Privacy Policy

Effective Date: June 2, 2026

A Quick Plain-English Summary

We built Unilease to help commercial real estate professionals get more out of their leasing experience. To do that, we collect two very different kinds of information, and we handle them in two very different ways:

1. Information about you as a user of Unilease — your name, email, phone, company, billing info, and how you use the Service. This is standard SaaS user data. We protect it, we don't sell it, and you have rights to access and delete it.
2. The documents and content you upload to Unilease — leases, amendments, exhibits, images, floor plans, property information. We treat this as your data, not ours. We process it to deliver the Service. We may use de-identified versions of it to improve our AI and build market intelligence. To the extent such features are available, you can flag specific content as Restricted if you don't want it used for aggregation.

When we run AI on your documents, we send them to AI providers who act as Subprocessors to Unilease for processing. They are bound by contracts that prohibit them from using your content to train their own public models. These providers process your documents under Zero Data Retention terms, which means your content is deleted immediately after processing and is never used to train any AI model.

This document explains all of this in more detail. If you have questions, email privacy@unilease.com.

1. Scope of This Policy

This Privacy Policy describes how Unilease, LLC ("Unilease," "we," "our," or "us") collects, uses, shares, and protects information when you access or use the Unilease platform, including our website, applications, APIs, and related services (collectively, the "Service").

This Policy applies to:

• Individuals who create or use a Unilease account
• Individuals on whose behalf an account is used (such as employees of a Customer)
• Visitors to our marketing website

This Policy does not apply to:

• Third-party websites or services that may be linked from the Service
• Information collected by our customers in their own operations outside the Service
• Information practices of third-party AI providers or other Subprocessors, which are governed by their own privacy policies and by contracts between us and them

This Policy supplements, and is incorporated by reference into, the Unilease Terms of Use. Capitalized terms not defined here have the meanings given in the Terms of Use.

2. Two Categories of Information, Two Different Roles

Because the distinction matters legally and practically, this Policy treats two categories of information separately throughout:

(a) Account Information. Information about you as a user — what you give us when you sign up, what you tell us about yourself, how you use the Service. With respect to Account Information, Unilease acts as a controller (or "business" under California law) and makes the decisions about how this information is collected and used.

(b) Customer Content. Information you upload, submit, or generate within the Service — including lease documents, amendments, exhibits, floor plans, property information, comments, messages, and the AI-Generated Output produced from these materials. With respect to Customer Content, Unilease acts as a service provider (under California law) or a processor (under most international privacy frameworks), processing the content on behalf of the Customer for the purposes set out in the Terms of Use.

This means that if your lease contains a contact named "Jane Smith" with her email and phone, Jane's information is part of Customer Content and is handled as described in the Terms of Use and Section 7 below — not as Account Information. Customers are responsible for ensuring they have any necessary rights and notices to upload such information.

3. Information We Collect

3.1 Information You Provide Directly

When you create an account, use the Service, or contact us, you may provide:

• Identity and contact information: name, email address, phone number, company name, job title, mailing address
• Account credentials: username, password (stored in hashed form), authentication tokens
• Billing information: payment method details (processed and stored by our payment processor, not by Unilease directly), billing address, tax identification information
• Communications: the contents of emails, support tickets, chat messages, and feedback you send us
• Profile and preference information: notification preferences, time zone, role, context, and other settings

3.2 Customer Content

When you use the Service, you may upload, submit, or generate Customer Content, including but not limited to:

• Lease agreements, amendments, exhibits, and related correspondence
• Floor plans, site plans, drawings, and property images
• Market surveys, comparative analyses, and property information
• Comments, messages, and user-to-user content shared through Platform features
• Conversations with conversational AI agents
• Corrections, edits, and feedback applied to AI-Generated Output

Customer Content frequently contains personal information about individuals other than you — for example, tenant contacts, landlord representatives, guarantors, brokers, and signatories named in lease documents. Section 7 explains how we handle this information.

3.3 Information Collected Automatically

When you use the Service, we and our Subprocessors automatically collect:

• Device and connection information: IP address, browser type and version, operating system, device identifiers, and similar technical data
• Usage information: pages and features accessed, actions taken, timestamps, referring URLs, search queries within the Service, and similar activity data
• Cookies and similar technologies: small data files placed on your device to remember preferences, maintain sessions, and analyze usage. See Section 9 below.
• Log data: server logs that record access events for security, debugging, and compliance purposes

3.4 Information from Third Parties

We may receive information about you from:

• Authentication providers if you sign in through a third-party identity provider (such as Google or Microsoft)
• Payment processors confirming transaction status and limited card metadata
• Business contact databases that we use for sales and outreach (for prospective customers only)
• Other users who invite you to collaborate, share content, or join a Customer account

4. How We Use Information

4.1 Account Information

We use Account Information to:

• Create, maintain, and secure your account
• Provide, operate, and improve the Service
• Process payments and manage subscriptions
• Communicate with you about the Service, including critical service updates, security alerts, and administrative messages (which you cannot opt out of while your account is active)
• Send marketing communications, newsletters, and product announcements (which you can opt out of at any time)
• Provide customer support and respond to your inquiries
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Use
• Comply with legal obligations, respond to lawful requests, and protect the rights, property, and safety of Unilease, our users, and the public

4.2 Customer Content

We process Customer Content only as described in the Terms of Use, including to:

• Extract structured information from documents and generate AI-Generated Output
• Generate Critical Date Notifications, dashboards, and other Output
• Provide conversational AI agents that allow you to ask questions about your content
• Power user-to-user Features such as messaging, Content and information sharing
• Train, fine-tune, evaluate, and improve our own AI models, prompts, and extraction logic, using your corrections, edits, feedback, and De-Identified Data (we do not send your content to third-party AI providers for them to train their models)
• Generate De-Identified Data and Aggregated Data for product improvement, market intelligence, and commercial offerings
• Provide, maintain, and secure the Service

We do not use Customer Content for advertising, do not sell it, and do not share it with third parties except as described in Section 6 below.

4.3 Legal Bases (for Users in Jurisdictions That Require Them)

Where required by applicable law, our legal bases for processing personal information include: (a) performance of a contract with you, (b) compliance with legal obligations, (c) our legitimate interests in operating and improving the Service, and (d) your consent where required.

5. Artificial Intelligence and Your Data

Because AI is central to how Unilease works, this section deserves its own treatment.

5.1 How AI Processes Your Content

When you add or upload information, files or a document, the Service transmits the contents of that document — and any subsequent edits, corrections, or conversational queries about it — to one or more third-party AI providers for processing. These providers act as Subprocessors and operate under contracts that:

• Prohibit them from using Customer Content to train their own publicly-available foundation models
• Restrict their use of Customer Content to providing services to Unilease
• Require appropriate confidentiality and security commitments
• Operate under Zero Data Retention terms, meaning Customer Content and the resulting Output are processed solely to fulfill the applicable request and are permanently deleted immediately upon completion of processing rather than retained

A current list of material AI Subprocessors is available upon request by emailing privacy@unilease.com.

5.2 How We Use Customer Content for AI Improvement

As described in Section 7 of the Terms of Use, Unilease uses Customer Content, AI-Generated Output, and the corrections and feedback you provide to:

• Train, fine-tune, evaluate, and improve our own AI models, prompts, schemas, and extraction logic, using your corrections, edits, feedback, and De-Identified Data rather than by sending your identifiable content to any third party for training
• Create De-Identified Data and Aggregated Data that survives termination of your account
• Build and improve market intelligence, comparative analytics, and similar features

This is a key distinction from third-party AI providers: we may learn from your content (subject to the Restricted designation described in Section 7.3 of the Terms of Use); they may not learn from your content for their own purposes.

5.3 What This Means in Practice

When you upload a lease that mentions a landlord representative named "John Doe":

• John's name passes through Subprocessor or AI provider as part of processing, governed by our contracts with them
• John's name appears in your AI-Generated Output (lease abstract, notifications)
• A de-identified version of the data, with John's name and other identifying fields removed, may be incorporated into our aggregated datasets and used to improve our models and generate market intelligence
• John's name itself is not shared with other Unilease users, is not sold, and is not used for advertising

5.4 AI Accuracy and Your Responsibility

AI-Generated Output may contain errors, omissions, or inaccuracies. You are responsible for reviewing and verifying it before relying on it for any decision. This is addressed in detail in Sections 4 and 5 of the Terms of Use.

6. How We Share Information

We share information only in the following circumstances:

6.1 With Subprocessors

We engage third-party service providers (Subprocessors) to support delivery of the Service, including:

• Cloud hosting and infrastructure
• Database and storage providers
• AI model providers
• Email delivery services
• Analytics and monitoring tools
• Payment processors
• Customer support tools

Subprocessors process information only as needed to provide their services to us and are bound by contracts that require appropriate confidentiality and security commitments. A current list of material Subprocessors is available upon request by emailing privacy@unilease.com.

6.2 Within Your Customer Organization

If your account is associated with a Customer (such as your employer), authorized administrators of that Customer may have access to your Account Information and to content you submit through the Service. They may also be able to take actions affecting your account, including suspending or terminating it.

6.3 With Other Users of the Service

When you use Features that involve user-to-user sharing — such as Content or information sharing, commenting, or messaging — the content you share is visible to the users with whom you share it. You are responsible for determining what to share and with whom.

6.4 For Legal and Safety Reasons

We may disclose information if we believe in good faith that disclosure is necessary to: (a) comply with applicable law, legal process, or government requests; (b) enforce our Terms of Use; (c) protect the rights, property, or safety of Unilease, our users, or the public; or (d) investigate fraud, abuse, or security incidents.

6.5 In Connection with a Business Transaction

If Unilease is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, information may be transferred as part of that transaction, subject to standard confidentiality protections and continuation of this Policy or a substantially similar successor policy.

6.6 With Your Consent

We may share information with third parties when you direct us to do so or otherwise consent to such sharing.

6.7 De-Identified and Aggregated Data

We may share De-Identified Data and Aggregated Data without restriction, including for market intelligence, benchmarking, industry reports, and commercial offerings. Such data does not identify you or your Customer Content.

6.8 What We Do Not Do

We do not:

• Sell personal information for monetary consideration
• Share personal information for cross-context behavioral advertising
• Use Customer Content to train third-party AI providers' public foundation models
• Allow Subprocessors to use information for their own commercial purposes

7. Personal Information in Customer Content

Customer Content frequently contains personal information about individuals who are not Unilease users — such as tenant contacts, landlord representatives, brokers, guarantors, and signatories named in commercial lease documents. We process this information solely on behalf of the uploading Customer and only for the purposes set out in the Terms of Use.

Our role. With respect to such personal information, Unilease acts as a service provider (or processor) and not as the entity that decides why the information was collected or how it will be used. Those decisions belong to the Customer.

The Customer's role. The Customer that uploads Customer Content is responsible for ensuring that it has any necessary rights, notices, or consents under applicable law to upload such content to the Service and to grant the licenses described in the Terms of Use. This includes responsibility for any privacy notices owed to individuals named in the content.

Requests from named individuals. If you are an individual named in Customer Content uploaded to Unilease and you wish to exercise rights with respect to your personal information (access, deletion, correction, or similar), we will typically direct you to the Customer who uploaded the content, because they are the appropriate party to respond. We will assist the Customer in responding to such requests as required by applicable law.

8. Your Rights and Choices

8.1 Account Management

You can access, update, or delete much of your Account Information at any time through your account settings. You can also:

• Update your email preferences and opt out of marketing communications (administrative messages will continue while your account is active)
• Cancel your subscription as described in the Terms of Use
• Request export of your Customer Content as described in the Terms of Use
• Delete your account by contacting support@unilease.com

8.2 Restricted Content Designation

To the extent such features are available to you, you can flag specific Customer Content as "Restricted" through the Platform's designated mechanism to prevent its use in generating De-Identified Data and Aggregated Data for our models and market intelligence. See Section 7 of the Terms of Use.

8.3 State-Specific Privacy Rights

Depending on where you live, you may have specific rights under applicable state privacy laws, including but not limited to the California Consumer Privacy Act, the California Privacy Rights Act, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act, the Texas Data Privacy and Security Act, and similar laws.

These rights may include:

• Right to know / access: request information about the personal information we have collected about you
• Right to delete: request deletion of your personal information, subject to legal exceptions
• Right to correct: request correction of inaccurate personal information
• Right to data portability: request a copy of your personal information in a portable format
• Right to opt out of sale or sharing: opt out of the sale or sharing of personal information (Unilease does not sell or share personal information for cross-context behavioral advertising)
• Right to limit use of sensitive personal information: restrict use of sensitive categories of personal information (we do not use sensitive personal information for purposes that would trigger this right)
• Right to opt out of profiling and automated decision-making: where applicable
• Right to non-discrimination: we will not discriminate against you for exercising your privacy rights

To exercise these rights, email privacy@unilease.com. We will respond within the timeframe required by applicable law. We may need to verify your identity before responding to certain requests, and we may decline requests in limited circumstances permitted by law.

You may also designate an authorized agent to make a request on your behalf. We will require written authorization and may verify the agent's identity.

8.4 California "Shine the Light"

California residents may request information about disclosures of personal information to third parties for direct marketing purposes. We do not currently make such disclosures.

8.5 International Users

The Service is operated from the United States and is intended for users in the United States. If you access the Service from outside the United States, you acknowledge that your information will be transferred to and processed in the United States. If you are a resident of the European Economic Area, the United Kingdom, or Switzerland, additional rights may apply; please contact privacy@unilease.com for information.

8.6 Do Not Track

Some browsers offer a "Do Not Track" signal. Because there is no industry-standard interpretation of such signals, we do not currently respond to them.

9. Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember your preferences, maintain authenticated sessions, and analyze usage.

Categories of cookies we use:

• Strictly necessary: required to operate core features such as authentication and session management. These cannot be disabled.
• Functional: remember your preferences and settings.
• Analytics: help us understand how the Service is used so we can improve it. We may use third-party analytics tools for this purpose.
• Marketing: if applicable, used on our marketing website to measure the effectiveness of campaigns.

Your choices. Most browsers allow you to control cookies through settings. Blocking strictly necessary cookies may impair core functionality. Where required by applicable law, we present a cookie banner allowing you to manage non-essential cookies.

10. Data Retention

We retain information for as long as needed to provide the Service and for the additional purposes described in this Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention practices include:

• Account Information: retained while your account is active and for a reasonable period thereafter
• Customer Content: retained during the Subscription Term and for thirty (30) days following termination, after which it is deleted from active systems. This retention period applies to Customer Content stored within Unilease's own systems to provide the Service; Customer Content transmitted to third-party AI providers for processing is handled under Zero Data Retention terms and is deleted by those providers immediately upon completion of processing, as described in Section 5.1
• De-Identified Data and Aggregated Data: retained indefinitely, as it cannot be associated with you
• Backups: retained in the ordinary course consistent with our data retention policies
• Logs and security records: retained for the period necessary for security, fraud prevention, and legal compliance
• Marketing data: retained until you opt out or as required by applicable law

When information is no longer needed, we delete or de-identify it.

11. Security

We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect the information we process, including encryption in transit and at rest, access controls, monitoring, and regular security reviews.

No system is perfectly secure. We cannot guarantee absolute security, and you are responsible for safeguarding your account credentials. If you believe your account has been compromised, contact security@unilease.com immediately.

In the event of a security incident affecting your information, we will notify you and applicable regulators as required by law.

12. Children's Privacy

The Service is intended for use by individuals in a commercial capacity and is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it. If you believe we have collected information from a child, contact privacy@unilease.com.

13. Third-Party Websites and Services

The Service may contain links to third-party websites, applications, or services that are not controlled by us. This Policy does not apply to those third parties. Review their privacy policies before providing information to them.

14. Changes to This Policy

We may update this Policy from time to time. When we make material changes, we will notify you by email to your account email address or by prominent notice on the Service at least thirty (30) days before the changes take effect. The "Effective Date" at the top of this Policy indicates when it was last updated. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

15. Data Processing Addendum

For business customers with applicable regulatory requirements (including but not limited to enterprise customers, customers processing personal information of European data subjects, and customers subject to specific industry regulations), a Data Processing Addendum ("DPA") is available upon request. When executed, the DPA supplements the Terms of Use and this Policy.

16. Contact Us

Unilease, LLC
PO Box 80235
Austin, TX 78708

• General: hello@unilease.com
• Legal: legal@unilease.com
• Privacy: privacy@unilease.com
• Security: security@unilease.com

For California residents: you may also designate an authorized agent or contact us at the address above.