← Back to doorstep.chat

Privacy Policy

doorstep.chat · Last updated: March 2026

1. Overview

We keep this simple: we collect only what we need to run the service, we don't sell your data, and you can delete your account anytime.

2. What we collect

Account information

  • Email address (required to sign in)
  • First and last name (optional, set in your profile)

Usage data

  • Messages you send to the chatbot
  • Number of messages used (for plan limits)
  • City and neighborhood preferences you set

Technical data

  • IP address (for rate limiting and abuse prevention)
  • Browser type and device (standard web logs)
  • Timestamps of activity

What we do NOT collect

  • Payment card details (handled entirely by Stripe)
  • Social Security numbers or government IDs
  • Precise location or GPS data

3. How we use your data

  • To provide the chatbot service and answer your questions
  • To enforce usage limits on free accounts
  • To send magic link sign-in emails
  • To improve the service and fix bugs
  • To prevent abuse and fraud

We do not use your data to train AI models.

4. Who we share data with

We share data only with the services required to run doorstep.chat:

| Service | Purpose | Their Privacy Policy |

|---|---|---|

| Anthropic | Powers the AI chatbot | anthropic.com/privacy |

| Supabase | Database and authentication | supabase.com/privacy |

| Stripe | Payment processing | stripe.com/privacy |

| Vercel | Hosting and infrastructure | vercel.com/privacy |

We do not sell, rent, or share your personal data with advertisers or third parties for marketing.

5. Property data

When you ask about a specific property, we may query public government databases. These queries use the address you provide. We do not store the raw property data returned — it is used only to answer your question.

6. Data retention

  • Account data is retained while your account is active

  • You can request deletion of your account and data by emailing us

7. Security

  • All data is transmitted over HTTPS
  • Passwords are not used — authentication is via magic links or Google OAuth
  • Database access is protected by row-level security (you can only access your own data)
  • API keys and service credentials are never exposed to browsers

8. Your rights

You have the right to:

  • Correct — update your name or email in your profile settings
  • Delete — close your account and have your data removed

To exercise any of these rights, email us at hello@doorstep.chat

9. Cookies

We use only functional cookies necessary to keep you signed in. We do not use advertising or tracking cookies.

10. Children

doorstep.chat is not intended for users under 18. We do not knowingly collect data from minors.

11. Changes

We may update this policy. We'll update the date at the top and notify you by email if changes are significant.

12. Contact

Privacy questions or requests: hello@doorstep.chat