Privacy Policy

Last Updated February 3, 2025

DoorLoop Privacy Policy

Table of Contents

Introduction – Our Approach to Privacy
What Personal Data do we process?
What are the purposes of processing?
What is our legal basis for processing?
With whom do we share your Personal Data?
International transfers of Personal Data.
How long do we retain your Personal Data?
How do we secure Personal Data?
What are your rights with respect to your Personal Data?
Personal Data associated with minors.
Updates to this Privacy Policy.
Contact information

1. Introduction – Our Approach to Privacy

DoorLoop Inc. ("DoorLoop", "Company" "us" or "we") is committed to protecting your privacy and following the laws requiring it to do so. DoorLoop operates the following: a website located at https://www.doorloop.com ("Website") and a cloud-based platform or application - https://app.doorloop.com ("Cloud App") and additional products and services which may vary from time to time (the Website, Cloud App and other services and products shall be referred to collectively as "Offerings"). This Privacy Policy details topics such as, how we maintain, collect, use and disclose information that can identify or lead to the identification of an individual (“Personal Data”) and users of the Offerings (collectively “Visitors”).

Please note that we may also collect information that cannot be associated with a specific individual. However, if such information is combined with Personal Data, we will treat the combined information as Personal Data.

When you visit, access or use any of the Offerings, whether or not you choose to enter into or register for a free or paid subscription plan, your Personal Data will be processed in accordance with this Privacy Policy.

2. What Personal Data do we process?

DoorLoop collects Personal Data about You when, amongst other methods, you contact us, visit any of our websites, register with DoorLoop, express interest in obtaining information about DoorLoop, its products or services, when you participate in activities on any of DoorLoop’s websites, use any of DoorLoop’s services or products, and/or use any of the services or products provided by DoorLoop’s partners, third party providers, integrated providers, and affiliates.

DATA COLLECTED

The Information DoorLoop collects from Visitors varies depending on a variety of factors, including the products and features you use, the context under which you interact with DoorLoop and/or DoorLoop’s Offerings.

The following is a non-exhaustive list of Information we collect or may collect from you:

Website Visitors:

Name (first, middle, last)
Email
Login (username) and Password
Job title and function (i.e. role)
Portfolio type
Timeline
Browser language
Geographical location
IP address
Contact preferences
Phone number
Mailing and billing address
UTM (Urchin Tracking Model) parameters of which channel the visitor came from
Browser language
Region
Tracking Distinct ID
Referrer
Landing page
Campaign ID
Keyword ID
Adgroup ID
Google Click ID
Facebook Click ID
Microsoft Click ID
First Website Visit At

In addition, for DoorLoop Leads:

Payment data including bank, credit and debit card identifiers (i.e., last 4 digits, type of credit card)
Social media and email provider logins and profiles
Phone number, Email address, and Fax number
Gender
Photo(s)
Your company information, logo, and tax identification number
portfolio type

In addition for DoorLoop Subscribers, DoorLoop Customers, and other Users (including tenants, prospects and property owners):

Date of birth
Your social security number and/or other government issued identification number of information
Information and files provided by You when filling out an online Rental Application
Images of your driver's license, government issued passport, identification, and national identification card
Your activity while accessing, visiting, navigating and using DoorLoop’s Offerings, DoorLoop, its software, its website, its services, products and services and products offered by 3rd Party Providers (as defined in the Property Manager Terms of Service) via DoorLoop.

DoorLoop may also collect information, which may include Personal Data, from third party sources, such as public databases, affiliate programs, data providers as well as via sources including:

Your Media Access Control (MAC) address, computer (including phone and tablet) type, screen resolution, type of operating system as well as the version, and web browser type and version
Cookies, files that are stored in your computer/phone/tablet either temporarily or permanently, which permit DoorLoop to collect data/information including your browser, your language preference, time spent on DoorLoop’s Offerings, and tracking pages you visit
Web Beacons/Clear GIFs/Pixel tags (and other similar technologies).
Via your Internet Protocol address (“IP Address”).

DoorLoop may also collect information, which may include Personal Data, from third party sources, such as public databases, affiliate programs, data providers as well as via sources including:

Your Media Access Control (MAC) address, computer (including phone and tablet) type, screen resolution, type of operating system as well as the version, and web browser type and version
Cookies, or small data files that are stored on your device, either temporarily or permanently, which track information for efficiency, such as your browser, your language preference, time spent on DoorLoop’s Offerings, and pages you visit.
Web Beacons/Clear GIFs/Pixel tags (and other similar technologies).
Via your Internet Protocol address (“IP Address”).

3. What are the purposes of processing?

We may use and share Personal Data we collect for the following purposes:

To process your order and manage your account;
To provide you with materials (marketing, administrative, or otherwise) and information we believe may be of interest to you, including advising you of updates on Offerings, to inform you of upcoming events, and informative materials concerning:

changes to our terms, conditions, and policies (including this Privacy Policy);
other administrative information; and
Offerings (new & old)

To call you, send you text messages, calendar invite reminders, emails, event reminders, and the like. Be advised that by providing DoorLoop Your phone number, (a.) You consent to receive texts, calls and emails from DoorLoop about its products and services, (b.) message and data rates may apply, and (c.) You can reply STOP to opt out from text messages at any time. And please know that Your consent to receiving text messages is not a condition of any purchase.
To fulfil and/or manage your requests;
To allow you to provide materials and/or information to your respective users, clients, residents, tenants, applicants, owners, managers, or vendors;
To allow you to add your contacts to/for DoorLoop’s referral programs. By doing so, you are informing DoorLoop that you are lawfully authorised to use and provide us with your contact’s name, phone number, email address, and other information requested by DoorLoop and provided by you;
To allow your partaking in promotional activities, contests, and similar activities (collectively, “Events”), and to manage and run such Events. Be advised that such Events may have additional rules governing how we use, maintain, collect and disclose Information;
To allow you to personalise your experience on DoorLoop’s Offerings;
To enable our third-party service providers to provide you/your business with services including:
- credit, debit, ACH and other financial processing services;
- email and text messaging services (however, such third party providers may not text you without your prior express consent which you may give or deny in your sole and absolute discretion and which is not a condition for receiving services);
- renter’s insurance;
- criminal, credit and eviction history background check(s) and identity verification(s);
- website hosting;
- customer service;
- auditing;
- marketing;
- document signatures;
- listing syndication;
- security deposit and security deposit alternatives;
- loan and other financing services;
To suggest and/or provide products, services and offers that we believe you might find to be of interest;
For security purposes, to protect the Offerings, to enforce our terms, conditions and policies, to respond to and/or comply with legal and/or regulatory requirements and/or requests, and/or to enforce any agreements that DoorLoop has with you;
To respond to your questions, comments and concerns;
To aid in navigation and in the more efficient and/or effective display of data, materials and information, and to personalise your experience;
For our commercial and business purposes, including statistical analysis and research and development;
To try and diagnose technical issues, including software error(s) or bug(s);
For online, email, marketing, usage, response rate and other tracking purposes;

4. The legal basis for processing - GDPR

The General Data Protection Regulation (GDPR) is a unified data protection law that came into effect on May 25, 2018, in the EU.The law strengthens the protection of personal data belonging to EU individuals and gives them more control over the use of their personal data within the EU and internationally. GDPR applies to all businesses that process personal data for EU residents.
We believe that GDPR is an important means to ensuring the rights of individuals to control access to their personal information, and we are committed to supporting our customers in meeting their GDPR requirements. We have updated our product and business operations to comply with GDPR guidelines, meeting our requirements as both a data controller and data processor. These updates are reflected herein.
This policy also identifies how personal data is collected and kept secure, and how data subjects may contact DoorLoop regarding their information.
DoorLoop’s industry-leading security measures protect data stored within. For general information on GDPR, please visit the Information Commissioner’s Office website.

5. With whom do we share Personal Data?

We do not rent or sell any Personal Data, and no such activity has occurred in the prior 12 months. In the event that DoorLoop changes its practices and engages in the sale of personal information as regulated by law, we will provide advance notification to impacted individuals and offer the ability to opt in/opt out in accordance with regulatory requirements.
We may share Personal Data when authorized or otherwise requested by You, for example, when You use or implement one or more 3rd Party Provider Services (as defined in DoorLoop’s Terms of Service).
We may share Personal Data with the following categories of recipients:
- Trusted vendors, business partners, suppliers, subcontractors and service providers – these recipients process Personal Data we share with them only as "processors" or "service providers" (as these terms are defined in the applicable laws), and are only authorised to use your Personal Data only as necessary to provide certain services to us. They may provide us with different services, such as fraud detection and prevention, storage, analytics, advertising, financial products and services, payment services, loan services, security deposit alternatives, marketing and listing syndication, renter’s insurance, address verification providers and so on.
- Analytics and search engine providers that assist us in the improvement and optimization of our WebsiteCredit reference agencies for the purpose of assessing your credit score where this is a condition of us entering into a contract with you.
- Payment processors for the purpose of fulfilling relevant payment transactions.
- We may share information, including Personal Data, in the event of a corporate transaction (e.g., sale of a substantial part of our business, merger, consolidation or asset sale of an asset or transfer in the operation thereof) of DoorLoop. In the event of the above, the acquiring company or transferee will assume the rights and obligations as described in this Privacy Policy.
- We may also disclose Personal Data, or any information you submitted via the Offerings if we have a good faith belief that disclosure of such information is helpful or reasonably necessary to: (i) comply with any applicable law, regulation, subpoena, legal process or governmental or administrative request; (ii) enforce our policies (including our agreements), including investigations of potential violations thereof; (iii) investigate, detect, prevent, or take action regarding illegal activities or other wrongdoing, suspected fraud or security issues; (iv) establish or exercise our rights to defend against a legal claim or potential legal claim; (v) prevent harm to the rights, property or safety of us, our affiliates, our Users, yourself or any third-party; (vi) for the purpose of collaborating with law enforcement agencies; and (vii) in case we find it necessary in order to enforce intellectual property or other legal rights.
- Testimonials. With consent, we may display personal testimonials of satisfied customers on our site, along with other endorsements.
- Under some circumstances, these technologies may be deemed a “sharing” of personal information under applicable privacy laws.Cookie PolicyWe utilize cookies and tracking technologies as set forth in the
  
  Use of Local Storage and Session Storage
- In addition to other cookie and tracking technologies, DoorLoop also uses local storage and session storage technologies to, amongst other reasons, enhance your user experience and improve the functionality of our services. These local and session storage mechanisms allow us to save small amounts of data directly on your device, which may include preferences, settings, or other necessary information.
- * Local Storage: Data saved in local storage remains on your device even after you close your browser or navigate away from our website. This helps us provide a consistent experience by remembering your preferences for future visits. For example, we may use local storage to save your language selection or other customization settings.
- * Session Storage: Data saved in session storage is temporary and only persists while your browser is open. This data is automatically deleted once you close your browser. Session storage is typically used to maintain session-specific information, such as temporary form inputs or navigation history.
- We do not use local storage or session storage to collect sensitive personal information without your explicit consent. You can manage or delete data stored in local and session storage through your browser’s settings. Please note that disabling these storage mechanisms may affect your ability to use certain features of our website.

*** All voluntary sharing of Personal Data as described above is only done in accordance with an applicable contractual engagement.

In the 12 preceding months, we have collected and/or disclosed the following categories of Personal Data:

Identifiers: Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address and account name, social security number, Driver’s licence/passport number, or other similar personal identifiers associated with residential and commercial real estate activities, or payment processing activities.

Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).: Name, contact information, education, employment, employment history and financial information.

Protected classification characteristics under California or federal law: Gender and date of birth.

Commercial information: Transaction information, purchase history, financial details and payment information.

Internet or Other Electronic Network Activity Information: Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.

Geolocation data: Device location.

Audio, electronic, visual, thermal, or sensory data: Images and audio, video or call recordings created in connection with our business activities.

Professional or employment-related information: Business contact details in order to provide you our services at a business level, job title as well as work history and professional qualifications if you apply for a job with us.

Education information: Student records and directory information.

Inferences drawn from other personal information: Inferences drawn from any of the collected personal information listed above to create a profile or summary about, for example, an individual’s preferences and characteristics.

6. International transfers of Personal Data

Since DoorLoop operates globally, it may be necessary to transfer data, including Personal Data, to jurisdictions other than your own, including outside of the UK or the European Union. In these instances, we ensure that these international transfers of your personal information are made pursuant to appropriate safeguards, and, we will take suitable steps to ensure that your personal data is treated just as safely and securely as it would be within the EU and under the General Data Protection Regulation (“GDPR”) or the UK General Data Protection Regulation (“UK GDPR”). Such measures shall include, but are not limited to, having Data Processing Agreements with applicable subprocessors and ensuring that such subprocessors have adequate security and data protection procedures in place and which align with the GDPR or any other applicable data protection law.

7. How long do we retain your Personal Data?

We will only retain Personal Data for as long as necessary to provide our Offerings and to comply with our legal obligations, resolve disputes and enforce our agreements (unless we are instructed otherwise). Retention periods are determined by taking into account the nature/sensitivity and amount of information, the potential risk of harm from unauthorized use, the purpose for which it is collected, bearing in mind the requirements applicable to the situation and the need to destroy outdated, unused information at the earliest reasonable time. Under applicable regulations, we may keep records containing users' Personal Data, compliance related data, communications and anything else as required by applicable laws and regulations.
We may rectify, replenish or remove incomplete or inaccurate information, at any time and at our own discretion.

8. How do we secure Personal Data?

We take security of data seriously and take appropriate security measures in an effort to maintain the security of the Personal Data. We are continuously implementing and updating security controls to help protect your information against unauthorized access, loss, destruction, or alteration. Such controls may include industry standard intrusion detection systems, encryption of data both while in transit over public networks (e.g., Internet) and while at rest (e.g., in a database or platform), and identifying and patching exploitable software and system vulnerabilities.

We protect Personal Data that is sent through our website in transit by appropriate encryption. However, we can only move to secure areas under our control, and despite our efforts, please know that, security risks can never be excluded completely and residual risks are unavoidable.

Notwithstanding this, we cannot guarantee the complete security of your personal information transmitted to our Website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to prevent any risks. Where we have given you (or where you have chosen) a password which enables you to access certain parts of our Offerings, you are responsible for keeping this password confidential. You should not share your password with anyone.

9. Your Rights Regarding Your Personal Data

Any information shared with us is not sold or shared for marketing purposes. We take your privacy seriously and ensure that your data is used only for the purposes outlined in our privacy policy.

Depending on your jurisdiction, you may have rights under data protection laws concerning the personal data we process about you. You have the following rights:

Request Access: You can request a copy of the personal data we hold about you (this is called a "data subject access request").
Request Correction: You can ask us to correct any incomplete or inaccurate data we hold about you. We'll need to verify the new information you provide.
Request Erasure: You have the right to ask us to delete or remove your personal data.
Object to Processing: In certain cases, you can object to how we process your personal data.
Request Restriction: You can request that we restrict the processing of your personal data.
Request Transfer: You can ask for your personal data to be transferred to you or to a third party in a structured, commonly used, machine-readable format.
Withdraw Consent: If we rely on your consent to process your data, you can withdraw it at any time. However, this may affect our ability to offer certain services or products.
Automated Decision-Making: You have the right to object to decisions based solely on automated processing or profiling, and request human intervention in such cases.

U.S. State-Specific Rights

Depending on where you live, you may have additional rights:

California Rights

Right to Know: You can request the categories of personal data we’ve collected and disclosed about you in the past 12 months.
Right to Correct: You can request corrections to inaccurate personal information.
Right to Delete: You can request deletion of your personal data (subject to certain exceptions).
Right to Access: You can request a copy of your personal data.
Right to Opt-Out: You can opt-out of sharing your data for cross-context behavioral advertising.

Important Note: We do not sell your personal data to third parties.

Non-Discrimination
We will not discriminate against you for exercising your CCPA rights, including charging you different prices or providing a different quality of goods or services.

Sensitive Personal Information
We do not use or disclose sensitive personal information (such as your social security number, financial information, or racial/ethnic details) other than as permitted by law.

Authorized Agents
If you wish to designate an authorized agent to exercise these rights on your behalf, we may require a signed declaration from you.

Other State Rights (Colorado, Connecticut, Texas, Utah, Virginia)

Access and Correction: You can request to see and correct your personal information.
Deletion and Data Portability: You can request deletion or a copy of your personal data.
Opt-Out: You can opt-out of targeted advertising under your state’s law.

Oregon Rights

Access: You can request details on the personal data we've collected and disclosed about you.
Correction: You can ask us to correct inaccurate personal information.
Deletion: You can request deletion (with some exceptions).
Opt-Out: You can opt-out of targeted advertising under Oregon law.

Exercising Your Rights
To exercise any of your rights, please contact us. We may need to verify your identity before processing your request. This helps us ensure that only authorized individuals have access to your data.

If you’re not satisfied with the response to your request, you can appeal. For residents of the EEA or UK, you also have the right to lodge a complaint with the relevant data protection authority.

If you have any questions, feel free to contact us via SMS, and we’ll be happy to assist.

Please note that these rights may be subject to our legitimate interests or other regulatory requirements. We do not sell your personal information.

10. Personal Data associated with minors

Our Offerings are not intended for minors below the age of 16 years or otherwise below the legal age for providing consent that is not subject to authorization by the holder of parental responsibility, in accordance with the laws in the jurisdiction your reside (“Age of Consent”), and we will not knowingly collect Personal Data from children. If we become aware that a user is under the Age of Consent, we will remove their information from our files. We reserve the right to request proof of age at any stage so that we can verify that minors or unauthorised individuals are not using the Offerings.

11. Updates to this Privacy Policy

We may revise this Privacy Policy from time to time, in our sole discretion, and the most current version will always be posted on our Website (as reflected in the "Last Updated" heading). We encourage you to review this Privacy Policy regularly for any changes.

12. Contact information

If you have any questions about DoorLoop’s Privacy Policy, the Personal Data we process associated with you, would like to exercise one of your data protection rights, have a complaint, or want to address any other issue, please do not hesitate to contact us.

As a reminder, when you do contact us, we want to make sure that we understand your request. So please state precisely and with specificity what you are wanting DoorLoop to do or not to do. We will make reasonable efforts to comply with your requests as soon as reasonably practicable.

Simply put, by contacting us as detailed herein / below, you can choose to opt out, on a going-forward basis, from (a.) receiving text messages (simply reply “Stop” to any text to opt out), marketing emails and promotions and (b.) DoorLoop’s sharing of your information (Personal Data or otherwise) and/or Data Collected with affiliates, third parties, and partners. Please know that if you choose to opt out, while we are unable to remove, from those databases of our affiliates, third parties, and partners, information/details already provided/disclosed, we will make reasonable efforts to remove such information/details from our databases and will stop sharing, to the extent we are lawfully allowed, such information/details with others. Please note that despite opting out of marketing related correspondence, DoorLoop may still send you administrative messages.

Write to us at: DoorLoop Inc., Attn: Privacy Department, 1601 Washington Ave, Suite 200, Miami Beach, FL 33139 USA.

To reach our Data Protection Officer (DPO) , please fill out our contact form at: https://www.doorloop.com/contact.

13. SMS Consent and Terms & Conditions

No mobile opt-in or text message consent will be shared with third parties or affiliates for marketing purposes.

If you have consented to receive text messages from Esposo Property Management, you may receive texts about your order or delivery (for guests and vendors), or if you have applied for employment with Esposo Property Management, you may receive text messages about your application for employment. Message rates may apply and messaging frequency may vary. You may opt-out at any time by texting, STOP. No mobile opt-in or text message consent will be shared with third parties or affiliates for marketing purposes.