Privacy Policy

1. Information We Collect

We collect information you provide directly to us:

• Account information: full name, email address, phone number, business name, business logo, and profile photo
• Client information: names, addresses, phone numbers, and email addresses of your clients that you enter into the platform
• Payment information: bank account details collected during payment setup. Payment card data is collected and processed entirely by our payment processor and never stored on our servers
• Service and pricing information: the services you offer and the rates you charge
• Booking and scheduling data you create through the platform
• Invoice and estimate data you create through the platform
• Expense records and receipt photos you log
• Communications: messages you send through the platform to clients
• Device and usage information: IP address, browser type, device identifiers, and how you interact with the platform

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the DoorstepHQ platform
• Process payments on your behalf through our payment infrastructure
• Send transactional SMS messages including booking confirmations, appointment reminders, invoice notifications, and payment receipts
• Send transactional emails including estimates, invoices, booking confirmations, and account notifications
• Provide customer support through our Winston AI assistant and support team
• Improve and develop the platform
• Detect fraud and ensure the security of our platform
• Comply with legal obligations

3. Payment Processing and Stripe

DoorstepHQ uses Stripe, Inc. to power payment processing through our DoorstepHQ Payments feature. When you connect your bank account through DoorstepHQ Payments, you are creating a Stripe connected account. Stripe processes your payment data as a payment processor and has its own privacy practices.

By using DoorstepHQ Payments you acknowledge that:

• Your payment data is processed by Stripe in accordance with the Stripe Privacy Policy
• Stripe may collect additional information directly from you as required for identity verification and regulatory compliance
• Stripe may share data between your connected account and DoorstepHQ as necessary to provide payment services
• You agree to the Stripe Connected Account Agreement

For more information about how Stripe handles your data please review the Stripe Privacy Policy.

4. SMS Communications

DoorstepHQ uses Twilio to send SMS text messages as part of the DoorstepHQ platform services.

Program description: DoorstepHQ sends transactional SMS messages to operators and their clients including booking confirmations, appointment reminders, invoice notifications, estimate status updates, and account alerts.

How you opt in: Operators consent to receive SMS when creating their account by checking the SMS consent checkbox. Operators collect SMS consent from their clients when adding clients to the platform.

Message frequency: Message frequency varies based on your booking and invoicing activity. You may receive multiple messages per week during active periods.

Message and data rates: Standard message and data rates may apply depending on your carrier and plan.

How to opt out: Reply STOP to any SMS message to opt out of all SMS communications from DoorstepHQ. You may also update your notification preferences in your account settings.

How to get help: Reply HELP to any SMS message or email support@doorstephq.com.

SMS data sharing: SMS and MMS mobile messaging originator opt-in data and consent will not be shared with any third parties for marketing or promotional purposes under any circumstances.

5. Information Sharing

We do not sell your personal information to anyone. We share data only as necessary to provide the platform:

• Stripe — to process payments and verify identities as required by financial regulations. See Stripe's Privacy Policy
• Twilio — to send SMS notifications. See Twilio's Privacy Policy
• Resend — to send transactional emails
• Supabase — to store your data securely
• Anthropic — to power the Winston AI support assistant. Conversation content may be processed by Anthropic's API
• Legal requirements — we may disclose information if required by law, subpoena, or to protect the rights and safety of our users

6. Data Security

We use industry-standard security measures to protect your data:

• All data is encrypted in transit using TLS
• All data is encrypted at rest
• Payment data is handled entirely by Stripe and never stored on our servers
• Database access is restricted using row-level security policies
• We conduct regular security reviews

Despite these measures no system is completely secure. We encourage you to use a strong unique password for your account.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account we will delete your personal data within 30 days except where we are required to retain it for legal or regulatory purposes including transaction records which may be retained for up to 7 years.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Export your data in a portable format
• Opt out of SMS communications at any time
• Lodge a complaint with a supervisory authority if you believe your rights have been violated

To exercise any of these rights contact us at support@doorstephq.com. We will respond within 30 days.

9. California Privacy Rights

If you are a California resident you have additional rights under the California Consumer Privacy Act (CCPA) including the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your California privacy rights contact support@doorstephq.com.

10. Children's Privacy

DoorstepHQ is not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18 please contact us at support@doorstephq.com.

11. Cookies

We use essential cookies for authentication and session management only. We do not use advertising cookies or third-party tracking cookies.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by email or through an in-app notification at least 30 days before the changes take effect. Your continued use of the platform after changes take effect constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or our data practices please contact us:

DoorstepHQ
Email: support@doorstephq.com
Website: doorstephq.com