Privacy Policy

1. Introduction

Lease102 (“we”, “our”, “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our FRS 102 lease accounting platform.

2. Data Controller

The data controller for personal data processed through the Service is:

Lease102 is a trademark of Argonavis AI Ltd. We are registered in England and Wales and comply with the UK GDPR and Data Protection Act 2018.

3. Data We Collect

We collect the following categories of personal data:

• Account Information: Name, email address, company name, role
• Usage Data: Login times, features used, actions taken
• Financial Data: Lease details, payment schedules, calculations (owned by you)
• Technical Data: IP address, browser type, device information
• Resource Downloads: Name and email address when downloading guides, reports, or other educational resources

4. How We Use Your Data

We use your personal data for the following purposes:

• Providing and improving the Service
• Processing payments and managing subscriptions
• Sending service notifications and updates
• Responding to support requests
• Ensuring security and preventing fraud
• Providing educational resources and content
• Marketing communications (with your explicit consent)
• Complying with legal obligations

5. Legal Basis for Processing

We process your data based on:

• Contract: To provide the Service you've subscribed to
• Legitimate Interests: To improve our services and ensure security
• Legal Obligation: To comply with applicable laws
• Consent: For optional features like AI document extraction, downloading gated resources, and receiving marketing communications

6. Data Sharing

We may share your data with:

• Service Providers: Hosting (Railway, Vercel), payments (Stripe), email (Resend)
• AI Processing: Anthropic (for document extraction, if enabled)
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal data to third parties.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion, we retain data for up to 7 years for legal and regulatory compliance (accounting records), after which it is securely deleted.

8. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Export your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data

You can exercise your data portability right directly from your Account Settings using the “Export My Data” feature.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS) and at rest
• Regular security assessments
• Access controls and authentication
• Audit logging of all data access

10. International Transfers

Your data may be processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

11. Cookies

We use essential cookies to operate the Service (e.g., authentication tokens). We do not use tracking or advertising cookies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Argonavis AI Ltd is registered with the Information Commissioner's Office. Registration reference: ZC102898.

You also have the right to lodge a complaint with the ICO at ico.org.uk