Privacy Policy
Effective: 2026-04-19
This Privacy Policy describes how
LaLa Solutions LLC
("we", "us", "our") collects, uses, and shares personal information when you use BuildMyLease (the "Service"). If you have questions about this policy, email us at [email protected].
1. Who we are
BuildMyLease is operated by LaLa Solutions LLC, a Delaware limited liability company. Mailing address via our registered agent: LaLa Solutions LLC, c/o ZenBusiness Inc., 611 South DuPont Highway, Suite 102, Dover, DE 19901.
2. What we collect
Information you provide directly
Identifying information about the parties to the rental agreement you are generating (landlord and tenant names, rental property address, and when applicable, phone numbers).
Your email address when you request a generated document.
Document-specific answers you enter during the guided interview (rent amount, dates, policies, and similar).
Payment information
Payment is processed by Square, Inc. We receive a payment token and a transaction status from Square. We do not receive or store your full card number, CVV, or bank credentials.
Information collected automatically
Our hosting provider, Cloudflare, records standard server logs (IP address, user agent, timestamp, URL path) for security and reliability. We use Cloudflare's cookieless Web Analytics for aggregate traffic counts. We do not use third-party analytics, advertising, or marketing cookies.
3. How we use the information
We use the information to:
- Generate the document you requested and deliver it to you;
- Process your payment through Square;
- Provide customer support, including refunds and issue resolution;
- Detect and prevent fraud, abuse, and security incidents;
- Comply with legal obligations and respond to lawful requests.
4. Third parties we share information with
We do not sell personal information. We share information only with the service providers needed to run the Service:
Square, Inc.
Payment processing. Square receives payment details directly from your browser and provides us with a transaction status. Square's handling of your payment is governed by Square's Privacy Policy.
Cloudflare, Inc.
Hosting, content delivery, DDoS protection, and cookieless analytics. Cloudflare handles server logs and edge-level security under Cloudflare's Privacy Policy.
Transactional email (future)
When we wire email delivery of generated documents, we will use a transactional email provider (e.g. Mailgun). This policy will be updated before that change takes effect.
5. How long we keep information
- Draft sessions that never resulted in a purchase are retained for 30 days and then deleted.
- Generated documents (paid) are available for download for 1 year from the date of purchase. After that, we archive them for 7 additional years to support tax, audit, and dispute-resolution obligations, and then delete them.
- Payment metadata is held by Square under Square's retention policy; we do not control that retention.
6. Your rights
You can ask us what personal information we have about you, correct inaccurate information, or delete your draft or generated document at any time. Email [email protected] with your order reference or draft identifier and we will respond within 30 days.
California residents (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect about you and how we use it, the right to request deletion, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising, so a "Do Not Sell or Share" link is not required. To exercise any right, email [email protected].
Other US states and the EU/UK
We are a US-only business and do not target users outside the United States. If you are an EU or UK resident who nonetheless uses the Service, we will honor access, rectification, and erasure requests on a reasonable-effort basis.
7. Security
Traffic to and from the Service is encrypted with TLS. Draft and document data is stored in Cloudflare's managed database, encrypted at rest. Payment card data never touches our servers — it is handled by Square under PCI-DSS. No system is perfectly secure, but these are the standard controls for a service of this size.
8. Children's privacy
The Service is not directed at anyone under 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, email [email protected] and we will delete it.
9. International data transfers
We process data in the United States. If you access the Service from outside the US, you understand and consent to your data being processed in the US, which may have different data-protection rules than your country of residence.
10. Changes to this Policy
We may update this Policy. Material changes will be reflected in the "Effective" date above. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
11. Contact
Privacy questions and rights requests: [email protected]
Mailing address: LaLa Solutions LLC, c/o ZenBusiness Inc., 611 South DuPont Highway, Suite 102, Dover, DE 19901.