Privacy Policy

Doorstep is a property management platform for landlords and tenants. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By creating a Doorstep account or using the Doorstep services, you agree to this Privacy Policy.

This policy applies to all users of Doorstep — landlords, tenants, and any staff a landlord adds to their account.

We collect the following categories of information:

• Account information. Name, email address, phone number (optional), and authentication credentials. Authentication is handled by Clerk (see Section 4); we do not store passwords directly.
• Portfolio data. Properties, units, leases, owning entities, financial details (rent amounts, security deposits, late fee terms), expense records, and dashboard metrics derived from your data.
• Tenant data. Tenant names, contact info, lease terms, and roommate relationships — entered by landlords when inviting tenants. Tenants verify and complete their own profiles after accepting an invitation.
• Generated activity. Maintenance tickets (titles, descriptions, photos, status changes, comments), direct messages and broadcasts, notification audit logs, and contractor assignment events.
• Investment underwriting data. Prospects you track, scenarios you create, comps, showings, and rent comparisons against HUD Fair Market Rent data.
• File uploads. Lease documents, ticket photos, and prospect attachments. These are stored privately in Vercel Blob and accessed only through authenticated download endpoints.

We use the information we collect to:

• Operate the Doorstep platform — render dashboards, process tickets, deliver messages, run notification preferences.
• Send transactional emails (ticket updates, payment confirmations, lease activity, broadcasts) per your notification preferences.
• Power AI-driven features: extracting deal details from listing descriptions in the prospecting workstream, and classifying maintenance tickets to suggest the right contractor.
• Improve the product — aggregate, anonymized usage signals to identify what works and what doesn’t.
• Communicate with you about account, billing, or service updates.

We do not sell your data to third parties. We do not use your data to train AI models. We do not share data with advertisers.

Doorstep relies on a small set of third-party services to operate. Each service has its own privacy policy that governs the data it processes on our behalf:

• Clerk (clerk.com/privacy) — user authentication, session management, password storage.
• Stripe (stripe.com/privacy) — billing infrastructure (planned; not currently active during early access). When billing launches, Stripe will process payment method details and billing addresses.
• Resend (resend.com/legal/privacy-policy) — transactional email delivery (recipient email + message content).
• Vercel Blob (vercel.com/legal/privacy-policy) — private file storage for lease documents, ticket photos, and prospect attachments.
• Anthropic (anthropic.com/legal/privacy) — AI features. We send listing descriptions to extract deal details and maintenance ticket titles + descriptions to classify trade categories. No user-identifying information is sent.
• HUD (huduser.gov) — Fair Market Rent data lookups. We send zip codes only; no user data is shared.
• Vercel (hosting and infrastructure) — same privacy policy as Vercel Blob above.

You have the right to:

• Access your data — most of it is visible to you directly in the app.
• Correct inaccurate data — edit fields on properties, leases, prospects, profile, etc. directly in the app.
• Export your data — request a copy of your account data by emailing info@doorstepproperty.com. We’ll respond within 30 days.
• Delete your account — request deletion by emailing info@doorstepproperty.com. Personal data tied to your account will be removed; see Section 7 for retention details on audit-relevant data.

Doorstep uses cookies set by Clerk for authentication and session management. These are essential for the platform to function — without them, you cannot stay signed in.

We do not use third-party analytics cookies, tracking pixels, or marketing cookies. If we add analytics in the future, this policy will be updated and a consent mechanism added where required by law.

We retain account data for as long as your account is active. When you delete your account:

• User-personal data (profile, contact info, authentication records) is removed.
• Audit-relevant data (notification audit logs, message history, lease document supersession history, status change events) is retained per our database schema’s referential integrity rules. Some of this data may be retained for legal, accounting, or operational reasons.
• Tenant data uploaded by landlords stays under the landlord’s control. If a tenant requests deletion of their data, the landlord who entered it must be involved (or contact us directly at info@doorstepproperty.com).

Doorstep is not directed at minors. We do not knowingly collect data from anyone under 18. If you are a parent or guardian and believe a minor has created a Doorstep account, please contact us at info@doorstepproperty.com and we will remove their data promptly.

We may update this Privacy Policy from time to time. For material changes, we will notify you via in-app notification or email before the changes take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Continued use of Doorstep after a policy update takes effect means you accept the updated policy.

For privacy questions, data access requests, deletion requests, or concerns about how we handle your data, email us at info@doorstepproperty.com.