Privacy policy
What changed, and when
Version 1.1 · 30 August 2026
Corrected the description of where the software works: it is available in every US state, and only the state-specific statutory rules we publish are limited to the states named. Added a disclaimer covering deadline dates a landlord supplies themselves. Corrected the privacy policy's description of sign-in: tenants use emailed links, while landlord and staff accounts may use a password, which is stored only as a hash. Disclosed that the waitlist form stores the email address you give it, that it is deleted after two years, and that the site keeps your light/dark preference in your own browser.
Version 1.0 · 5 August 2026
First published terms of service, privacy policy and cancellation policy.
The short version
- We collect what the product needs to work, and not more.
- We do not sell personal information, and we do not sell or broker tenant data.
- We never see your bank credentials or full card number — Stripe handles those.
- Applicants buy their own credit and background report directly from the reporting agency, so we never hold the underlying report.
- Ask us to delete something and we will, unless the law says we must keep it.
This summary is for orientation. The sections below are the policy.
Who we are
Doornomy is operated by Branchwork Software LLC. This policy covers https://doornomy.com, the landlord application, and the tenant portal. Contact us about anything in it at support@doornomy.com.
Two kinds of people in this system
This distinction runs through the whole policy, so it is worth stating first.
- Landlords are our customers. They open an account with us and we decide, with them, what happens to their information.
- Tenants and applicants are our customers’ people. They are in Doornomy because a landlord invited them or they applied for a home. We hold and process that information on the landlord’s behalf, to run the tenancy or the application — not for our own purposes.
If you are a tenant or an applicant and you want your information corrected or removed, your landlord is the person who controls it. Ask them, or ask us and we will route it to them and help.
What we collect
From landlords
- Name, email address and the organization name you give us.
- Your properties, units, leases, ledger entries, documents and photos.
- Billing details held by Stripe. We see the last four digits, the card brand and the invoice history — never the full number.
- Basic usage and diagnostic records: what pages were requested, errors, and the security log of who changed what.
From tenants
- Name, email address, phone number, and which unit they occupy.
- Rent charges, payments and receipts.
- Bank account details for rent payments, held by Stripe. We store a token and the last four digits, never the account or routing number.
- Maintenance requests, including the photos they upload.
From applicants
- The application itself: contact details, income, employment, history, references.
- Consents and disclosures, with a record of when they were given.
- The decision made and, where one was issued, the adverse-action notice.
We do not hold your credit or background report. Where a consumer report is used, the applicant buys it directly from the consumer reporting agency and authorizes the landlord to see the result. The underlying report does not pass through us and is not stored by us.
Why we use it
- To run the service: collect rent, dispatch a repair, issue a receipt, keep books.
- To authenticate people. Tenants and applicants sign in with an emailed link only. Landlord and staff accounts may also use a password, which we store only as a hash — never the password itself.
- To send transactional email: receipts, sign-in links, notices, reminders.
- To bill our customers and to prevent abuse and fraud.
- To support you when you ask us for help.
- To comply with law, and to keep records we are required to keep.
We do not use tenant or applicant information for advertising, we do not build profiles across landlords, and we do not use it to train general-purpose AI models.
Who we share it with
We share personal information with service providers who need it to make the product work, under contracts that limit them to that purpose:
- Stripe — payments, both our subscription billing and the rent a tenant pays a landlord. Stripe is a controller of the payment data it collects, under its own privacy policy.
- Amazon Web Services — hosting, file storage and outbound email, in the United States.
- An AI provider — for the optional features that draft listing copy, triage a maintenance ticket or read a receipt. Content sent for those purposes is not used to train the provider’s models.
- A consumer reporting agency — where screening is used, and on the applicant-direct basis described above.
- An electronic signature provider — where a lease is signed electronically.
We also share information when the law requires it, to protect someone’s safety, or to a buyer if the business is sold — in which case this policy travels with it.
We do not sell personal information and we do not share it for cross-context behavioral advertising.
Cookies and tracking
This marketing site sets no cookies and carries no analytics, advertising or third-party tracking scripts. Nothing on it is loaded from another company’s server. The one thing it does store in your browser is your choice of light or dark theme, which stays on your device and is never sent to us.
The landlord app and the tenant portal set one essential cookie to keep you signed in. It is not used for tracking and there is no version of the product that works without it.
How long we keep it
For as long as the account is active, and then as long as we need it for the purpose it was collected for — a ledger and its supporting documents have a tax life measured in years, and deleting them the day someone cancels would harm the person who needs them.
After cancellation we keep the account’s records for a limited period so you can export them, then delete or anonymise what we are not required to retain. Ask us to delete something sooner and we will, unless we are legally required to keep it.
Security
Data is encrypted in transit and at rest. Access between accounts is separated at the database level, not only in application code. Tenants and applicants sign in by emailed link, so there is no password of theirs for us to lose; where a landlord or staff account uses a password, we hold only a hash of it and cannot read it back. Access to production data is limited to people who need it, and actions that move money, change a lease, decide an application or dispatch a repair are recorded on an event trail we cannot silently edit.
No system is perfectly secure. If a breach affects your information we will tell you and the relevant regulator as the law requires, promptly and without minimizing it.
Your rights
Depending on where you live, you may have the right to access your personal information, correct it, delete it, obtain a portable copy, or object to some processing. Residents of California, Texas and other states with comprehensive privacy laws have these rights; we extend them to everyone rather than checking your address first.
To exercise any of them, email support@doornomy.com. We will respond within 45 days. We will not discriminate against you for asking.
If you are a tenant or applicant, see the note above: your landlord controls that record, and we will help you reach them.
Children
Doornomy is not for children and we do not knowingly collect information from anyone under 18. Minors named on a lease appear in the lease document itself and are not given accounts or records of their own.
Where your data is
In the United States. Doornomy serves US rental property and we do not currently transfer personal information outside the US.
Changes to this policy
We will update this page and change the version and effective date at the top. For a material change we will email account holders before it takes effect.
Privacy questions, or a request about your information: Branchwork Software LLC, support@doornomy.com. See also our terms of service.