are excluded from replay. Shortlist sign-in, account portals, public rental applications, and the Shortlist email form are also excluded from capture. Form inputs are masked on other recorded pages, and URL query strings are stripped.

Each of these services has its own privacy policy governing the data they process.

Email reference checks

When a listing enables reference checks, applicants may provide a reference’s name, email address, and relevant rental or employment facts. We record a separate authorization before emailing that person. Reference checks use email only and do not authorize calls or texts. We collect the invited person’s factual answers, private saved drafts, corrections, delivery records, and opt-out preferences. Drafts are not shared with the applicant or housing provider. Submitted responses are available to the applicant and authorized collaborators in the named housing provider’s workspace. Supplemental clarifications may be withheld from the provider pending privacy review.

Invitations include a private, expiring link and an option to decline, report a wrong recipient, or stop reference emails. We send at most two reminders for a request. Applicants can stop future outreach from their private renter profile and request corrections to source answers. Contact help@leaseline.ai for access, correction, or deletion assistance. We retain original source versions separately from the outcome of a correction investigation.

Data retention

Encrypted reference contacts, drafts, responses, and corrections follow the associated application’s retention deadline, normally 180 days from submission. A pending dispute or legal hold may extend retention. Withdrawing an application or deleting its linked profile revokes future reference access and outreach; retained records remain restricted until deletion or resolution of a required hold. Keyed email hashes used to honor opt-outs are retained separately so a new request cannot bypass a recipient’s preference.

We retain your data for as long as your account is active. If you want your data deleted, email us at help@leaseline.aiand we'll remove it within 30 days, subject to records we must keep for security, abuse prevention, legal, or operational reasons.

A Shortlist interest record is retained while we evaluate or operate the research or pilot relationship, and as reasonably necessary for security, abuse prevention, legal, or operational needs. The associated abuse-prevention record uses a hashed network identifier rather than the original address and is marked with an expiration timestamp.

Questions sent through a rental listing and the contact information provided are encrypted and shown to authorized collaborators in that listing’s workspace. Email replies use Resend and may include the representative’s reply-to email address. Listing activity measurement stores bounded source categories and event counts, not questions or contact details. Inquiries remain with the listing until deletion or an approved retention request. A Shortlist landlord or agent account and its property applications are retained while the account is active and as reasonably needed to operate the service. Shortlist applicant submissions are marked for deletion 180 days after submission by default, or the configured production retention period, subject to records we must retain for security, abuse prevention, legal, or operational reasons. Short-lived submission rate-limit records store keyed hashes rather than raw network addresses and are marked for automatic expiration. Auto-saved ReadyPacket application profiles are marked for deletion 12 months after the latest application or correction. An unlinked renter may delete that profile from the secure renter page; deletion also withdraws linked Shortlist applications and removes their encrypted answers. A linked renter uses ReadyPacket's recent-auth deletion control, which also purges linked Shortlist profile data and encrypted application answers. Content-free withdrawal and security records may be retained separately where reasonably necessary. A current or former workspace collaborator may already have viewed or independently retained information before access is removed or a renter withdraws or deletes it. A workspace owner may permanently delete a listing only before it has received any applicant submission. Once applicant history exists, that listing cannot be self-service deleted, including after the encrypted submission expires. Contact us about a retention or deletion request; listing deletion never silently deletes or orphans renter records. Application-specific document selections are retained with the submission during that same period. Cancelling or replacing a request, withdrawing the application, deleting the linked profile, or deleting or replacing the selected ReadyPacket document revokes future LeaseLine preview access.

ReadyPacket application-profile details are scheduled for deletion 12 months after you last save or confirm those details. Originals and sanitized preview files have a separate 12-month clock that is refreshed when you upload or remove a document. Simply viewing the portal does not extend either clock. We plan to warn you approximately 30 and 7 days before deletion. Removing an individual ReadyPacket document hides it from your current packet and keeps an archived copy available to authorized LeaseLine staff until that retention deadline. After recent authentication, “Delete my ReadyPacket” removes the ReadyPacket profile and file contents and turns off ReadyPacket email readiness. It does not delete your LeaseLine account, already-sent outreach records, or any separately governed representation record. Content-free security and compliance audit events may be retained where reasonably necessary. You can download your selected current files from the portal after recent authentication; ReadyPacket does not create public document links. Authenticated collaborators in the listing workspace may view only sanitized previews you explicitly selected for that one Shortlist application.

Contact

Questions about this policy? Reach out at help@leaseline.ai.