Fully Leased

Privacy Policy

Last updated: August 2026

1. Introduction

Fully Leased, operated by EHO TECH LLC ("we," "us," or "our"), is a property management platform for landlords and property managers, and provides a tenant portal for tenants of participating landlords. This Privacy Policy explains how we collect, use, and protect information in connection with our services, including online rent payments, document processing, and email and SMS communications sent to tenants on behalf of landlords using our platform.

2. Information We Collect

We collect the following types of information:

  • Account information: name, email address, and password of registered landlords, property managers, and tenants who activate a tenant portal account. If you sign in with Google, we receive your name, email address, and profile picture from Google
  • Organization and team information: the portfolios you create, team members you invite, their roles and access levels, and invitation records
  • Property information: property addresses, unit details, lease terms, rent schedules and escalations, and CAM or other recurring charges entered by landlords
  • Tenant information: tenant and applicant names, email addresses, phone numbers, vehicle information, emergency contacts, application details, and lease details entered by landlords or provided by tenants through the tenant portal
  • Payment information: rent payment amounts, payment dates, payment status, and transaction records. Card numbers and bank account details are collected and processed directly by our payment processor, Stripe — we never store full card or bank account numbers on our servers
  • Bank connection data: if a landlord links a bank account for deposit reconciliation, we receive account metadata (institution name, account nickname, last four digits) and transaction records from that account through Stripe Financial Connections
  • Electronic signature data: signer name, email address, signature image or typed signature, timestamps, IP address, and user-agent captured as part of the signature audit trail for leases signed through the platform
  • Screening records: background, credit, or tenant screening reports that a landlord obtains from a third-party consumer reporting agency and chooses to upload to an applicant's record. Fully Leased does not run screening checks and is not a consumer reporting agency
  • Communication data: records of notices, emails, SMS messages, in-app messages between landlords and tenants, and physical mail sent through the platform
  • Billing data: subscription plan, billing interval, invoice history, promotional codes, and prepaid communications credit balances and usage
  • Activity and audit logs: records of significant actions taken in your account, including who performed them and when
  • Usage data: log data, IP addresses, browser type, and pages visited
  • Uploaded documents: lease agreements, amendments and renewals, supporting or reference documents (permits, insurance certificates, inspection reports, notices, correspondence), tenant applications, and other files uploaded by landlords or tenants

3. How We Use Your Information

We use collected information to:

  • Provide and operate the Fully Leased platform, including the landlord dashboard and tenant portal
  • Process online rent payments, reconcile bank deposits against expected rent, and maintain payment history
  • Send property management communications on behalf of landlords, including SMS messages, emails, and physical mail notices to tenants
  • Extract and organize information from uploaded documents using AI-assisted processing (see Section 5)
  • Prepare, send, and record electronic signatures on lease documents, including maintaining a signature audit trail
  • Store and manage lease, amendment, renewal, supporting-document, applicant, and tenant records
  • Facilitate messaging between landlords and tenants, and generate reports and exports you request
  • Administer subscriptions, invoices, and prepaid communications credits, and detect or prevent fraud and abuse
  • Maintain audit logs and secure the platform
  • Improve platform functionality and user experience
  • Comply with legal obligations

4. Payments

Online rent payments are processed by Stripe, Inc. ("Stripe"). When you pay rent through the platform, your card or bank account details are transmitted directly to Stripe and are subject to the Stripe Privacy Policy. We receive and retain transaction metadata (amount, date, status, payment method type, and applicable convenience fees) to maintain your payment history. Landlords receive rent payouts through Stripe Connect accounts; Fully Leased does not hold tenant funds.

5. AI-Assisted Document Processing

We use artificial intelligence to process data you upload. When a landlord or tenant uploads a document (such as a lease agreement, amendment, or rental application), or when a tenant uses features that read lease terms, the document text and images are sent to an AI model to extract relevant information — for example, rent amount, escalations, due dates, late fees, security deposit, property and unit addresses, tenant names, and contact details.

AI processing is performed through the Lovable AI Gateway using Google Gemini models. Only the document contents and the extraction prompt are transmitted; the data is used solely to return the extraction result to your account and is not used to train AI models. Extracted results are stored on your account records so they don't need to be re-processed. AI output can be inaccurate — it is provided for convenience and should always be verified against the original document. No automated decision with legal effect (such as approving or denying an applicant) is made by AI on our platform.

6. Electronic Signatures

Leases and related documents can be sent for electronic signature through the platform. When you sign electronically, we record your name, email address, the signature you draw or type, the date and time of each action (opened, viewed, signed, declined), your IP address, and your browser user-agent. This information forms the signature audit trail attached to the executed document and is retained with the lease record as evidence of execution. Signature links are time-limited and unique to each signer.

7. Bank Connections and Deposit Reconciliation

Landlords may optionally link a bank account through Stripe Financial Connections so the platform can match incoming deposits to expected rent. Bank login credentials are entered directly with your financial institution through Stripe and are never seen or stored by Fully Leased. We receive account metadata and transaction details (date, amount, description) used solely for reconciliation and reporting inside your account. You can disconnect a linked account at any time from payment settings, which stops future transaction retrieval.

8. Applicant Screening Records

Fully Leased does not perform background, credit, or eviction checks and is not a consumer reporting agency. Landlords who run screening through a third-party provider may upload the resulting report to an applicant's record for their own recordkeeping. Screening reports are consumer reports, and a landlord's collection, use, retention, and disposal of them is subject to the Fair Credit Reporting Act (FCRA), applicable state screening laws, and fair housing requirements. Landlords are responsible for obtaining applicant authorization, providing any required adverse action notices, and restricting access to these reports. Uploaded reports are stored in private storage and are visible only to users with access to that portfolio; they are never shown in the tenant portal.

9. Google Account Data and Gmail Integration

Landlords may optionally connect their Gmail account to send tenant communications from their own email address and to display tenant replies inside the platform's Messages inbox. If you connect Gmail, we access only what is needed to provide these features: permission to send email on your behalf and read-only access to related message threads. We store the OAuth tokens needed to maintain the connection; you can disconnect at any time, which revokes our access.

Fully Leased's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google account data is never sold, never used for advertising, and never used for any purpose other than providing the features described above.

10. SMS Communications

Fully Leased uses Twilio to send SMS text messages to tenants on behalf of landlords. SMS messages sent through our platform are transactional and informational in nature and may include rent payment reminders, maintenance updates, lease expiry notices, and other property management communications.

  • SMS messages are only sent to tenants who have provided explicit written consent to receive text messages
  • Tenant phone numbers are used solely for property management communications and are never shared with third parties for marketing purposes
  • Tenants may opt out of SMS communications at any time by replying STOP to any message
  • Message and data rates may apply
  • For help, tenants may reply HELP to any message

11. How We Share Your Information

We do not sell, rent, or share personal information with third parties for marketing purposes. We may share information with:

Named third-party service providers who receive or process data on our behalf, under confidentiality and data-processing terms:

  • Supabase — database, authentication, and encrypted document storage (hosting infrastructure for the platform)
  • Lovable — application hosting and the Lovable AI Gateway used for AI document processing
  • Google — sign-in with Google, optional Gmail integration, address autocomplete, and the Gemini AI models used for document extraction (accessed through the Lovable AI Gateway)
  • Stripe, Inc. — rent and subscription payment processing, payouts, and Financial Connections bank data
  • Twilio — SMS delivery to tenants
  • Resend — transactional and notice email delivery
  • Lob — physical mail delivery, where a landlord chooses to send printed notices
  • Tenant screening agencies — Fully Leased does not run screening checks and is not a consumer reporting agency. If a landlord uses an outside screening provider (for example CTCredit or a similar consumer reporting agency), that relationship is between the landlord and that provider; we only store the resulting report if the landlord uploads it to an applicant record

We may also share information with:

  • Other members of your organization or portfolio whom you or your account owner have invited, according to the role and access level assigned to them
  • Counterparties to a document you sign electronically, who receive the executed document and its signature audit trail
  • Your landlord or property manager (for tenants) and your tenants (for landlords), to the extent needed to provide the platform — for example, payment status, messages, and notices
  • Law enforcement or regulatory authorities when required by applicable law
  • Successor entities in the event of a merger or acquisition, with prior notice to users

12. Data Retention

We retain account and tenant data for as long as a landlord account remains active. Upon account deletion, data is removed within 30 days, except where longer retention is required by law. Communication logs, audit logs, and payment records are retained for up to 3 years to comply with landlord-tenant and financial record-keeping requirements. Executed leases and their signature audit trails are retained for the life of the account record so they remain available as evidence of execution. Landlords control how long screening reports and other uploaded documents remain in their account and may delete them at any time.

13. Data Security

We implement industry-standard security measures including encrypted data storage, secure HTTPS connections, and role-based access controls. All data is stored with row-level security ensuring each landlord can only access their own data and each tenant can only access their own records. Uploaded documents are stored in private storage accessible only through time-limited secure links.

14. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your information
  • Opt out of SMS communications by replying STOP, and unsubscribe from non-essential emails using the link in those emails
  • Disconnect a linked Google account at any time
  • Disconnect a linked bank account at any time from payment settings
  • Lodge a complaint with a supervisory authority

Tenants: much of the information about your tenancy is entered and controlled by your landlord or property manager, who acts as the controller of that record. We will forward access, correction, or deletion requests relating to that data to your landlord and assist them in responding.

California residents have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information is collected, the right to delete or correct personal information, the right to limit the use of sensitive personal information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, and we do not use your information for targeted advertising. You will not be discriminated against for exercising these rights. To exercise a right, email [email protected].

15. Children's Privacy

Our platform is not directed at children under 13. We do not knowingly collect personal information from children.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

[email protected]