Privacy Policy

This policy explains the information Leaster, a United States service provided by S.H. Watkins and Associates in Oregon, United States, processes to provide accounts, rental-search tools, billing, support, security, and live-provider usage.

Information Leaster Stores

• Account information such as email address, display name, password hash, verification status, role, and account status.
• Authentication and security records such as hashed session or one-time tokens, CSRF values, request-derived IP or network identifiers used for rate limiting, rate-limit records, and security audit events.
• Customer product data such as search rules and preferences, ZIP criteria, search history, search runs, listing results, normalized property observations and detected change events, saved listings, Shortlist relationships, private Shortlist notes and decision status, comparisons, and export records.
• Current billing records such as Stripe customer, one-time Checkout, payment, refund, and webhook identifiers or metadata; Hunt Pass purchases and expiration periods; additional Live ZIP Search purchases; period-scoped grants; and usage-ledger entries.
• Historical billing records from Leaster's retired recurring model, including subscription, invoice, fixed Top-Up, recurring-consent, related Stripe identifiers, dates, grants, and ledger entries retained for reconciliation, disputes, accounting, security, and audit purposes.
• Marketing email preferences such as whether you opted in, when and where affirmative consent was recorded, and when and where the preference was last changed.
• Guest Pass records, redemption state, and usage information.
• Provider records such as ZIP and provider usage, reservations and requests, result and accounting records, and safe provider failure categories.
• Support and operational information such as bug reports, support details you choose to submit, temporary outbound email metadata, request identifiers, page paths, browser user-agent strings where logged, security or audit records, and operational logs.

How Information Is Used

Leaster uses this information to authenticate users, provide Leaster functionality, execute requested searches, calculate Live ZIP Search balances and entitlements, manage and reconcile billing, maintain search history and saved listings, provide support, prevent abuse or fraud, maintain security and financial records, and diagnose operational problems.

Marketing and Service Email

Marketing email is opt-in only. Leaster does not add users to a marketing or mailing list without affirmative consent. Declining marketing email does not affect account registration, access to Leaster, or billing. You can withdraw consent or change the preference at any time from Account.

Required transactional and service messages are separate from marketing email. Leaster may still send email verification, password reset, billing or receipt, security, and important account or service messages when needed to operate your account.

Sale and Targeted Advertising

Leaster does not sell personal information. Leaster does not use personal information for targeted advertising.

Service Providers

Stripe processes payment details. Leaster may send Stripe an account email address, a Stripe customer identifier, and Leaster account, billing-mode, Hunt Pass, or Live ZIP Search quantity metadata needed for Checkout and billing. Stripe may provide Leaster with customer, Checkout, payment, and refund identifiers and transaction metadata needed to operate the service and reconcile billing. Historical subscription and invoice identifiers may remain stored from the retired recurring model. Leaster does not store complete payment card numbers.

Leaster's hosting infrastructure processes application and database data. The configured email provider receives recipient addresses and message content needed to deliver account-verification and password-reset messages. When live access is enabled, Leaster sends requested ZIP codes to RentCast and receives rental-listing data. These providers process information needed to perform their functions and may operate subject to their own applicable terms and privacy practices.

Cookies and Security

Leaster uses a necessary session cookie to keep signed-in customers authenticated. In production, the cookie is configured with Secure, HttpOnly, and SameSite protections. Leaster stores a hash of the session token on the server rather than the raw session token and does not use the cookie for advertising. Passwords and one-time authentication tokens are stored as cryptographic hashes; production email records do not retain one-time-link bodies or raw tokens.

Retention and Deletion

During application startup, automated operational cleanup removes sessions and one-time authentication records that have been expired for more than seven days, rate-limit records not updated for more than seven days, and outbound-email records older than 30 days. Production outbound-email records omit message bodies and raw one-time tokens.

Customer search runs remain until you delete them or an approved retention policy changes, and saved listings remain until deleted. Shortlist status and private notes remain until you remove the property from Shortlist or delete the underlying Saved Result. Deleting a full search run removes its result rows but currently retains lightweight normalized property observations and change events used for Leaster Observation History. Leaster does not currently automatically prune monitoring history, bug reports, billing, Stripe, Hunt Pass, additional-search, historical subscription or Top-Up, provider-accounting, audit, or security records. Those records may be retained as needed to provide historical functionality or for reconciliation, fraud prevention, disputes, accounting, security, and regulatory or legal obligations.

After an approved account-deletion request, an authorized Leaster administrator may delete or anonymize personal information when reasonably possible, including deleting customer search content and anonymizing the account identity, except information that must be retained for payment records, fraud prevention, security, legal compliance, dispute handling, or backup lifecycle requirements. Anonymization may be delayed while Hunt Pass access, historical subscription billing, or a refund review remains unresolved. The current Hunt Pass model has no automatically renewing charge for account deletion to cancel.

Your Privacy Choices

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of certain personal information. Submit a privacy request through Support or email [email protected]. Leaster does not currently provide a customer self-service full-account deletion control; approved requests are carried out by an authorized administrator, and Leaster may need to verify the requester's identity before completing a request.

Certain information may need to be retained for payment records, financial or accounting purposes, security, fraud prevention, legal compliance, dispute handling, and backup lifecycle requirements.

Children and Changes

Leaster is not directed to children under 18, and customers must be at least 18 to create a paid account. Leaster does not claim to use special age-verification technology. Material changes to this policy should be posted here with an updated date.

Contact

Privacy questions may be sent to [email protected].

S.H. Watkins and Associates
Oregon, United States
[email protected]