Privacy Policy

Overview

This Policy explains how Doorpost handles personal information. We act as a service provider (processor) for the property and tenant data our customers put into the Service, and as the controller for the account and usage data we collect directly.

Information we collect

Account information: your name, email, company name, and password (stored hashed by our authentication provider).

Customer Data you enter: property, unit, lease, tenant, applicant, vendor, and financial records. You control what you put in and are responsible for having the right to provide it.

Financial connectivity: if you link a bank or card, a third-party provider (e.g., Plaid) supplies transaction data; we store access tokens securely server-side and never expose them to the browser.

Payment information: handled by our payment processor (e.g., Stripe). We don't store full card numbers.

Usage data: basic logs and device/browser information used to operate and secure the Service.

How we use information

To provide, maintain, secure, and improve the Service; to process payments; to communicate with you about your account; and to comply with legal obligations. We do not sell personal information.

Sharing & subprocessors

We share information with vendors that help us run the Service, under contracts that limit their use of it — for example: cloud database/hosting, application hosting, bank connectivity, payments, and transactional email providers. We may disclose information if required by law or to protect rights and safety.

Tenant & applicant data

Where our customers (landlords/managers) enter their tenants' or applicants' information, that customer is the controller of that data and is responsible for providing any required notices and obtaining any required consents. We process it only to provide the Service to that customer.

Data retention

We keep information for as long as your account is active or as needed to provide the Service, then delete or de-identify it within a reasonable period, unless a longer period is required by law.

Security

We use technical and organizational measures to protect information, including row-level data isolation between accounts, encryption in transit, and access controls. No system is perfectly secure, but we work to protect your data and to notify you of incidents where required.

Your choices & rights

You can access and update your account information in the app and can request export or deletion of your data. Depending on where you live, you may have additional rights over your personal information; contact us to exercise them.

Children

The Service isn't directed to children and isn't intended for anyone under 18.

Changes

We may update this Policy; material changes will be posted here with a new date.

Contact

Privacy questions: hello@getdoorpost.com.