Privacy

Accounts store your name, email, and a password hash. Lease drafts store the property, party, and money answers you type. Generated PDFs are encrypted before they are written to disk. The database stores the file location and a hash, not the PDF bytes. A development installation without its own encryption key is not for real tenant information.

Another customer cannot open your draft. A request for someone else’s lease is answered as not found. An administrator can open a lease only after the read is written to the audit log. You can delete the account from the account menu. That removes the account and the leases it created.

Verification, password-reset, and signature emails are sent when an email service is connected. The service receives the message. This server does not keep the message body, or the link inside it, after handing the message off. On a computer with no email service, the link can be shown on the sign-up, sign-in, and password-reset screens instead.

This notice describes what the app stores. It is not legal advice.