Privacy Policy

DoorStopper ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at doorstopper.io (the "Service"). Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.

1. Information We Collect

Information you provide directly

• Account data: Name, email address, and password when you register.
• Listing data: Property details, room descriptions, photos, house rules, and contact information you enter when creating listings.
• Billing data: Payment information processed by Stripe. We do not store full card numbers.
• Communications: Emails or messages you send to our support team.

Information collected automatically

• Usage data: Pages viewed, features used, time spent, and interactions with the Service.
• Device data: IP address, browser type, operating system, and device identifiers.
• Cookies: Session tokens and preference cookies. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Provide and improve the Service, including AI listing generation
• Process payments and manage subscriptions
• Send transactional emails (account confirmations, receipts, password resets)
• Send product updates and feature announcements (you can unsubscribe)
• Respond to support requests and communicate with you
• Detect and prevent fraud, abuse, and security incidents
• Comply with applicable legal obligations
• Analyze usage patterns to improve the platform

We do not sell your personal information or listing data to third parties.

3. How We Share Your Information

We share your information only with:

• Service providers who assist in operating the Service:
  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Anthropic (AI content generation: listing input data is sent to Anthropic's API)
  • Resend (transactional email delivery)
  • Vercel (hosting and infrastructure)
• Legal requirements: When required by law, court order, or government authority.
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.
• With your consent: For any other purpose with your explicit consent.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Specifically:

• Account and listing data: Retained until you delete your account or request deletion.
• Billing records: Retained for 7 years as required for tax and accounting purposes.
• Usage logs: Retained for up to 90 days.
• After account deletion: Personal data is removed within 30 days, except where legal retention is required.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten").
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Opt-out of marketing: Unsubscribe from marketing emails at any time via the unsubscribe link.

California residents have additional rights under CCPA, including the right to know what personal information is collected, the right to opt-out of its sale (we do not sell personal data), and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, contact us at privacy@doorstopper.io. We will respond within 30 days.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption in transit (TLS), encryption at rest for sensitive data, access controls, and regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. Cookies

We use cookies and similar tracking technologies to operate and improve the Service.

• Essential cookies: Required for authentication and session management. Cannot be disabled.
• Preference cookies: Store your settings and preferences.
• Analytics cookies: Help us understand how the Service is used. You can opt out.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from using authenticated features of the Service.

8. Children's Privacy

The Service is not directed to children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

9. International Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers consistent with applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice within the Service before the changes take effect. The "last updated" date at the top of this policy reflects the most recent revision.

11. Contact Us

For privacy-related questions, data access requests, or to exercise your rights:

Email: privacy@doorstopper.io

General inquiries: hello@doorstopper.io