Privacy policy

What changed

Compared with the version before it:

• Doorcove LLC, a New Jersey company, runs Doorcove, and support@doorcove.com is the one contact. New Jersey law applies.
• The Terms give the plans and their prices, and say the assistant is included in every plan, with a fair monthly limit.
• New parts on the assistant: it changes nothing until you press Add them, sends nothing until you press Send, and its answers can be wrong. The Privacy policy says Anthropic reads what you give it, doesn’t train on it and keeps it for up to 30 days.
• Online rent is turned on for each owner of your buildings, a business or a person, and tenants can pay by card if you allow it.
• The Privacy policy names every company that helps run Doorcove: Vultr, Resend, Cloudflare, Google, Plaid, Stripe, Twilio or Telebroad, Anthropic and Let’s Encrypt.
• It says more about what Doorcove keeps: bank balances, the emails your inbox receives, the history of changes, photos as uploaded, and the backups.
• New parts on why Doorcove uses your information, how it’s protected, what you can ask for, and children. A request to remove something archives it, since Doorcove doesn’t delete records, except bank data from Plaid, which is deleted when the person who connected the bank asks.
• The Terms and the Privacy policy name Plaid’s End User Privacy Policy and Stripe’s Connected Account Agreement, and say who is told, and how, if someone gets into information they shouldn’t.
• New parts in the Terms on availability and support, ending your account and taking your information with you, what Doorcove does with the information you put in about other people, limits on what Doorcove LLC owes, which law applies, and the rest of the agreement.

Who is responsible

Doorcove LLC, a New Jersey company, runs Doorcove. It is responsible for the information of the people who sign up or sign in, of visitors to doorcove.com, and for Doorcove’s own security records. You can reach us at support@doorcove.com.

A landlord or manager who uses Doorcove collects their own records about their tenants, contractors, the owners they work for and other people, and decides what to keep. For that information, the landlord or manager is responsible, and Doorcove stores and works with it for them, only to run Doorcove for them.

If you are a tenant, a contractor or anyone else in a company’s records, ask that company first. You can also write to support@doorcove.com, and we will help them answer you.

What sign-up collects

• Your first and last name, your work email and your phone number.
• A password, kept only in a one-way scrambled form, and only once your company is created. The password itself is never stored.
• Your company’s name, what describes you, how many doors you manage, the kinds of property, the state you’re based in and the software you use today.
• The Doorcove address you choose.
• When you agreed to the Terms and this policy, and to which version.
• Whether you asked for text updates.

Each sign-up step is saved as you go. If you stop before the last step, what you typed so far stays saved: your name, email, phone and business answers, never a password. An unfinished sign-up stops working after 24 hours.

While you use Doorcove

• What your company enters: buildings and units, the owners of your buildings (people, LLCs, trusts) and their shares, leases, tenants’ names, emails and phone numbers, housing assistance a tenant receives, rent, charges and payments, bank transactions and how they were filed, repairs with their photos and notes, vendors and their tax details, loans and tax figures, rehab budgets and draws, documents, and owner statements.
• Documents and photos as they were uploaded. A photo can carry the place it was taken, if the phone stored it. A tax paper can hold a full Social Security or tax number, even though Doorcove’s own fields keep only the last four digits.
• The people you invite: their email address and the role you gave them, and the name they type when they join.
• Sign-in records: when someone signed in, their IP address and their browser type, kept for security.
• Passkeys: if you add one, Doorcove keeps its public key and an id. Your fingerprint or face never leaves your device.
• The emails and texts Doorcove sends for your company, so its owner can see what went out and whether it arrived. A link that signs someone in or resets a password is never kept.
• The emails people send to your company’s inbox address: the sender, the message and its files.
• A history of the changes made in your company: who made each change, when, and the values before and after. It never keeps the bank’s own words for a transaction, or a connected account’s name, last four digits or balance; it shows them from the transaction or the account as they are now. Nobody can edit it.
• What people ask the assistant and the files they give it, as the assistant section says.

Why we use it, and on what basis

• To run Doorcove for you, as the Terms promise: your account, your company’s records, the emails and texts you ask for, and the features you turn on.
• To keep Doorcove and your account safe: sign-in records, the bot check, the history of changes, and finding and stopping abuse.
• Because you agreed: texts go only to people who confirmed their phone.
• Because the law requires it, when it does.

For the records a company enters, we use them only as that company uses Doorcove. Doorcove does not sell personal information, does not use it for advertising, does not build profiles of people, and does not use it to train AI models.

Other companies that help run Doorcove

Doorcove uses these companies. Each receives only what its part needs. Some take part only when a feature is used, such as connecting a bank:

Vultr, for hosting

Doorcove rents its servers from Vultr, in the United States, so everything Doorcove keeps is stored on them.

Resend, for email

Each email Doorcove sends: the recipient, their name, the subject and the message, and whether it was delivered. Email sent to a company’s inbox address arrives at Resend first.

Cloudflare, for the domain and the bot check

Cloudflare answers lookups for doorcove.com (pages don’t pass through it), forwards email sent to any @doorcove.com address, such as support, and runs the bot check described below.

Google, for the support inbox

Email to support@doorcove.com is kept in a Gmail inbox.

Plaid, for bank data

When you connect a bank, you sign in to it on Plaid’s page, and Plaid handles your bank data under the Plaid End User Privacy Policy, at plaid.com/legal. Plaid receives your company’s name and an id for the person connecting, and gives Doorcove your accounts’ names, their last four digits, their balances and up to two years of transactions. Doorcove keeps its access to your bank sealed with a key the database and the backups never hold.

Stripe, for payments

When you turn on online rent for an owner, Stripe receives the owner’s details (a business’s, or a person’s) and the details Stripe asks for. For a tenant who pays, Stripe receives their name and email, and the tenant enters their bank or card details on Stripe’s page; Doorcove receives the amount and whether it cleared, never a bank account or card number.

Twilio or Telebroad, for texts

When Doorcove sends a text, the phone number and the message.

Anthropic, for the assistant

When someone uses the assistant, what they ask, the files they give it and the records it looks up to answer.

Let’s Encrypt, for secure connections

To give each company’s Doorcove address its padlock (https), Let’s Encrypt lists the address in public logs, so anyone can find that the address exists. Nothing inside it is listed.

Each of them handles what it receives under its own privacy policy. None of them is given anything for advertising or its own marketing.

Doorcove gives information to anyone else only when the law requires it, such as a valid court order, or if Doorcove LLC’s business passes to another company, which would then be bound by this policy.

Checking for bots

The sign-up pages, Find your sign-in, the password reset form and, after a few wrong tries, your company’s sign-in page use Cloudflare Turnstile to check that a person, not a program, is filling in the form. On those pages your browser loads Cloudflare’s script, and Cloudflare receives your IP address and details about your browser and device to make that check, under its own privacy policy. Doorcove receives only whether the check passed.

Once you’re signed in, the same check runs when you send a form that pays rent or turns on autopay, sets up where an owner’s rent is paid out, changes your email, password or phone number, adds a passkey, sends an invitation, or connects a bank. Your browser loads Cloudflare’s script only when you send one of those forms.

When you use the assistant

When you use the assistant, what you write, the files you give it and the records it looks up to answer you are sent to Anthropic, the company that makes Claude, so Claude can read them and answer. Those records can include your tenants’ names and contact details, rent, repairs and, for the owner and the accountant, bank lines.

Under Anthropic’s commercial terms, Anthropic does not use them to train its models. It keeps them for up to 30 days, then deletes them. Anything flagged for breaking Anthropic’s usage rules may be kept for up to 2 years, and anything the law requires it to keep, for as long as the law requires.

PDFs and photos are sent as they are. Doorcove hides Social Security and bank account numbers it finds in text files, such as spreadsheets and Word files, before they are sent, but it can’t do that inside a PDF or a photo, so leave those numbers out of the files you give the assistant.

Doorcove keeps your conversations, the files you gave the assistant and what it added with your company’s records. The owner can open the files a manager or an accountant gave it. Archiving a conversation hides it; it does not delete it.

Texts

Doorcove texts only people who confirmed a code sent to their phone, about rent and repairs, about 4 a month. Message and data rates may apply.

Reply STOP to stop, or HELP for help. A STOP takes effect at once, for every company on Doorcove that has your number, and is confirmed with one last text. Reply START to get texts again.

Doorcove keeps a record of each confirmation and each STOP: the phone number, the wording that was agreed to, when, and from where.

No mobile information is shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third parties, other than the text service named above, which only sends the messages.

Ticking “Text me updates about my account” at sign-up only records that you’re interested. Doorcove asks again, with a code, before the first text.

Email

Doorcove sends email for invitations, password resets, address confirmations, receipts, rent reminders, owner statements and the replies a company writes in its Inbox. Doorcove sends no newsletters or advertising email.

Email to tenants and contractors comes from their company’s name, and a reply goes to that company, not to Doorcove.

Doorcove’s emails include a small image and tracked links that tell your company whether an email arrived, was opened and was looked at. They are used for nothing else: no advertising, and nothing goes to anyone else. Doorcove keeps when it happened and the kind of email app, never the reader’s IP address.

People who sign in can turn off the notices they don’t need on their account page, and those emails carry a link that turns them off. Emails needed to run an account, such as invitations, password resets and receipts, can’t be turned off. Anyone else can ask the company that wrote to them, or write to support@doorcove.com.

If an email bounces or is marked as spam, Doorcove stops sending to that address, for every company on Doorcove.

Cookies and browser storage

Doorcove sets only these cookies, and only to make the site work. None of them is for advertising or analytics:

dc_session

On your company’s address, for 30 days. Keeps you signed in.

dc_signup

On doorcove.com, for 24 hours. Remembers your unfinished sign-up.

dc_signup_flash

On doorcove.com, for 2 minutes. Refills a sign-up step after a mistake. It never holds a password.

Form cookies

On your company’s address, for at most 2 minutes, each limited to the page of one form, such as /team, /leases/<id>, /buildings/import, /leases/import and the other long forms. Their names start with dc_ (dc_invite_flash, dc_lease_flash and the like). After a mistake they carry what you typed back to that form, or show a new invitation link once. Never a password or a code.

Your browser also remembers a few things for the current tab only, and they never leave your browser: on the home page, that you’ve seen the opening animation; once you’re signed in, your place in a review list and a half-filled form until you save or cancel it.

No tracking on Doorcove’s pages

Doorcove’s pages have no analytics, no ads and no tracking pixels. The one script from another site is Cloudflare’s bot check, only on the pages and forms named above. Doorcove’s fonts are served by Doorcove itself, so opening any other page sends nothing to anyone else. The only tracking is in Doorcove’s emails, as the Email section says.

Connecting a bank and paying rent online happen on Plaid’s and Stripe’s own pages, under their own policies. Doorcove’s public pages, such as this one, can be listed by search engines; nothing behind a sign-in is.

Who can see it

The members of your company, each according to their role. For example, a tenant sees only their own home, a manager never sees the bank feed, and an accountant reads but changes nothing.

A property owner your company manages buildings for sees their own buildings, their statements, their repairs and the documents shared with them, and never your tenants’ names or contact details.

Each company’s information is walled off from every other company’s by the database itself. The people who run Doorcove can reach the database, the files and the backups, to keep Doorcove working and when you ask for help. Your information is not sold, and goes to other companies only as this policy says.

Where it’s kept

In Doorcove’s own database and, for photos and documents, on its own server’s disk, on servers Doorcove rents in the United States. What each company named above receives is kept by that company.

Doorcove backs up its database every day and the files every week. The backups are kept on the server and copied to a computer the people who run Doorcove keep, also in the United States. The key that opens bank connections is in no backup.

How long it’s kept

Doorcove doesn’t delete records, with the one exception below. When something is removed, it is archived: hidden from everyone, but kept, and so are the backups. A landlord’s books need their history, for taxes and for disputes, and the history of changes is what lets a mistake be undone.

This is true while your account is open and after it is closed. If you want something taken out of sight, ask, as What you can ask for says.

The exception is bank data. The bank data Doorcove got through Plaid is deleted when the person who connected that bank asks. Only a company’s owner can connect a bank, and the owner can delete a bank’s data at any time on the Bank accounts page, after a page that says what goes and what stays. The person who connected a bank can also write to us, as What you can ask for says.

Doorcove first tells Plaid to remove the connection. If Doorcove can no longer open its own key to that connection, nothing is deleted until our support has removed it at Plaid by hand. Then Doorcove deletes the bank’s own words for each transaction (its description, the merchant and the check number), the account names, their last four digits and the balances, from its records and from the copies it made of them: the suggestions, the assistant’s conversations, Doorcove’s copies of its emails, and the payer names Doorcove learned from them (a payer your company set up keeps its name). What a person typed in a message to the assistant is never changed: those are their own words. In what the assistant and Doorcove wrote in the assistant’s conversations, and in the emails, what goes is each transaction’s whole description and merchant’s name, written as the bank wrote them in any letters, that bank’s account names, the last digits of that bank’s accounts wherever Doorcove or the assistant wrote them, and the bank’s own name where it names one of those accounts, such as “Harbor Bank account ending 0042”, matched only as the bank writes its name. When an account’s last digits are four, they go even where the same four digits mean something else, such as “Unit 0042”. They stay inside a longer number or an amount, and before “days”, “weeks”, “months” or “years”. Last digits that read as a year, such as 2026, or that are shorter than four go only where they are written as an account’s, such as “account ending 2026”. Where the assistant shows one of those transactions itself, in a list or a table, its description and merchant go however short they are. A single everyday word never goes on its own, so “chase” in “chase the late rent” and “square” in “1,200 square feet” stay, even when the bank or a merchant has that name, and so does the bank’s name anywhere else. A name your company keeps in its own records, such as a contractor’s, a tenant’s or another bank account’s, stays wherever it is written, except in what the assistant wrote in a conversation about one of the deleted transactions. The rules Doorcove learned from those transactions, or that apply only to that bank’s accounts, lose their words and are switched off, so they file no new transactions; the transactions they already filed stay filed. Doorcove keeps only each line’s date, amount and how it was filed, and any note your company wrote on a line, because the company’s books need them. It can’t be undone.

The history of changes and the activity log are never changed by a deletion; it only adds one entry to each saying that it happened. The history of changes never keeps the bank’s own words for a transaction, or a connected account’s name, last four digits or balance: it shows them from the transaction or the account as it is now, so after a deletion it says “Bank details deleted” for a transaction and “Bank account” for an account. The activity log records who did what and when, never a transaction’s description, merchant or check number, although entries it made before this version about a rule can hold the rule’s words. Both can still name the bank itself. When a transfer shows the last four digits of another account of yours and you say which account it is, such as “Your account ending 8812”, that is your company’s own record: it stays, in both of them too.

Doorcove’s backups are kept, but they are never used to bring deleted bank details back. Each deletion is recorded, in the database and in a separate record copied with the backups. If a backup is ever restored, our restore steps do every recorded deletion again before Doorcove opens again. Doorcove also checks every minute for deleted bank details that come back, and holds every email, text and statement it would send for your company until each recorded deletion is done again. Only the emails about signing in, passwords, email addresses and invitations, and the texts that confirm a phone number or answer HELP or STOP, still go, as they never hold bank details. An export your company made before the deletion is kept as it was made, and can still show the account’s name. What Plaid already holds is handled under Plaid’s own policy, and what the assistant already sent to Anthropic is kept as the assistant section says.

How it’s protected

• Every page is sent over a secure connection (https).
• Passwords are kept only as one-way hashes, and sign-in links and codes only as hashes.
• Each company’s records are walled off from every other company’s in the database itself, and each role sees only its own part.
• Doorcove’s access to your bank is sealed with a key kept apart from the database and the backups.
• Sign-ins and sign-ups are limited after too many tries, and the riskiest forms use the bot check.
• Doorcove’s logs never hold a password, a token or a message’s text.

No system is perfectly safe, and we can’t promise nothing will ever go wrong. If you find a security problem, write to support@doorcove.com.

If someone gets into information they shouldn’t, we tell the owner of each company whose records it is, by email, as quickly as we can, and anyone else the law says we must tell. For a company’s records about its tenants and other people, the company tells them, and we help.

What you can ask for

You can ask to see the information Doorcove holds about you, to correct it, or to get a copy of it. You can correct much of it yourself on your account page.

If you connected a bank, you can ask us to delete the bank data Doorcove got from it, as How long it’s kept says, and the company’s owner can do it on the Bank accounts page. We confirm when it is done.

Apart from that, Doorcove doesn’t delete records. If you ask us to remove something about you, we archive it: it is hidden from everyone, and stays in the database, its history of changes and the backups. If you ask, we also stop every email and text from Doorcove to your address or number. Our answer says what we archived and what stays. Where a privacy law that applies to Doorcove requires more, we do what it requires.

To ask, write to support@doorcove.com from the email address on your account. We may ask you to confirm it’s you. Someone you authorise can ask for you; we may ask them to show that you did.

If the information is in a company’s records, such as a tenant’s lease, that company decides, and we will pass your request to them and help them answer.

If you live in New Jersey or another US state with a privacy law, you have these rights under that law too. If we say no, you can ask us to look again, by replying to our answer, and if you’re still not satisfied, you can contact your state’s attorney general; in New Jersey, the Division of Consumer Affairs. Asking never changes your price or what Doorcove does for you.

Doorcove does not sell personal information and does not share it for targeted advertising, so there is nothing to opt out of, with or without a browser’s opt-out signal such as Global Privacy Control.

Children

Doorcove is for adults running rental property. Nobody under 18 may have an account. If you think a child has signed up, write to support@doorcove.com.

A company’s records may name the people who live with a tenant, children included. Those are the company’s records, as Who is responsible says.

Changes to this policy

When this policy changes, the new version is published here, and each company’s owner sees a notice on their home in Doorcove for 30 days. The version your company agreed to is recorded, and earlier versions stay readable here.

Contact

Doorcove LLC, New Jersey. Email support@doorcove.com, for privacy questions as for anything else.