Private by default. Permissioned by exception.
LeaseLever holds as little about you as possible, keeps it only while it is useful, and shows Passport information only through links you deliberately create.
Who we are
LeaseLever is the data controller for the information described here. Contact us at hello@leaselever.ie. We operate in Ireland and our data is stored in the European Union.
What we collect and why
- Account details
- Your name and email address, so you can sign in and so a landlord knows whose Passport they are reading.
- Tenant Passport details
- What you choose to enter: a short biography, current employment and income band, optional household information, eligibility self-declaration and contact preferences. Every field is optional except your name.
- Rental history
- Town and county only, never a street address, with tenancy dates, property type and occupancy type.
- Reference answers
- Four yes/no answers from a former landlord or agent, plus their role. No written commentary is collected or stored.
- Verification outcomes
- The result of a check carried out by an accredited provider: what was checked, whether it passed, who checked it and when it expires.
- Share links
- The label you give a link, its expiry, whether it was opened and how many times. Link tokens and access codes are stored only as one-way hashes.
- Product usage counts
- Nine anonymous counts, such as a Passport being completed or a link being opened, stored against a one-way fingerprint that cannot be reversed to you.
What we never collect
- Identity documents, passports or driving licences
- Bank statements, payslips or tax statements
- Utility bills, tenancy agreements or employment contracts
- Credit scores, tenant scores or rankings of any kind
- Tracking across other websites, advertising profiles or behavioural profiling
Our lawful bases
- Contract: creating your account, building your Passport and generating the links you ask for.
- Consent: joining the waitlist, and asking a former landlord or agent to answer four yes/no questions.
- Legitimate interests: keeping the service secure, rate-limiting abuse, and counting anonymous product usage so we can improve the product.
Who can see your Passport
Only you, and anyone you personally send a link to. There is no directory, no search, no public profile and no scoring. Links are never indexed by search engines, expire within 14 days, can carry an access code and can be revoked at any moment. An invalid, expired or revoked link reveals nothing at all.
How long we keep things
Account and Tenant Passport
Needed to give the tenant the reusable Passport they signed up for.
Kept for: While the account is in use; dormant accounts are reviewed after 18 months and erased after 24 months of inactivity.
Deleted when: The tenant deletes their account, or 24 months pass with no sign-in or change.
Share links
Needed to let a landlord open the Passport the tenant chose to send.
Kept for: Maximum 14 days of access, then deleted 30 days after expiry or revocation.
Deleted when: The link expires, or the tenant revokes it.
Reference requests to landlords and agents
Needed to ask a former landlord or agent four yes/no questions.
Kept for: 14 days to answer; deleted 30 days after the answer or the expiry.
Deleted when: The referee answers, the request lapses, or the referee asks to be forgotten.
Verification outcomes
Needed to show a landlord which checks an accredited provider has completed.
Kept for: Until the outcome expires, then 12 months at most.
Deleted when: The expiry date on the outcome passes.
Waitlist sign-ups
Needed to contact people who asked to be told when LeaseLever opens.
Kept for: 12 months.
Deleted when: 12 months pass from the sign-up date.
Product usage counts
Needed to see which steps of the product work and which do not.
Kept for: Fingerprint removed after 90 days; the count itself deleted after 12 months.
Deleted when: 90 days and 12 months from the event.
Audit log and rate-limit records
Needed to detect abuse of share links and to evidence privacy actions.
Kept for: Rate-limit records 7 days; audit entries 12 months.
Deleted when: The retention period passes.
Deletion runs automatically every night. After an account is deleted we keep only an anonymous record that a deletion happened, it contains no personal information and cannot be linked back to you.
Your rights
- Access and portability
- Download everything we hold in one click from your dashboard.
- Correction
- Edit any Passport field at any time; corrections take effect on live links immediately.
- Erasure
- Delete your account from your dashboard. Every record is removed and every link stops working at once.
- Control of sharing
- Each link is private, expires within 14 days and can be revoked instantly.
- Objection and complaint
- Email hello@leaselever.ie, or complain to the Irish Data Protection Commission.
If you are a landlord or agent
When a tenant asks you to confirm a past tenancy, we hold your email address only to send that one request and to record your four yes/no answers. Your email is erased once you answer or the request lapses, and you can ask to be removed from the request page at any time. Your answers are shown as a tenant's confirmation, never attributed to you by name or contact details.