Privacy Policy
Last updated: September 2026
Who we are
guard.lease helps tenants in the Netherlands check a rental contract against Dutch housing law. The controller of your data is Dzmitry Hutaryan (JDG), a sole proprietorship registered in Poland, based in Warsaw, Poland.
Contact: support@guard.lease
What we process, and why
We ask for no account, no name and no e-mail address. Everything we process is needed to deliver the analysis you asked for and to take payment for it (GDPR Art. 6(1)(b)), except the technical logs, which we keep to run the service securely (Art. 6(1)(f)).
Your contract file
The file is read in memory to extract its text and is not written to disk or kept. We never store the file itself.
The contract text, during the analysis
The extracted text is held in a job queue on our server for as long as the analysis runs, including any retry, and is removed as soon as the job ends. During the analysis it is sent to Anthropic, our AI provider (see below).
The report
The findings quote or paraphrase individual clauses of your contract, since that is what they refer to. The report is stored under a random, unguessable link and deleted after 3 days. If you unlock it, it is kept for 90 days from the payment instead, so that what you paid for stays available.
Payment
Creem collects your e-mail address, billing country and payment details when you pay. We receive only the checkout reference and the fact that the report was paid for; we never see your card details.
Technical logs
Our server keeps the usual technical logs — IP address, time and the request made — for security and troubleshooting, and for no longer than 30 days. Cloudflare, which serves the website, keeps its own logs under its own privacy policy.
Who else sees your data
Anthropic, PBC (USA)
The AI model that reads your contract is Claude, run by Anthropic. Your contract text and the resulting findings pass through Anthropic's API. Anthropic keeps that input and output for up to 30 days for abuse monitoring, then deletes it, and does not use it to train its models. The transfer to the USA is covered by Anthropic's data processing addendum, which incorporates the EU Standard Contractual Clauses.
Creem — Armitage Labs OÜ (Estonia)
Handles the payment as merchant of record and is the controller of the data it collects for it. Creem's own privacy policy applies to that data.
Hosting
The analysis, the queue and the report database run on our own server in Germany. The website is served by Cloudflare, Inc., which sees your IP address as any web host does; the report itself is fetched by your browser directly from our server.
Nobody else. We do not sell data, run advertising, or use analytics.
Data retention
- Uploaded file: never stored
- Contract text: for the duration of the analysis, then removed
- Report: deleted within 3 days
- Unlocked report: kept 90 days from the payment
- At Anthropic: up to 30 days, then deleted
- Payment records: held by Creem for as long as EU tax law requires (7 years)
Other people in your contract
A rental contract names the landlord and often an agent. We process those details only as part of analysing your contract, and they are deleted together with the report. Only upload a contract you are a party to.
Your rights
Under the GDPR you can ask us for access to the data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive a copy of it. Write to support@guard.lease. Because we hold no account, include the link to your report so we can find it; deleting a report is the whole of the data we have.
You can also complain to a supervisory authority: the Polish Prezes Urzędu Ochrony Danych Osobowych (UODO), which supervises us, or the Dutch Autoriteit Persoonsgegevens if you live in the Netherlands.
Security, and the report link
Everything travels over TLS, the file is parsed in memory, and the report link is a random identifier that cannot be guessed. It is also the only key: anyone who has the link can open the report, so share it only with people you would show the contract to.
Cookies
We set no cookies and use no analytics or tracking of any kind.
Changes
We may update this policy. Changes will be posted on this page.