Privacy Policy

Last updated: 3 November 2026

LeaseScan is operated by VantagePoint Networks. This policy explains how we collect, use, and protect information when you use leasescan.io.

1. Information We Collect

We collect the following categories of information:

• Account information — email address provided at checkout, used to deliver your report and manage your account.
• Lease document content — the text or PDF you upload for analysis. We use it to produce your report and do not store the document itself. Your report can include short quotes from your lease (see Data Retention).
• Payment information — handled entirely by Stripe. We do not receive or store your card details.
• Technical data — our hosting provider keeps standard server logs (such as IP address and pages requested) for security and troubleshooting. We do not use analytics or advertising trackers.
• Email sign-ups — if you ask for our free guide, your email address and a record of your consent (when, where on the site, and your IP address).

2. How We Use Your Information, and Our Lawful Basis

Under UK data protection law we must have a lawful basis for each use of your personal data:

• Analysing your lease, producing and saving your report, running your account, and taking payment — contract: we need to do this to provide the service you bought.
• Sending you our free guide and occasional tips — consent: only if you tick the box to ask for them. You can withdraw consent at any time using the unsubscribe link in any email we send, or by emailing us.
• Keeping the service secure and preventing abuse (server logs, rate limiting) and keeping a record of your consent — legitimate interests: running a safe, reliable service and being able to show what you agreed to.
• Keeping purchase records — legal obligation: accounting and tax rules require us to keep them.

3. Lease Document Processing

Your lease is sent securely to our AI document-processing provider, Anthropic, which reads it so we can produce your report. If Anthropic is unavailable, it may be processed by our backup provider, Groq. These providers process your document only to provide the service to us. Under its commercial terms Anthropic deletes this content within 30 days by default (longer only if it is flagged for review under its usage policy) and does not use it to train its models; Groq processes it under its own API terms. We do not use your documents to train models, and we do not sell or otherwise share them. Full details are on our subprocessors page. For the Self-Hosted plan, your lease documents never leave your own server.

4. Data Sharing

We do not sell your personal data. We share data only with the subprocessors listed on our subprocessors page:

• Anthropic (with Groq as a backup) — AI document processing
• Stripe — payment processing
• Vercel and Upstash — hosting, server functions and data storage (data centres in the EU and/or US)

Our pages also load fonts from Google Fonts and, on the scan page, a PDF-reading library from cdnjs (Cloudflare). Your browser connects to these services directly, so they receive your IP address.

5. Data Retention

• Your lease document — not stored by us. Our AI provider deletes it under its own terms (see section 3).
• Your reports — when you are signed in, each report is saved to your account for 2 years so you can view it again. A list of your past reports (title, date and score) is kept for as long as you have an account. A copy of recent reports is also kept in your browser's local storage on your own device until you sign out or clear it.
• Account and purchase information — kept while your account is active and afterwards for as long as needed to meet legal and accounting obligations.
• Email sign-ups — kept until you ask us to remove you.

You can ask us to delete your reports and account data at any time by emailing info@vpnetworks.co.uk.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at info@vpnetworks.co.uk.

UK and EU residents have rights under UK GDPR / EU GDPR. California residents have rights under the CCPA.

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint. We would appreciate the chance to put things right first, so please contact us.

7. Cookies and Local Storage

We do not set cookies. We keep your sign-in session and recent reports in your browser's local storage so the site works; you can clear them at any time by signing out or clearing your browser data. Stripe sets its own cookies on its checkout pages.

8. Security

All data is sent over HTTPS. Stored data is held with our hosting and storage providers, and access to it is restricted to the systems that need it and protected by secret keys. No system is 100% secure; we encourage you not to upload documents containing unnecessary sensitive personal data.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to registered users and by updating the "last updated" date above.

10. Contact

Questions about this policy: info@vpnetworks.co.uk

VantagePoint Networks, United Kingdom.