Privacy Policy

Last Updated: May 22, 2026

This Privacy Policy ("Policy") describes how Invest.Lease ("Company," "we," "us," or "our") collects, uses, discloses, and safeguards personal information in connection with your access to and use of the Invest.Lease platform (the "Platform"). This Policy applies to all users, including those who register via email or authenticate through a third-party social login provider such as Google or LinkedIn. By accessing or using the Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy forms part of our Terms of Service.

1. Information We Collect

We collect personal information in the following categories:

  • Profile and Identity Data: Full name, contact details (email address, phone number), professional credentials, skills, educational background, work experience, and language preferences provided during registration or profile setup.
  • Social Login Data: When you authenticate via Google or LinkedIn, we receive limited profile information — including your name, email address, and profile image — as authorized by you through your settings on that platform.
  • User-Generated Content: Posts, comments, property listings, acquisition requirements, job applications, messages, business cards, and documents you upload or store within the Drive module.
  • Transaction and Billing Data: Subscription details, invoices, and payment records processed through our payment providers (Stripe and Paddle). We do not store full payment card details directly.
  • Usage and Technical Data: Device type, browser information, operating system, IP address, session duration, clickstream data, and feature interaction logs collected through cookies and similar tracking technologies.

2. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) or UK GDPR applies, we are required to identify a lawful basis for each processing activity. We rely on the following legal bases:

  • Performance of a Contract (Article 6(1)(b)): Processing your profile data, communications, listings, and billing information is necessary to deliver the Platform services you have subscribed to and to fulfil our contractual obligations to you.
  • Consent (Article 6(1)(a)): Where we rely on your consent — such as for marketing communications via Mailchimp or for non-essential cookies and analytics — you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
  • Legitimate Interests (Article 6(1)(f)): We process usage and technical data, conduct fraud detection, perform security monitoring, and improve the Platform on the basis of our legitimate interests in operating a secure and functional service. We have assessed that these interests are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interests at any time.
  • Legal Obligation (Article 6(1)(c)): We may process and retain certain data where required to comply with applicable law, including tax, accounting, anti-money laundering, and regulatory obligations.

3. How We Use Your Information

We process personal information for the following purposes:

  • To deliver, operate, and continuously improve the Platform and its modules, including Messaging, Listings, Requirements, Jobs, Comps, Drive, and Research;
  • To facilitate professional networking, secure communications, and company page engagement among CRE professionals;
  • To power AI-assisted matching between investor and tenant requirements and available property listings;
  • To generate market analytics, transaction insights, and research outputs;
  • To process payments, manage billing cycles, and administer subscription accounts;
  • To detect, investigate, and prevent fraudulent activity, policy violations, and security incidents;
  • To comply with applicable legal obligations and respond to lawful requests from regulatory or governmental authorities.

4. Disclosure of Information

We do not sell, rent, or trade personal information to third parties. We may share information with trusted service providers who process data on our behalf under contractual data processing agreements, including:

  • Infrastructure and Hosting: Vercel, Google Cloud, Cloudflare;
  • Real-Time Communications: Ably (notifications), LiveKit (video and voice);
  • Analytics and Monitoring: Google Analytics, Vercel Analytics, Sentry;
  • Marketing and Communications: Mailchimp;
  • Payment Processing: Stripe, Paddle.

We may also disclose personal information where required by law, court order, or regulatory authority, or where necessary to protect the rights, property, or safety of Invest.Lease, its users, or the public.

5. Social Login (Google & LinkedIn)

When you choose to authenticate using Google or LinkedIn, we receive only the profile information you have authorized those platforms to share. We do not access your passwords or any data beyond what is necessary for account creation and authentication. Information received through social login is used exclusively for the purpose of verifying your identity and linking your account, and is handled in accordance with this Policy.

6. Cookies and Tracking Technologies

We use cookies, pixel tags, and similar technologies to support Platform functionality, personalize your experience, and gather aggregated usage analytics. We categorize cookies as follows:

  • Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without impairing core functionality.
  • Analytics Cookies: Used to understand how users interact with the Platform — including pages visited, session duration, and feature usage — through providers such as Google Analytics and Vercel Analytics. These are only set with your consent where required by law.
  • Marketing and Preference Cookies: Used to deliver relevant communications and remember your preferences. These are only activated with your explicit consent.

You may manage your cookie preferences at any time through our cookie consent banner or your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform, including remaining logged in. Withdrawing consent for analytics or marketing cookies will not affect your access to core features.

7. Drive and File Storage

Documents and files uploaded to the Drive module may contain commercially sensitive or confidential information. All files are encrypted both in transit and at rest using industry-standard protocols. Access to stored files is governed by permission-based controls that you configure. You are solely responsible for ensuring that you hold the necessary rights to upload any file and that doing so does not breach any confidentiality, non-disclosure, or intellectual property obligation.

8. Comps and Contributed Transaction Data

When you contribute transaction comparable data ("comps") to the Platform, we aggregate and anonymize such data to the greatest extent practicable before using it in research outputs or market analytics. By submitting comps, you grant Invest.Lease a non-exclusive, worldwide, royalty-free license to use, analyze, and distribute aggregated and anonymized insights derived from that data. We will not attribute or link contributed comps data to you individually in any external publication.

9. Data Retention

We retain personal information for as long as your account remains active or as otherwise required to fulfill the purposes described in this Policy. The following general retention periods apply:

  • Account and Profile Data: Retained for the duration of your account and deleted within 90 days of account closure, unless a longer period is required by law.
  • Billing and Transaction Records: Retained for a minimum of 7 years to comply with tax and accounting obligations.
  • Communications and Messages: Retained for the duration of your account. End-to-end encrypted messages are not accessible to Invest.Lease and are stored solely for delivery purposes.
  • Usage and Technical Logs: Retained for up to 12 months for security monitoring and performance analysis.

Where retention is no longer required or legally justified, we will securely delete or irreversibly anonymize the data.

10. International Data Transfers

Invest.Lease operates globally, and your personal information may be processed and stored in jurisdictions outside your country of residence, including Canada, the United States, and the European Economic Area. Where such transfers involve personal data originating from the EU or UK, we apply appropriate safeguards — such as Standard Contractual Clauses approved by the European Commission — to ensure an adequate level of data protection consistent with applicable law.

11. Security

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include end-to-end and at-rest encryption, role-based access controls, continuous monitoring, and periodic security reviews. Notwithstanding these measures, no data transmission or storage system is entirely secure. Users are encouraged to exercise care when sharing sensitive information and to use strong, unique credentials for their accounts.

12. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Invest.Lease will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with our obligations under GDPR Article 33. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay, describing the nature of the breach, the data affected, the likely consequences, and the measures we have taken or propose to take to address it. In the event of a breach, you may contact us at support@invest.lease.

13. Your Privacy Rights

Subject to applicable law, you may have the right to:

  • Access: Request a copy of the personal information we hold about you;
  • Rectification: Request correction of inaccurate or incomplete data;
  • Erasure: Request deletion of your personal information, subject to legal retention requirements;
  • Restriction: Request that we limit the processing of your data in certain circumstances;
  • Portability: Request a structured, machine-readable copy of your data where technically feasible;
  • Objection: Object to processing based on legitimate interests or for direct marketing purposes;
  • Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

Residents of the European Union and United Kingdom may exercise these rights under the General Data Protection Regulation (GDPR) or UK GDPR. To submit a privacy request, please contact us at support@invest.lease. We will respond within 30 days, or such shorter period as required by applicable law. We may need to verify your identity before processing your request.

14. Children's Privacy

The Platform is intended exclusively for use by individuals aged 18 and over. We do not knowingly collect or solicit personal information from individuals under the age of 16. If we become aware that we have inadvertently collected data from a minor, we will take prompt steps to delete that information. If you believe a minor has provided us with personal information, please contact us immediately at support@invest.lease.

15. Changes to This Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Platform features. In the event of a material change, we will provide advance notice via a prominent Platform notification or email to the address associated with your account. Your continued use of the Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

16. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our privacy team at support@invest.lease.