Privacy policy

Updated Oct 27, 2026

Who we are

DoorWalk (DoorRaise DoorWalk) is an app for walking and pricing apartment properties. It is run by DoorRaise, Inc. ("we"). This policy covers the DoorWalk app, its pages and its contractor links.

DoorWalk has its own sign-in and its own database, apart from DoorRaise's investing platform at doorraise.com. That platform has its own privacy policy.

What we collect

Your account: your email address. If you use Google, also the name and profile picture Google shares. We keep the time of your last sign-in.
Your properties: the name, and the address and ZIP code if you enter them; buildings, floor plans, units, common areas and the site. From a rent roll you import to set up the units, we keep only unit names, floor plans, buildings and whether each unit is occupied.
Your walks: photos, voice notes, the words of your voice notes, notes you type, findings, measurements, the improvements you pick and concept images.
Your deal: the numbers you type into the deal model, seller documents you upload (such as a rent roll, a T-12 or an offering memo) and the numbers read from them.
Teams and contractors: the names you give people you invite to walk, your teams and who walks which unit, the contractor links you make, and the bids contractors send back.
Your plan: which plan you are on, its status at Stripe, Stripe's numbers for your account and plan, and when your paid month ends. We never see or store your card number.
Monthly counts: buildings and units added, concept images made and what your AI use cost, so plan limits work.
Abuse records: each time you use an AI feature, the time, your account (not for photo checks) and a scrambled (hashed) form of your network address. These records never hold the address itself.

Photos are redrawn on your phone, and made smaller when they are large, before they upload. That also drops hidden details a camera puts in the file, such as GPS location.

How we use it

To run DoorWalk: save your walks, keep your phone and computer in step, and show your properties to you and the people you invite.
To suggest what needs fixing with AI, which you then confirm or change.
To price the work from DoorWalk's cost table, and to build the reports, the deal model and the downloads you ask for.
To apply plan limits, take payment and stop abuse.
To see which features are used, as counts only.
To answer you when you write to us.

We do not sell your personal data. We do not share it for advertising, and DoorWalk has no ad trackers. We do not train AI models on your photos, notes or documents.

How AI is used

Suggest fixes: the newest photos of one unit or area (up to 8) and the words of its voice notes go to Anthropic's Claude. Claude picks items from the cost table and says whether each photo shows people or documents. It never sets a price.
Voice notes: while you talk, your browser's own speech to text writes your words when it has it. That runs under your browser maker's terms. A note it could not write goes to Groq.
Describe your own change: the words you type (up to 500 characters) go to Claude, which turns them into cost table items.
Seller documents: the file goes to Claude, which copies the numbers. Spreadsheets lose columns with names, phones, emails and similar details before they are sent. PDFs and photos of pages are sent as they are. What we keep from a reading has no place for a tenant's name or contact details.
Check photos: photos go to Claude to check for people and documents.
Concept images: fal gets a short-lived link to the photo you picked and a description made only from the cost table's wording, never your own words. Only a photo the check has cleared of people and documents is used: one not checked yet is checked first, and a photo that is flagged or cannot be checked is never used. Every image is marked "AI CONCEPT".

Who processes it

These companies help us run DoorWalk. Each gets only what its job needs and handles it under its own terms.

Supabase: Sign-in, the database and private file storage. It holds your account, your properties and everything you add, including photos, voice notes, concept images and documents. Its sign-in service keeps its own security logs, which include your email address and network address.
Vercel: Hosts the app and runs its server. It handles every request, so it sees your network address and keeps its own request logs, like any website host.
Google: Only if you tap "Continue with Google": Google confirms who you are and shares your email address, name and profile picture.
Resend: Delivers the sign-in emails: your email address, the sign-in link and the 6-digit code.
Stripe: Takes payment for Pro and Team. It gets your email address and an account number we make, and you type your card on Stripe's own page.
Anthropic: Its Claude AI reads photos and the words of voice notes to suggest what needs fixing, checks photos for people and documents, turns a change you describe into cost table items, and reads seller documents you upload.
Groq: Turns a voice note into words when your phone could not do it while you talked. It gets the recording.
fal: Makes concept images. It gets a short-lived link to the one photo you picked and a description built only from the cost table's wording.
Mixpanel: Counts how the app is used. It gets short events with counts and yes or no flags and a random browser id, never your email, name or account.

Some of them work only when that part of DoorWalk is switched on. Without them the AI features show a labeled example answer, analytics send nothing, and paid plans show "Coming soon".

Analytics

When analytics are switched on, the app sends Mixpanel short events such as "a unit was walked", with counts and yes or no flags (how many units, how many seconds). Each event carries a random id made in your browser. It is never tied to your email, name or account. We ask Mixpanel not to work out your location from your network address. If your browser blocks this site's storage, no events are sent.

What stays on your phone or computer

A working copy of your properties and walks, so DoorWalk works with no signal.
Photos, voice notes and changes waiting to upload. They stay on the device until they upload.
Your sign-in, so you stay signed in.
A walker invite link you opened, kept for up to 2 hours while you sign in.
A few small settings: the random analytics id, the last room you walked, and which tips you have seen.
The app's own files and pages, so it opens offline. These hold no photos and no account data. Your browser may also keep its usual short-term copies of pictures you looked at.

Signing out removes the working copy, your waiting uploads, your sign-in, your property settings and any walker invite link waiting for you from that device. Anything not uploaded yet is lost, and the app warns you first. What is in your account stays. "Sign out on all devices" ends your sign-in everywhere.

Signing out also removes the analytics id, so the next person on a shared phone gets a new one, and keeps the other small settings. Deleting your account removes them all, and everything else above, from the device you delete it on. To remove them on another device, clear this site's data in your browser's settings.

Contractor links

You choose what a contractor sees and make a private link for them. We store only a scrambled form of the link's code. A link works for 14 days, and you can turn it off at any time. Contractors need no account. DoorWalk sends no messages: you share the link yourself.

They see the work to price with quantities, and the state the property is in. They see the street address only if you turn it on.
Place names reach them as plain labels, such as "Unit 101, kitchen" or "Building 1".
They see only photos you picked that DoorWalk checked and found free of people and documents.
They see the walk's notes only if you tick "Include the walk's notes".
They never see DoorWalk's cost estimates, your name or your email.

Contractors: what you send (prices, and your name, company, phone and notes if you add them) goes to the owner who sent you the link. It is deleted when that owner deletes their account.

A photo that shows people or documents, or has not been checked yet, is never shared with contractors and never put in the buyer, seller or lender report. A photo is used for a concept image only once the check has cleared it of people and documents. Your own "Download everything" can include all your photos, since it is for you.

How long we keep it

Your account and everything in it stay until you delete them or your account. There is no other deletion schedule, except that abuse records are deleted once they are 2 days old: each AI request deletes the older ones.

After you delete your account, only these remain:

Billing receipts, held by DoorRaise, Inc. at Stripe.
A list of deleted property ids, with no content, so they are never reused.
The app's total AI cost per day and per month, with no person in it, and the ids of Stripe events we handled.
Scrambled network addresses from photo checks, which are tied to no account and are deleted once they are 2 days old.
The security logs of our sign-in service (Supabase) and the request logs of our host (Vercel). They include network addresses, and Supabase's sign-in log entries also include your email address. They can remain after your account is deleted, for a short time, under those companies' own policies.

Deleting your data

Go to Account and tap "Delete my account". For safety you must have signed in within the last 15 minutes. It deletes for good:

Your properties and everything under them: walks, photos, voice notes, findings, costs, deals, documents, concept images, contractor links and bids.
Your files in storage.
Your plan and usage records, your memberships and your sign-in.

A paid plan ends at once, with no refund for the rest of the month. Properties other people shared with you stay with them. What you added to their properties stays there, without your name.

To delete one property, open it and tap "Delete property" at the foot of its page. Only its owner can, after signing in within the last 15 minutes. It turns off its contractor and walker links at once, then deletes for good its files in storage and everything under it: walks, photos, voice notes, findings, costs, deals, documents, concept images and bids. Its id goes on the list of deleted ids. AI use and monthly counts already spent are not given back.

On a walk you can undo your last photo or voice note, which also removes it from storage. You can see and change your data in the app, and download a property with "Download everything". For any other request about your data, email support@doorraise.com.

Security

Every connection is encrypted (HTTPS).
Photos, voice notes, concept images and documents are in private storage. Each opens through a link that stops working within an hour.
Database rules let only a property's owner and the people they invite read it. Contractors reach only what their link allows.
Link codes are stored only in scrambled form, and so is the network address we use for AI limits. Our sign-in service (Supabase) and our host (Vercel) keep their own short-term security and request logs, which include network addresses.
Deleting your account needs a recent sign-in. Stripe handles card details.

No system is perfectly safe. If you think someone used your account, email support@doorraise.com.

Children

DoorWalk is for adults who buy, sell, finance or run apartment properties. It is not for anyone under 18, and we do not knowingly collect data from children. If you think a child gave us personal data, email us and we will delete it.

Changes

When this policy changes, the date at the top changes. If a change matters to you, we tell you in the app or by email.

Contact

Questions or requests: support@doorraise.com. DoorRaise, Inc. runs DoorWalk.