Back
DoorPayDoorPay

Privacy Policy

Last Updated: December 13, 2024

1. Introduction

Welcome to DoorPay. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how DoorPay ("we," "us," "our," or "the Company") collects, uses, discloses, and safeguards your information when you use our escrow-based payment platform, including our website (user.thedoorpay.com), mobile applications, and related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this Privacy Policy.

If you do not agree with the terms of this Privacy Policy, please do not access or use the Platform.

2. Information We Collect

We collect various types of information to provide and improve our services to you.

2.1 Information You Provide Directly

Account Registration Information: When you create a DoorPay account, we collect:

Payment Information: To process transactions, we collect:

Transaction Information: For each transaction on the Platform, we collect:

Verification and Identity Documents: To comply with KYC (Know Your Customer) and AML (Anti-Money Laundering) regulations, we may collect:

Communication Information: When you contact us or communicate through the Platform:

2.2 Information Collected Automatically

Device Information: When you access the Platform, we automatically collect:

Usage Information: We collect information about how you use the Platform:

Location Information: We may collect location data to provide location-based services:

Technical and Log Information: Our servers automatically record:

2.3 Information from Third Parties

Identity Verification Services: We work with third-party identity verification providers who may share:

Payment Processors: Payment gateway partners provide us with:

Social Media and External Authentication: If you connect your social media accounts or use social login:

Public Databases and Records: We may collect publicly available information:

Analytics and Advertising Partners: Third-party analytics services may share:

2.4 Cookies and Tracking Technologies

We use various technologies to collect information automatically:

Essential Cookies: Required for Platform functionality:

Analytics Cookies: Help us understand usage patterns:

Advertising and Marketing Cookies: Used for targeted advertising:

Preference Cookies: Store your settings and preferences:

Similar Technologies:

Cookie Management: You can control cookies through:

Important: Disabling essential cookies may prevent you from using certain Platform features.

3. How We Use Your Information

We use the collected information for various purposes to provide, maintain, and improve our services.

3.1 Primary Business Purposes

Transaction Processing and Escrow Services:

Account Management:

Platform Operation and Improvement:

Security and Fraud Prevention:

3.2 Communication Purposes

Transactional Communications: Essential communications about your account and transactions:

Customer Support:

Marketing Communications (with your consent):

You can opt-out of marketing communications at any time through:

Important: Even if you opt-out of marketing, you'll still receive essential transactional and security communications.

3.3 Legal and Compliance Purposes

Meeting Legal Obligations:

Dispute Resolution and Legal Proceedings:

Risk Assessment and Compliance:

3.4 Analytics and Research

Business Intelligence:

Aggregated and Anonymized Data: We may use de-identified, aggregated, or anonymized data for:

Important: Aggregated and anonymized data cannot reasonably be used to identify you individually and may be used without restriction.

3.5 Additional Uses

Personalization:

Social Features:

Research and Development:

4. How We Share Your Information

We share your information in specific circumstances to provide our services and comply with legal obligations.

4.1 Sharing with Transaction Partners

With Buyers (if you're a seller):

With Sellers (if you're a buyer):

What We DON'T Share:

4.2 Service Providers and Business Partners

We share information with trusted third-party service providers who help us operate the Platform:

Payment Processing Partners:

Data shared: Transaction amounts, payment details, customer information necessary for processing

Identity Verification Services:

Data shared: Name, ID documents, address, date of birth, biometric data (when applicable)

Cloud Infrastructure and Technology:

Data shared: All data stored on the Platform (encrypted)

Communication Services:

Data shared: Contact information, message content, communication preferences

Analytics and Tracking:

Data shared: Usage data, device information, anonymized user data

Security Services:

Data shared: Network traffic, security logs, threat data

All Service Providers:

4.3 Business Transfers and Corporate Events

Your information may be transferred in the event of:

In such cases:

4.4 Legal Requirements and Protection

We may disclose your information when we believe it's necessary to:

Comply with Legal Obligations:

Protect Rights and Safety:

We will:

4.5 With Your Consent

We may share information with third parties when you:

You can:

4.6 Public Information

Certain information may be publicly visible on the Platform:

You can control visibility through:

4.7 Aggregated and De-identified Information

We may share aggregated, de-identified, or anonymized information that cannot reasonably identify you:

This information:

5. Data Security

Protecting your information is our top priority. We implement comprehensive security measures to safeguard your data.

5.1 Encryption

Data in Transit:

Data at Rest:

Payment Data:

5.2 Access Controls

Authentication:

Authorization:

Employee Access:

5.3 Network Security

Perimeter Protection:

Monitoring:

Vulnerability Management:

5.4 Application Security

Secure Development:

API Security:

5.5 Physical Security

Data Center Security:

5.6 Business Continuity

Backup and Recovery:

Disaster Recovery:

5.7 Incident Response

Security Incident Management:

Data Breach Notification: If a data breach occurs, we will:

5.8 User Responsibilities

Your Role in Security: While we implement robust security measures, you also play a crucial role:

Do:

Don't:

If You Suspect Unauthorized Access:

  1. Change your password immediately
  2. Enable MFA if not already enabled
  3. Review recent transactions and account activity
  4. Contact our support team at [email protected]
  5. Report any suspicious transactions
  6. Update security questions and backup email/phone

5.9 Security Limitations

Important Acknowledgment:

Despite our best efforts, you should understand that:

We commit to:

6. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this Privacy Policy and comply with legal obligations.

6.1 Retention Periods by Data Type

Active Account Data:

Transaction Records:

Closed Account Data:

Communication Records:

Identity Verification Documents:

Usage and Analytics Data:

Marketing and Preference Data:

Backup Data:

6.2 Reasons for Data Retention

We retain data to:

6.3 Data Deletion Process

Automatic Deletion: After retention periods expire:

Deletion Methods:

6.4 User-Requested Deletion

Right to Deletion: You can request account and data deletion:

Deletion Timeline:

What Gets Deleted:

What May Be Retained:

Exceptions to Deletion: We may retain data longer if:

Backup Retention:

7. Your Rights and Choices

You have various rights regarding your personal information. We are committed to helping you exercise these rights.

7.1 Right to Access

What You Can Access:

How to Access:

What You'll Receive:

Timeline: We will respond within 30 days of your request

7.2 Right to Correction

What You Can Correct:

How to Correct:

For Information You Cannot Change:

Timeline: Most updates are immediate; verification may take 3-5 business days

7.3 Right to Deletion (Right to be Forgotten)

What You Can Delete:

Limitations:

How to Request Deletion:

  1. Log into your account
  2. Go to Settings > Privacy > Delete My Account
  3. Review what will be deleted
  4. Confirm your decision
  5. Verify your identity
  6. Submit deletion request

Or email: [email protected] with "Account Deletion Request"

Timeline:

7.4 Right to Data Portability

You may request a copy of certain personal data DoorPay holds about you in a structured, commonly used, machine-readable format, where applicable.

What you can export may include:

Available formats (depending on the request):

Important notes:

How to request data portability: Email [email protected] from your registered email with the subject “Data Portability Request” and include your registered phone number/user ID (if applicable) and preferred format.

7.5 Questions or requests

If you have questions about this Privacy Policy or want to exercise your privacy rights (access, correction, deletion, or data portability), contact [email protected].

7.6 Updates to this Privacy Policy

DoorPay may update this Privacy Policy from time to time. The Last Updated date reflects the most recent revision. Continued use of the Platform after updates means you accept the revised Privacy Policy.

Last Updated: December 13, 2024

© 2024 DoorPay. All rights reserved.