Privacy policy

Who we are

Doornomy is operated by Branchwork Software LLC. This policy covers https://doornomy.com, the landlord application, and the tenant portal. Contact us about anything in it at support@doornomy.com.

Two kinds of people in this system

This distinction runs through the whole policy, so it is worth stating first.

• Landlords are our customers. They open an account with us and we decide, with them, what happens to their information.
• Tenants and applicants are our customers’ people. They are in Doornomy because a landlord invited them or they applied for a home. We hold and process that information on the landlord’s behalf, to run the tenancy or the application — not for our own purposes.

If you are a tenant or an applicant and you want your information corrected or removed, your landlord is the person who controls it. Ask them, or ask us and we will route it to them and help.

What we collect

From landlords

• Name, email address and the organization name you give us.
• Your properties, units, leases, ledger entries, documents and photos.
• Billing details held by Stripe. We see the last four digits, the card brand and the invoice history — never the full number.
• Basic usage and diagnostic records: what pages were requested, errors, and the security log of who changed what.

From tenants

• Name, email address, phone number, and which unit they occupy.
• Rent charges, payments and receipts.
• Bank account details for rent payments, held by Stripe. We store a token and the last four digits, never the account or routing number.
• Maintenance requests, including the photos they upload.

From applicants

• The application itself: contact details, income, employment, history, references.
• Consents and disclosures, with a record of when they were given.
• The decision made and, where one was issued, the adverse-action notice.

Why we use it

• To run the service: collect rent, dispatch a repair, issue a receipt, keep books.
• To authenticate people. We use emailed sign-in links and do not store passwords.
• To send transactional email: receipts, sign-in links, notices, reminders.
• To bill our customers and to prevent abuse and fraud.
• To support you when you ask us for help.
• To comply with law, and to keep records we are required to keep.

We do not use tenant or applicant information for advertising, we do not build profiles across landlords, and we do not use it to train general-purpose AI models.

Who we share it with

We share personal information with service providers who need it to make the product work, under contracts that limit them to that purpose:

• Stripe — payments, both our subscription billing and the rent a tenant pays a landlord. Stripe is a controller of the payment data it collects, under its own privacy policy.
• Amazon Web Services — hosting, file storage and outbound email, in the United States.
• An AI provider — for the optional features that draft listing copy, triage a maintenance ticket or read a receipt. Content sent for those purposes is not used to train the provider’s models.
• A consumer reporting agency — where screening is used, and on the applicant-direct basis described above.
• An electronic signature provider — where a lease is signed electronically.

We also share information when the law requires it, to protect someone’s safety, or to a buyer if the business is sold — in which case this policy travels with it.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Cookies and tracking

This marketing site sets no cookies and carries no analytics, advertising or third-party tracking scripts. Nothing on it is loaded from another company’s server.

The landlord app and the tenant portal set one essential cookie to keep you signed in. It is not used for tracking and there is no version of the product that works without it.

How long we keep it

For as long as the account is active, and then as long as we need it for the purpose it was collected for — a ledger and its supporting documents have a tax life measured in years, and deleting them the day someone cancels would harm the person who needs them.

After cancellation we keep the account’s records for a limited period so you can export them, then delete or anonymise what we are not required to retain. Ask us to delete something sooner and we will, unless we are legally required to keep it.

Security

Data is encrypted in transit and at rest. Access between accounts is separated at the database level, not only in application code. Sign-in is by emailed link, so there is no password of yours for us to lose. Access to production data is limited to people who need it, and administrative actions are logged.

No system is perfectly secure. If a breach affects your information we will tell you and the relevant regulator as the law requires, promptly and without minimizing it.

Your rights

Depending on where you live, you may have the right to access your personal information, correct it, delete it, obtain a portable copy, or object to some processing. Residents of California, Texas and other states with comprehensive privacy laws have these rights; we extend them to everyone rather than checking your address first.

To exercise any of them, email support@doornomy.com. We will respond within 45 days. We will not discriminate against you for asking.

If you are a tenant or applicant, see the note above: your landlord controls that record, and we will help you reach them.

Children

Doornomy is not for children and we do not knowingly collect information from anyone under 18. Minors named on a lease appear in the lease document itself and are not given accounts or records of their own.

Where your data is

In the United States. Doornomy serves US rental property and we do not currently transfer personal information outside the US.

Changes to this policy

We will update this page and change the version and effective date at the top. For a material change we will email account holders before it takes effect.