Privacy policy

Who is responsible for your data

The controller of the personal data described here is MLJ, SASU, publisher of LeakTicket, registered in Paris under SIREN 934 769 837. The publication director is Jimenez Julien. Every request about this policy goes to jimenezjulien42@gmail.com, and a person reads it, not an automated queue. This policy covers the public website at leakticket.com. Data that owners and tenants put inside the LeakTicket application itself, such as repair tickets and photographs, is handled under the customer agreement described in the terms of service.

What the contact form collects

The only place this website asks you for personal data is the request form in the contact section of the home page. When you submit it, the following named fields are transmitted and stored:

• name: the full name you type, used to address the reply.
• email: your work email address, used to send the answer and nothing else.
• company: the property or portfolio name you operate under.
• role: your selected role, such as owner, owner operator, property manager, resident manager, maintenance lead or bookkeeper.
• request: what you are asking for, such as a demo, a quote, an onboarding call or a question about importing old records.
• size: the number of doors you care for, chosen from a range.
• message: the free text you write about what breaks most often in your units.
• consent: the record that you ticked the box agreeing to be contacted about this request.
• form-name, subject and recipient: three hidden fields that route the message to the right inbox.
• bot-field: an empty anti spam field. If it arrives filled in, the submission is discarded as automated.

The form does not ask for a postal address, a phone number, a payment card or any tenant information, and you should not paste tenant names, unit addresses or photographs into the message box. Alongside the fields above, the hosting platform records the submission time and the IP address the request came from, which is standard abuse protection for any web form.

Why we hold it, and on what legal basis

We use what you send for one purpose: to answer you, and to arrange a walkthrough or a quote if that is what you asked for. Under the EU General Data Protection Regulation, the legal basis is your consent, given by ticking the consent box, together with our legitimate interest in responding to a commercial enquiry that you started. We do not use the form data to build advertising audiences, we do not enrich it with data bought from brokers, and we do not sell, rent or share it with any third party for their own marketing.

Who processes it and where

Form submissions are processed and stored by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States, which hosts this website and operates Netlify Forms. Netlify acts as our processor and holds the submission in the site dashboard, and a copy is forwarded by email so we can reply. Netlify applies its own security controls and standard contractual clauses for transfers of personal data out of the European Economic Area.

The web fonts used on this site are requested from Google Fonts when the page loads, which means your browser makes a connection to fonts.googleapis.com and fonts.gstatic.com. No other third party service receives data from these pages.

International transfers

Because the site is hosted in the United States, personal data you submit through the form is transferred to and stored in the United States. Where a transfer of data from the European Economic Area is involved, it relies on the European Commission standard contractual clauses that our hosting provider has in place, together with the technical measures described in this policy. If you would prefer not to transmit data to a United States service, write to us directly by email instead of using the form.

How long we keep it

Submissions that turn into a conversation are kept for twenty four months from the last exchange, so that we have context if you come back to us. Submissions that receive no answer from you after two follow ups are deleted within twelve months. Anything that is obvious spam is deleted as soon as it is identified, usually within a week. You can ask us to delete your submission sooner, and we will do it within thirty days and confirm in writing.

Cookies and measurement

This website sets no advertising cookies and uses no third party analytics cookies. There is no tracking pixel, no remarketing tag, no social network widget that reports back, and no cross site identifier of any kind. The site works with JavaScript for the menu, the reveal animations, the question and answer panels and the form validation, none of which stores anything on your device. Aggregate, non identifying request counts produced by the hosting platform are used only to see whether pages are reachable.

Your rights in the United States

If you live in California, you have the right under the California Consumer Privacy Act as amended to know what personal information we hold about you, to obtain a copy, to ask for deletion, to correct inaccurate information, and not to be discriminated against for exercising any of these rights. We do not sell personal information and we do not share it for cross context behavioral advertising, so there is nothing for a do not sell request to switch off, but we will confirm that in writing if you ask.

If you live in Colorado, Connecticut, Utah or Virginia, you hold comparable rights under the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act: access, correction, deletion, portability, and opt out of targeted advertising, sale and profiling. Residents of other states with similar statutes may make the same requests and we will treat them the same way. You may appeal a refused request by replying to our decision email with the word appeal, and we will review it within forty five days.

Your rights in the European Union and the United Kingdom

Under the GDPR you may request access to your data, rectification, erasure, restriction of processing, portability in a machine readable format, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw that consent at any time, which does not affect the lawfulness of processing carried out before the withdrawal. You also have the right to lodge a complaint with a supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

How to exercise your rights

Send one email to jimenezjulien42@gmail.com stating what you want, from the address you used on the form. We answer within thirty days, and within forty five days for requests made under a United States state statute. No account, no form and no fee is required. If we need to verify your identity, we will ask for the minimum needed to match your request to a stored submission, and we will not create a new record in the process.

Security

The site is served only over HTTPS with strict transport security, and the response headers block content type sniffing, restrict framing and deny access to camera, microphone and geolocation. Access to form submissions is limited to the publication director and protected by two factor authentication on the hosting account. If a breach affecting your data occurs, we will notify affected people and the relevant authority within the deadlines set by applicable law.

Children's privacy

LeakTicket is a business tool for rental property owners and managers, and it is not directed at children. We do not knowingly collect personal data from anyone under sixteen years old. If you believe a child has sent us information through the contact form, write to the address above and we will delete it promptly and confirm the deletion to you.

Changes to this policy

If this policy changes, the revised version is published on this page with a new date at the top. Material changes, such as adding a new processor or a new purpose, will also be described in a short note at the top of the page for at least sixty days. The current version is dated March 2, 2026. Related documents: the legal notice and the terms of service.