Privacy Policy

iLease Management LLC ("we," "us," or "our") is committed to protecting your privacy and maintaining the security of your information. This Privacy Policy describes how we collect, use, store, and protect information when you use our lease accounting and management software services.

This policy applies to all users of iLeasePro services, including our website, software applications, and related services. We are committed to compliance with applicable US privacy laws, including the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), Colorado Privacy Act (CPA), Connecticut Data Privacy Act (CTDPA), and Utah Consumer Privacy Act (UCPA).

Customer Data Ownership

Information Categories

We collect the following categories of information:

Sensitive Information

We may collect limited sensitive information including:

• Financial account numbers (for payment processing)
• Government-issued identification numbers

We use your information for the following business purposes:

Service Provision

• Providing lease accounting and management software services
• Processing financial calculations and generating reports
• Maintaining user accounts and authentication
• Facilitating data import and export functions

Communication and Support

• Responding to customer inquiries and providing support
• Sending service-related notifications and updates
• Providing training and implementation assistance
• Communicating about new features and services

Business Operations

• Processing payments and managing billing
• Improving our services and user experience
• Conducting analytics and performance monitoring
• Ensuring security and preventing fraud

Legal and Compliance

• Complying with applicable laws and regulations
• Responding to legal requests and court orders
• Protecting our rights and preventing misuse
• Conducting audits and investigations when necessary

We process information based on the following legal grounds under US law:

We do not sell your information. We may share your information in the following limited circumstances:

Service Providers

We share information with trusted third-party service providers who assist in delivering our services, including:

• Cloud hosting and infrastructure providers
• Payment processing companies
• Customer support platforms
• Analytics and monitoring services

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to appropriate confidentiality protections.

Legal Requirements

We may disclose information when required by law, including:

• Responding to subpoenas, court orders, or legal processes
• Protecting our rights, property, or safety
• Investigating potential violations of our terms of service
• Complying with regulatory requirements

Our service may integrate with and use various third-party providers. Each has their own privacy practices:

Opt-Out Options

You can opt-out of certain third-party services:

• Google Analytics: Use browser add-ons or privacy settings
• Marketing Emails: Unsubscribe links in all emails
• Optional Integrations: Disable in your account settings

To deliver our lease accounting services, we work with trusted third-party processors who handle your information under strict contractual obligations:

Key Sub-Processors

• Amazon Web Services (AWS): Cloud infrastructure and hosting services
• Sage Intacct: ERP integration for financial data synchronization
• QuickBooks: Accounting system integration for lease data management
• AI Processing Engines: Automated lease document analysis and data extraction
• Payment Processors: Secure billing and subscription management
• Analytics Providers: Service performance monitoring and improvement

Sub-Processor Obligations

All sub-processors are bound by data processing agreements that require them to:

• Process information only as instructed by iLease Management
• Implement appropriate technical and organizational security measures
• Maintain strict confidentiality of your business information
• Delete or return information upon contract termination
• Undergo regular security assessments and audits

We maintain an updated list of sub-processors and will notify business customers of any material changes to our sub-processor arrangements through our normal communication channels.

We implement comprehensive security measures to protect your information:

Technical Safeguards

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Access Controls: Multi-factor authentication and role-based permissions
• OAuth: Secure authorization protocols for third-party integrations
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Updates: Security patches and software updates

Administrative Safeguards

• Employee Training: Regular security and privacy training
• Background Checks: Screening for employees with data access
• Access Limitations: Need-to-know basis for data access
• Incident Response: Established procedures for security events

Physical Safeguards

• AWS Cloud Infrastructure: Enterprise-grade data centers with 24/7 physical security
• Data Processing Locations: Primary data processing occurs in US-East-1 (Virginia) and US-West-2 (Oregon) AWS regions, with all data remaining within the United States
• Multi-Region Architecture: Distributed infrastructure for resilience and availability across multiple US-based AWS availability zones
• Data Residency Guarantee: Customer data is stored and processed exclusively within the United States and is not transferred to international locations
• Hardware Security: AWS-managed secure disposal and data sanitization
• Environmental Controls: Climate-controlled facilities with redundant power systems

Compliance Certifications

• AICPA SOC 1 Type 2: Annual certification for financial reporting controls and operational effectiveness

Healthcare Industry Support

For healthcare customers managing real estate and equipment leases who may be subject to HIPAA requirements, we offer Business Associate Agreements (BAAs) upon request. Healthcare organizations can contact us at support@ileasepro.com to discuss BAA requirements and ensure appropriate protections for protected health information (PHI) related to your lease management activities.

Business Continuity and Disaster Recovery

We maintain comprehensive business continuity measures to ensure service availability and data protection:

• Automated Backups: Daily encrypted backups with 30-day retention, stored across multiple AWS availability zones
• Real-Time Replication: Continuous data replication to geographically separated AWS regions within the United States
• Recovery Time Objective (RTO): Service restoration within 4 hours of any major outage
• Recovery Point Objective (RPO): Maximum 1-hour data loss in worst-case scenarios
• Incident Response: 24/7 monitoring with automated failover capabilities
• Business Continuity Testing: Quarterly disaster recovery drills and annual business continuity plan reviews
• Communication Protocol: Immediate customer notification through multiple channels during service interruptions

We retain information for specific periods based on the type of data and business needs:

Extended Retention

We may retain information longer when required by law, for legal proceedings, or to protect our legitimate interests. We will notify you if extended retention is necessary.

As a business customer, you have important rights regarding your account and business information.

How to Exercise Your Rights

To exercise these rights, you may:

• Email us at support@ileasepro.com
• Use the account management tools in your dashboard
• Contact our support team at 1-888-351-4606

Response Timeline

We will respond to verified requests within:

• Account Access/Updates: Immediate via dashboard
• Data Export Requests: 5 business days
• Account Closure: 30 days
• Legal Compliance Requests: As required by applicable law

Enterprise Customers

Verification Process

To protect your privacy, we must verify your identity before processing requests. This may require:

• Account credentials and security questions
• Government-issued identification for sensitive requests
• Additional verification for third-party requests

We comply with US state privacy laws that provide rights to business users and their authorized representatives.

Business Data Rights

Business Information Protection

We do not "sell" business information as defined under state privacy laws. We do not exchange your business data for monetary consideration with third parties.

Business Use of Information

We limit the use of business information to:

• Providing requested lease accounting and management services
• Ensuring security and system integrity
• Legal compliance and financial reporting obligations
• Service quality assurance and improvement

Our software provides automated lease calculations and compliance reporting to help streamline your accounting processes.

Automated Features

User Control

You maintain complete control over all automated processes:

• All automated calculations can be reviewed and modified
• Users can override automated recommendations
• Human review and approval required for final reporting
• Customer support available for assistance with automated features

We maintain comprehensive procedures to detect, respond to, and notify affected parties of data security incidents.

Incident Detection and Response

Notification Timeline

In the event of a data breach affecting your information:

• User Notification: Within 72 hours of discovery (unless law enforcement requests delay)
• Regulatory Notification: Within 72 hours to relevant authorities
• Documentation: Detailed incident reports maintained for compliance
• Follow-up: Additional communications as investigation progresses

Breach Notification Content

Our breach notifications will include:

• Description of the incident and timeline
• Types of information potentially affected
• Steps we are taking to address the incident
• Recommended actions for affected users
• Contact information for questions and support

We use cookies and similar tracking technologies to enhance your experience and improve our services.

Types of Cookies We Use

Cookie Management

You can control cookies through:

• Browser Settings: Most browsers allow cookie management
• Opt-Out Tools: Industry opt-out mechanisms
• Privacy Settings: Account-level preferences
• Third-Party Tools: Ad blocking and privacy extensions

Third-Party Cookies

Some third-party services may set their own cookies:

• Google Analytics: Website usage analytics
• Customer Support: Live chat and help desk functionality
• Payment Processors: Secure payment processing

Note: Disabling certain cookies may limit functionality of our services.

Conflict Resolution

In the event of conflicts between this Privacy Policy and applicable state or federal laws:

• Legal requirements will take precedence where mandatory
• We will make reasonable efforts to comply with all applicable requirements
• Users will be notified of any material conflicts or limitations
• Alternative dispute resolution may be available in certain jurisdictions

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings.

Types of Changes

Notification Process

We will notify you of privacy policy changes through:

• Email Notification: For material changes affecting your account
• In-App Notifications: Prominent notices in your account dashboard
• Website Banner: Notice on our website for 30 days
• Account Messages: Direct communication through your account

Effective Date

Changes become effective:

• Material Changes: 30 days after notification
• Non-Material Changes: Immediately upon posting
• Legal Requirements: As required by applicable law

Continued use of our services after the effective date constitutes acceptance of the updated Privacy Policy.