Privacy Policy — Doorline

Doorline ("Doorline," "we," "us") provides a daily operating dashboard for multifamily real-estate operators. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to doorline.io and the Doorline application.

1. Information We Collect

Account information you provide: name, email address, company name, and account settings.
Portfolio information you enter or import: property, unit, leasing, and operational data, including data imported from your property-management system (e.g., AppFolio). Documents you upload are processed by our AI provider to extract the figures into your dashboard; that content is used only to provide the service and is not used to train AI models.
Financial account information accessed through Plaid when you link a bank account: account and institution names, account balances, and transaction history for the accounts you choose to connect. We access this data on a read-only basis.
Usage and device information: log data, IP address, browser type, and actions taken in the app, used for security and to operate the service.

We do not receive or store your bank login credentials. Authentication to your financial institution is handled entirely by Plaid.

2. How We Use Your Information

We use your information to: provide and operate the dashboard; reconcile and report on your cash position, payables, delinquency, and portfolio performance; authenticate you and secure your account; provide customer support; and comply with legal obligations. We do not sell your personal or financial information, and we do not use it for advertising.

3. Plaid

We use Plaid Inc. ("Plaid") to connect your bank accounts to Doorline. By linking an account, you authorize Plaid, through Plaid Link, to access account information from your financial institution and share it with Doorline. Your use of Plaid is governed by Plaid's own privacy policy, available at plaid.com/legal. We use only Plaid's Balance and Transactions products, only for the accounts you explicitly connect, and we do not initiate payments or move money.

4. How We Share Information

We share information only with service providers (subprocessors) that help us operate Doorline, and only to the extent each needs to perform its function:

Plaid — financial account connectivity
Supabase / Lovable Cloud (on AWS) — application hosting and database
Cloudflare — network security and content delivery
Stripe — payment processing
Resend — transactional email
Anthropic — AI processing of uploaded documents to extract your portfolio data (does not use your data to train its models)

Each maintains industry-recognized security practices. We may also disclose information if required by law or to protect the rights, safety, and security of Doorline and its users. We do not sell your data.

5. Data Security

We protect your data using encryption in transit (TLS 1.2 or higher) and at rest (AES-256), multi-factor authentication on accounts that access financial data, role-based access controls, and the principle of least privilege. Our security practices are described in our Information Security Policy.

6. Data Retention and Deletion

We retain your information only as long as your account is active or as needed to provide the service, and as required by law. You can request deletion of your data at any time by emailing security@doorline.io; verified requests are honored within 30 days, including purging stored financial data and revoking linked Plaid connections. See our Data Retention and Disposal Policy for details.

7. Your Rights and Choices

You may access, correct, or delete your personal information, disconnect a linked bank account at any time, and close your account. To exercise these rights, contact security@doorline.io. Depending on where you live, you may have additional rights under applicable privacy laws.

8. Consent

By creating a Doorline account and connecting financial accounts through Plaid Link, you consent to the collection, processing, and storage of your information as described in this policy. Plaid Link also presents its own consent screen before sharing any data.

9. Children's Privacy

Doorline is a business tool intended for users 18 and older and is not directed to children. We do not knowingly collect information from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date.

11. Contact Us

Questions about this policy or your data: security@doorline.io.