Legal

Privacy Policy

Last updated: July 2026

1. Who we are

LeaseIntel is a service operated by Geoff Money Ltd, a company registered in England & Wales (company number 16677970), with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

Geoff Money Ltd is the data controller for personal data processed through LeaseIntel. LeaseIntel is an independent service and is not affiliated with or endorsed by HM Courts & Tribunals Service, the First-tier Tribunal (Property Chamber), GOV.UK or the Leasehold Advisory Service.

Contact: leaseintel@geoff.money. To report an issue or exercise a data-protection right, see the Corrections & Privacy Requests page.

2. Categories of personal data

Depending on how you use LeaseIntel, we may process the following categories of personal data:

  • Contact data — name and email address where you provide them, and the content of any correspondence you send us.
  • Benchmark inputs — property address, postcode, lease length, ground rent and other lease details you enter into our forms.
  • Uploaded lease documents — the file itself and information extracted from it (see section 4).
  • Payment data — payment email and the transaction identifiers returned by Stripe. LeaseIntel does not store full card details.
  • Report data — the extracted fields, AI-derived output and generated report content associated with your submission.
  • Technical data — IP address, browser type, device information and pages visited, from server logs and, with your consent, analytics tools.

3. Sources

Personal data is obtained directly from you (through forms, uploads, correspondence and payment), automatically from your device (server logs and, subject to consent, analytics), and — for the LeaseIntel tribunal dataset — from published sources listed on the Sources & Attribution page.

4. Uploaded lease documents and extracted information

LeaseIntel distinguishes between two things when you upload a lease document:

A. Raw uploaded document bytes

The uploaded file itself is processed in memory to extract the information needed for your benchmark, and is discarded after processing. LeaseIntel does not maintain a searchable archive of uploaded lease documents.

B. Extracted and submitted information

Information derived from the upload — including filename, address, postcode, lease details, other form inputs, extracted fields, AI-generated output, payment email and the resulting report record — is retained in the LeaseIntel database so that reports can be generated, delivered and re-issued. No automatic deletion schedule is currently configured for these records, and information is not automatically purged after a fixed period. You may ask us to delete a specific record at any time through the Corrections & Privacy Requests page. Each request is considered against applicable data-protection requirements and any overriding legal, accounting or fraud-prevention obligations; where those obligations require us to retain information we will tell you. Deletion from provider-side backups is subject to each provider's own backup rotation and is not instantaneous.

C. Retention

We retain personal data only while it is reasonably required for the purpose for which it was collected, to provide or re-issue reports, to respond to requests, to protect the service and to comply with legal, accounting, fraud-prevention or dispute-resolution requirements. Specific retention periods are under review and will be introduced before material customer processing begins.

5. Purposes of processing

  • Generate and deliver lease extension benchmark reports.
  • Extract structured information from uploaded lease documents.
  • Respond to enquiries and provide customer support.
  • Take payment and issue receipts.
  • Maintain the security, integrity and availability of the service.
  • Improve accuracy, performance and usability.
  • Comply with legal, regulatory and accounting obligations.

We do not sell your personal information.

6. Lawful bases

We rely on different lawful bases depending on the activity:

  • Steps before entering into a contract and performance of a contract — to process benchmark requests, generate reports, take payment and deliver purchased services.
  • Legitimate interests — to operate, secure and improve LeaseIntel; prevent fraud and misuse; respond to enquiries; and use appropriately minimised published tribunal information for research and benchmarking.
  • Legal obligation — where information must be retained or disclosed for tax, accounting, regulatory or legal purposes.
  • Consent — for Google Analytics 4 and Microsoft Clarity.

Where we rely on legitimate interests, those interests include operating an accurate and secure benchmarking service, maintaining evidence of published tribunal outcomes and improving the service. We assess whether those interests are necessary and balanced against the rights and interests of the people concerned.

7. Processors and service providers

LeaseIntel uses the following third-party service providers. The specific processors engaged at any time are subject to change, and this list is updated as changes occur.

  • Lovable — frontend and runtime hosting platform. Runs the site on Cloudflare's global edge infrastructure and serves static assets from Cloudflare R2 object storage.
  • Railway — backend processing infrastructure for report generation.
  • Supabase — application database for benchmark inputs, extracted fields and report records.
  • Stripe — payment processing. Full card details are handled by Stripe and are not stored by LeaseIntel.
  • Anthropic — AI processing of uploaded lease documents to extract structured information.
  • Resend and SendGrid — transactional email delivery for reports and support correspondence.
  • Google Analytics 4 and Microsoft Clarity — usage analytics and session replay, loaded only after you provide analytics consent through our cookie banner.
  • Lovable — frontend and runtime hosting platform. Lovable injects a platform analytics script into hosted pages. LeaseIntel currently applies a client-side privacy control that blocks this script from transmitting page-view or web-vital telemetry to Lovable's analytics endpoint or Tinybird.

8. Artificial intelligence

LeaseIntel uses the Anthropic API, which is supplied under Anthropic's Commercial Terms, to process uploaded lease documents and assist with categorisation, summarisation and narrative content in reports. AI outputs may contain errors and are subject to review.

Anthropic states that inputs and outputs from its commercial products are not used to train its models by default unless the customer expressly opts in or provides material as feedback. Under Anthropic's standard API retention arrangements, inputs and outputs are generally deleted from Anthropic's backend within 30 days, subject to legal, safety and separately agreed exceptions.

LeaseIntel does not use uploaded documents to train its own general-purpose models.

9. Analytics

Google Analytics 4 and Microsoft Clarity are used only after you provide analytics consent through our cookie banner. Rejecting non-essential cookies keeps both off, and you may withdraw consent at any time via the “Cookie settings” link in the footer.

Lovable may inject a platform analytics script as part of its hosting service. LeaseIntel currently blocks that script from transmitting page-view and web-vital telemetry. This control is rechecked after frontend deployments and hosting-platform changes.

10. Data security and international transfers

We take reasonable technical and organisational measures to protect personal information. LeaseIntel is served on Cloudflare's global edge network via the Lovable hosting platform, and some processors (including Stripe, Anthropic, Resend, SendGrid, Google and Microsoft) may process data outside the United Kingdom. Some service providers may process personal data outside the United Kingdom. Where this occurs, transfers are governed by the provider terms and data-processing arrangements applicable to the relevant service. Further information about applicable safeguards may be requested from us.

Server logs and provider backups may retain limited data for operational, security and billing purposes for the periods set by each provider.

11. Tribunal-source personal data

The LeaseIntel dataset includes information from published First-tier Tribunal decisions, which can contain personal data such as property addresses, applicant and respondent names and, in some cases, financial details. The LeaseIntel dataset is derived from published tribunal sources. Publication by the originating body does not remove our data-protection responsibilities. LeaseIntel limits the information it displays, removes unnecessary dwelling-level detail from indexable research pages and uses tribunal information for research and benchmarking under the lawful basis described above. Individual tribunal decision detail pages carry a noindex, follow instruction to ask compliant search engines not to index them.

Uploaded documents or published tribunal records may occasionally contain information that is more sensitive than LeaseIntel needs, including health or vulnerability information. LeaseIntel does not intentionally use such information for benchmarking. Where identified, unnecessary sensitive information is excluded, minimised or suppressed.

If a decision is corrected, withdrawn, replaced or anonymised at source, please tell us via the Corrections & Privacy Requests page and we will update or remove the corresponding LeaseIntel record. The source publisher's version remains the authoritative record.

12. Search-engine indexing controls

You may ask us to remove a specific LeaseIntel page from our own search results, and you may ask us to add a page to our list of URLs marked to be excluded from external search engines. Use the Corrections & Privacy Requests page.

13. Your rights

Subject to applicable law, you may have rights to:

  • request access to your personal information;
  • request correction of inaccurate information;
  • request deletion where applicable;
  • restrict or object to certain processing;
  • request a portable copy of information you have provided;
  • withdraw consent, where processing is based on consent;
  • lodge a complaint with the UK Information Commissioner's Office (ICO).

Requests can be sent to leaseintel@geoff.money or made via the Corrections & Privacy Requests page. We aim to acknowledge requests promptly. Statutory data-protection requests are handled within the applicable legal timeframe.

14. Authoritative sources

For the source archives underpinning the LeaseIntel dataset and applicable licensing, see the Sources & Attribution page.

15. Changes

We may update this Privacy Policy from time to time. The latest version will always appear on this page.