Privacy Policy

Last updated: April 15, 2026

DoorReach ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what choices you have. By using DoorReach, you agree to the practices described here.

1. Information We Collect

Account information: When you create an account, we collect your name, email address, company name, and password (stored as a one-way cryptographic hash — we never store your plain-text password).

Profile information: You may optionally provide a phone number and website.

Billing information: Payment details are handled entirely by Stripe. We store only your Stripe customer ID and subscription status — we never see or store your credit card number.

Usage data: We collect information about how you use the platform — markets you add, searches you run, leads you view, letters you send, and credits you consume. This helps us improve the service.

Log data: Our servers automatically record IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and debugging.

Cookies and sessions: We use session cookies to keep you logged in. See Section 8 for details.

2. How We Use Your Information

• Service delivery: To operate DoorReach — authenticate you, display your leads, process your mailing requests, and manage your subscription.
• Billing: To charge your payment method, send receipts, and manage your subscription via Stripe.
• Email notifications: To send you a welcome email when you sign up, transactional notifications about your account, and occasional product updates. We use Gmail API (via Google OAuth) to send these emails.
• Customer support: To respond to your questions and resolve issues.
• Security and fraud prevention: To detect and prevent abuse, unauthorized access, and fraudulent activity.
• Product improvement: To understand how users use DoorReach and improve features over time. This analysis is done in aggregate and is not tied to individual users.

We do not sell your personal information to third parties. We do not use your data for behavioral advertising.

3. Third-Party Services

DoorReach integrates with the following third-party services to operate the platform:

• Stripe — Payment processing. Your payment data is governed by Stripe's Privacy Policy.
• Google (Gmail API) — Used to send transactional emails from our account. Governed by Google's Privacy Policy.
• Lob — Physical mail delivery. When you send letters, Lob receives the recipient's mailing address and the letter content. Governed by Lob's Privacy Policy.
• ScraperAPI — Used to fetch publicly available listing data from Zillow. We do not pass your personal information to ScraperAPI.
• Skip-trace data providers — We use third-party services that aggregate public records (county assessor data, USPS records) to provide owner contact information. These providers receive property addresses as queries but not your personal account information.
• Zillow — Property listing data is sourced from Zillow's public listings. We do not share your personal information with Zillow.

4. Data We Do Not Collect

We do not collect sensitive personal information such as Social Security numbers, financial account details (beyond what Stripe handles), health information, or government IDs.

5. Data Retention

We retain your account data as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., billing records).

Property data and lead records associated with your account are deleted when your account is deleted. Server log data is retained for up to 90 days for security purposes.

6. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Correction: You can update your account information at any time from your Settings page.
• Deletion: You can request deletion of your account and associated data. Email us at info@ridgelinepropertymanagement.com with the subject "Delete My Account."
• Opt-out of marketing emails: You can opt out of non-transactional emails by contacting us. Note: transactional emails (receipts, security alerts) cannot be disabled.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising your privacy rights. To exercise these rights, contact us at the email below.

If you are in the European Economic Area (EEA), you have rights under the GDPR including data portability and the right to lodge a complaint with your supervisory authority. Our legal basis for processing your data is contract performance (to provide the service you signed up for) and legitimate interests (security and product improvement).

7. Data Security

We take reasonable technical and organizational measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Bcrypt hashing of passwords (we never store plain-text passwords).
• Rate limiting and session management to prevent unauthorized access.

No system is 100% secure. In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable law.

8. Cookies

DoorReach uses the following cookies:

• Session cookie: A secure, HTTP-only cookie that keeps you logged in during your session. This is essential for the service to function.
• CSRF token: A security token included with form submissions to prevent cross-site request forgery.

We do not use tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, but this will prevent you from using DoorReach.

9. Children's Privacy

DoorReach is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Continued use of DoorReach after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For privacy questions, data requests, or to exercise your rights, contact us at:

DoorReach / Ridgeline Property Management
Bend, Oregon, USA
Email: info@ridgelinepropertymanagement.com