Privacy Policy

Who we are

Leascape is lease accounting software operated by [LEGAL ENTITY NAME], registered office [REGISTERED ADDRESS], CIN [CIN], GSTIN [GSTIN] (“Leascape”, “we”, “us”). In these pages “you” or “customer” means the organisation that subscribes to Leascape.

This policy covers the leascape.com website and the Leascape application. It explains what we do with personal data — information about identifiable people.

Two different roles

Leascape handles personal data in two capacities, and your rights differ between them:

• As controller (data fiduciary) — for the account, billing, support and website data described below, where we decide why and how it is used.
• As processor — for everything inside your Leascape workspace: leases, counterparties, accounts, schedules and the user accounts of your staff. That data is yours, and we act on your instructions. See the Data Processing page.

What we collect as controller

• Account details — name, work email, job title, company and the user role assigned to you.
• Billing details — company name, billing address, GSTIN and invoice history. Card and bank details are handled by our payment provider; we never see or store full card numbers.
• Support and sales correspondence — emails and demo requests you send us, including anything you choose to put in them.
• Technical records — the IP address and timestamp recorded against actions in the audit trail, and error logs written when something fails. We keep these to run, secure and debug the service, and to show who did what. We do not keep a general record of every page you visit.

This website

The leascape.com marketing site is deliberately plain:

• No analytics, advertising or tracking cookies. We do not use Google Analytics, pixels or similar tools on it.
• One browser storage key, leascape.site.theme, remembers whether you chose light or dark mode. It stays in your browser and is never sent to us.
• Fonts are served from this site itself. We host the typefaces on our own domain, so loading a page sends nothing to a font CDN. Your browser makes no third-party requests on this site.
• The site is hosted on Cloudflare Pages. Like any web host, Cloudflare handles the request that delivers each page and records the visitor's IP address in its own logs, to serve the site and protect it from attack. Our support and grievance email is handled by Zoho Mail in India. Both are listed on the Data Processing page.
• The demo form does not submit to a server. It opens your own email program with the details filled in, so nothing is stored unless you choose to send that email.

Why we use it

• To provide, maintain and improve the service you subscribe to.
• To answer support requests and communicate about your account, including service notices.
• To invoice you and to meet tax and accounting obligations.
• To keep the service secure: detecting abuse, investigating incidents and keeping audit records.
• To comply with the law and to establish or defend legal claims.

We do not sell personal data, and we do not use your data to train machine-learning models.

Our legal grounds

Where the Digital Personal Data Protection Act, 2023 applies, we process personal data for the purposes above with your consent or as a legitimate use permitted by that Act. Details you send us voluntarily — a demo request, a support email — are handled under section 7(a) of that Act, as personal data you have voluntarily provided for the purpose you approached us for, and we use them for nothing else. Where the GDPR applies to a customer in the EU or UK, we rely on performance of a contract, our legitimate interests in running and securing the service, compliance with legal obligations, and consent where required.

Where your data is held

Application data is hosted with [HOSTING PROVIDER] in [HOSTING REGION]. Where that is outside India, we rely on section 16 of the Digital Personal Data Protection Act, 2023, which permits transfer to any country the Central Government has not restricted by notification; we check that list and will move or re-region data if a country we use is restricted. Each customer's records live in a separate physical database rather than a shared table, and the credentials for those databases are stored encrypted. Data is encrypted in transit with TLS.

Who we share it with

We share personal data only with:

• the service providers listed on the Data Processing page, who act on our instructions under contract;
• our professional advisers — accountants, auditors and lawyers — under confidentiality;
• authorities, courts or regulators where we are legally required to;
• a buyer or successor, if the business is sold or reorganised, with notice to you.

How long we keep it

• Workspace data is kept for as long as your subscription runs, and is then deleted as described on the Account & Data Deletion page.
• Invoices and tax records are kept for 8 years, as required by Indian company and GST law.
• Technical and security logs are kept for [LOG RETENTION], then deleted or aggregated.

Your rights

Subject to the law that applies to you, you may ask us to give you a copy of your personal data, correct it, complete it, erase it, or withdraw consent you have given. Where the GDPR applies you may also object to or restrict certain processing and ask for portability.

If you use Leascape as an employee of a customer, your employer controls that workspace — please ask them first, and we will support them in answering you.

You can also withdraw consent you have given, or ask us to stop using details you sent voluntarily, by writing to the address below — it is as simple as giving it in the first place. We then stop that processing and erase the data unless the law requires us to keep it; anything done before withdrawal stays lawful, and we tell you if withdrawal means we can no longer provide something.

Under section 14 you may also nominate another person to exercise these rights on your behalf if you die or become incapable of exercising them. Write to us with their name and contact details and we will record the nomination.

Write to us at hello@leascape.com. We acknowledge requests within [GRIEVANCE ACK DAYS] working days and respond within the time the law allows. Our grievance officer under the Digital Personal Data Protection Act, 2023 is [GRIEVANCE OFFICER], reachable at the same address. If you are not satisfied with our answer, you may complain to the Data Protection Board of India. Section 13 asks you to raise the matter with us first, so please write to the grievance officer above and give us a chance to resolve it; if we do not respond within the time prescribed, or the response does not satisfy you, you can approach the Board through the procedure it publishes on its official website. If you are outside India, you may also complain to your local regulator.

Children

Leascape is business software sold to organisations. It is not intended for anyone under 18, and we do not knowingly collect their personal data.

This notice in other languages

This notice is published in English. You may ask for it in Hindi or in any other language listed in the Eighth Schedule to the Constitution of India by writing to hello@leascape.com, and we will provide it.

Changes

If we change this policy we update the date at the top, and we tell subscribers by email before any change that materially affects them takes effect.

Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS]. Email hello@leascape.com.