Privacy policy

Last updated: July 1, 2026. This policy covers LeaseReady and the LeaseReady StreetEasy Capture Chrome extension.

1. Who we are

LeaseReady is a renter-side rental operations service operated by Truvo. We help renters in the New York City market organize their rental packet, track listings, and manage broker outreach. We are not a licensed real estate broker and we do not represent landlords or list apartments. Contact us at contact@gettruvo.com with any privacy questions.

2. What information we collect

We collect the information you provide when creating an account and completing onboarding:

• Account information — email address (used to create your account and send you magic-link sign-ins).
• Renter profile — move-in date, budget, neighborhood preferences, income, employment situation, and guarantor status.
• Identity and financial documents — government-issued photo ID, pay stubs, bank statements, offer letters, tax returns, visa/I-20 documents, and guarantor paperwork that you upload to your document vault. These are sensitive documents and are handled accordingly (see Section 5).
• Listings you import — apartment addresses and details you send into LeaseReady via the Chrome extension, including listing URLs, page titles, visible listing text excerpts, rent, beds, baths, neighborhood, availability, brokerage labels, broker names, profile links, phone numbers, and email addresses when those fields are visible on the page.
• StreetEasy extension activity — authorized submission batch status, final listing URL, timing, submit evidence, confirmation text, error messages, and short message previews used to verify whether an approved inquiry was filled or submitted.
• Usage data — pages visited, feature interactions, and error logs, collected to improve the product. We use Vercel Analytics (cookieless, no cross-site tracking).

3. Chrome extension

The LeaseReady StreetEasy Capture extension has one purpose: connect StreetEasy pages you choose with your LeaseReady account. It runs only on leaseready.gettruvo.com and streeteasy.com.

The extension can:

• Capture visible listing details from StreetEasy pages you open.
• Send those selected listing details to your LeaseReady account.
• Open approved StreetEasy listing pages one at a time in a visible browser tab after you authorize a batch.
• Fill renter-approved inquiry fields such as name, email, phone number, and message body into StreetEasy contact forms.
• Report submission status, confirmation text, errors, page title, final URL, and timing back to LeaseReady so your dashboard can show receipts.

The extension does not read unrelated websites, collect passwords, automate login, solve CAPTCHA, access cookies directly, use remote code, or sell/transfer extension data to third parties. It does not submit a StreetEasy inquiry until you have approved the message in LeaseReady and authorized the batch.

4. Google / Gmail access

LeaseReady connects to Gmail via Google OAuth for two specific purposes:

• Reply sync (read-only). We request Gmail read access to detect when a broker replies to an outreach message we helped you send. This lets us update the status of a listing in your pipeline automatically. We read only the messages relevant to your LeaseReady outreach threads. We do not scan your general inbox.
• Sending outreach (send on approval). We request Gmail send access to deliver broker outreach messages on your behalf. We never send a message without your explicit approval in the LeaseReady interface — every draft must be reviewed and approved (or edited or rejected) by you before it leaves our system. Autonomous sending is not enabled.

You can revoke Gmail access at any time via your Google account permissions page. Revoking access will disable reply sync and outreach sending features but will not delete your account or uploaded documents.

LeaseReady's use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail data for advertising, profiling, or any purpose other than operating the features described above.

5. How we handle your documents

Uploaded documents (government ID, pay stubs, bank statements, offer letters, etc.) are stored in Supabase Storage with the following protections:

• Least-access storage. Files are stored in a private bucket. Only your account can access your own documents. Internal team access is restricted to what is necessary to operate and troubleshoot the service.
• Access-audited links. Viewing a document generates a time-limited signed URL. Each generation is logged.
• Never shared with brokers automatically. Your documents are used internally to calculate your readiness score and to prepare outreach drafts. They are not shared with any broker or third party without your explicit approval on a specific outreach action.
• Deletable on request. You can delete any document at any time from your dashboard. Deletion removes the file from storage immediately and marks the record as deleted in our database. To request deletion of all your data, email contact@gettruvo.com.

6. Where data is stored

All renter data — profiles, documents, listing pipelines, and outreach records — is stored in Supabase (PostgreSQL database and object storage). Supabase infrastructure is hosted on AWS in the United States.

7. Third-party services

• Supabase — database and document storage.
• Vercel — application hosting and cookieless analytics.
• Google — OAuth sign-in and Gmail integration (see Section 4).
• Anthropic / AI providers — AI models are used to generate outreach drafts and review packet readiness. We pass only the information needed for the specific task (e.g., profile summary and listing details for a draft). We do not send your raw documents to AI providers.

8. We do not sell your personal data

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own marketing or commercial purposes. Period.

We also do not use or transfer user data for purposes unrelated to LeaseReady's stated rental-operations purpose, and we do not use or transfer user data to determine creditworthiness or for lending purposes.

9. Data retention

We retain your data for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law (e.g., financial records). Documents are deleted immediately upon your request from the dashboard or on account deletion.

10. Your rights

You can request to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and all associated data.
• Export your data in a portable format.

To exercise any of these rights, email contact@gettruvo.com. We will respond within 30 days.

11. Changes to this policy

We will update this page if our practices change and note a new "last updated" date at the top. For material changes during the pilot, we will notify active users by email.

12. Contact

Privacy questions or data requests: contact@gettruvo.com