Privacy Policy

Effective October 1, 2026 · Virtual Guruz LLC

This policy describes how Virtual Guruz LLC (DoorSlate, we, us) handles information through doorslate.com and the DoorSlate applications. It covers people using DoorSlate as owners, managers, tenants, applicants or invited participants.

1. Information we handle

• Account information: your name and email when provided, authentication identifiers, verification and session records, and account preferences. Authentication is handled through Supabase; never send us your password in a support message.
• Rental information: organization memberships, property addresses, unit details, tenant contacts, lease records, invitations, access requests, maintenance descriptions, uploaded files, manually entered financial records and other information you or an authorized participant supplies through available features.
• Subscription information: organization purchase identifiers, product and transaction references, purchase history, trial and renewal dates, subscription status, and billing events received from Stripe for web subscriptions. The mobile app uses the same verified workspace access. DoorSlate does not store raw card numbers or bank login credentials.
• Technical and support information: service requests, IP addresses and device/browser information available to our hosting and authentication providers, security and audit events, error information, email delivery status and communications you send to support.

Another authorized person, such as your landlord or manager, may enter information about you before you create an account. We receive subscription and delivery information from the providers used for those functions. Provide only information needed for the task; do not put sensitive identity or financial credentials in general notes.

2. How information is used

Document signing and optional photo review

When a signing request requires an ID photo and selfie, the consent screen identifies the assigned landlord or management reviewer who can view them. We ask for consent before capture, and photos are uploaded when you submit your signature. The named reviewer compares the photos with your submitted signing name, then separately countersigns the document. This is a human visual review, not an automated facial-recognition, ID-authenticity, liveness or tenant background check. It does not decide rental eligibility. You may withdraw before approval or ask your landlord for an alternative. Email-code signing is also available when selected by the landlord.

Older requests explicitly assigned to DoorSlate staff retain their original consent and access rules: authorized support administrators review those photos, and the landlord receives the outcome rather than the photos. The reviewer named in your request determines which review applies.

Review photos are kept in private storage provided by Supabase. Access by reviewers is logged. Photos are removed after review, withdrawal or expiration; unreviewed submissions expire after six days and a scheduled worker attempts deletion every fifteen minutes. We schedule deletion within seven days and retry provider failures. The signed document, consent, submitted name, timestamps and review outcome remain as signing evidence. Backup copies may persist for the provider’s retention period. For older requests configured to use Stripe Identity, Stripe handles the ID and selfie under its own disclosures; DoorSlate retains its reference, result and verified name rather than those photos. Automated Stripe Identity checks are not offered in the current request setup.

We use information to create and secure accounts, verify identities and invitations, enforce permissions, display and share authorized rental records, provide requested features, reconcile subscriptions, deliver transactional communications, troubleshoot problems, respond to support and privacy requests, prevent misuse, and meet applicable obligations. An address or access request alone does not grant someone access to a rental.

3. Who can receive information

Authorized organization staff and rental participants receive information permitted by their role and the relevant sharing workflow. A tenant’s account does not grant general access to the landlord’s portfolio. Organization administrators control many rental records and permissions, and may have responsibilities for your information independent of DoorSlate.

Service providers process information needed to operate their functions. Our infrastructure includes Supabase for authentication, database and private file storage; Vercel for web hosting; Resend for transactional email; and Stripe for web subscriptions and rent-payment functions where enabled. Subscription status is associated with your workspace and used to verify access on both web and mobile. RevenueCat is no longer used to initiate or verify native subscription purchases; historical billing and test audit records may be retained under the retention section below. Expo/EAS and app-distribution platforms support building and distributing the mobile app. Providers may process related technical information and have their own privacy terms.

When you choose an external service or export/share a file, its recipient may handle that information under separate terms. We may disclose information to comply with valid legal requirements, protect rights and security, or support a business transaction subject to applicable privacy protections. We do not operate advertising-data sales or cross-app advertising tracking through the current DoorSlate application.

4. Sessions, storage and device choices

The website uses cookies or similar storage for authentication and selected-workspace preferences. The native app stores session credentials using operating-system secure storage. Blocking or clearing session storage can sign you out or prevent features from working. Your device controls access to files and sharing destinations. Any future feature requiring an additional device permission will request that permission when needed.

5. Retention and deletion

You can initiate account deletion in web Settings or Your account in the mobile app. After password confirmation, access is revoked and login credentials and profile metadata are irreversibly anonymized. Processing normally finishes within a few minutes; provider failures are retried automatically. A non-login account identifier remains to preserve shared rental and audit references. Subscription cancellation is managed separately through the website’s billing controls; account deletion does not replace cancellation or erase another participant’s rental records.

We retain information while needed to provide the service, maintain authorized rental and transaction records, resolve disputes, protect security, and satisfy applicable obligations. Retention depends on the type of record, the organization’s instructions, outstanding transactions, and legal requirements. We do not promise a single deletion deadline for every record. Subscription cancellation or a failed payment does not automatically delete your records.

To request access, correction, export or deletion, email support@doorslate.com from your account email, describing the request. We may verify your identity and authority before acting. Do not include your password, full payment credentials or government ID in that email. Deleting your personal login does not necessarily delete rental records that another party is entitled or required to keep; we will explain relevant limits when handling your request. Information may remain in backups or security records for their applicable retention period.

If an organization controls the record you want corrected or deleted, we may direct or coordinate your request with that organization. You may also have rights to object to or restrict certain processing, withdraw consent where processing relies on consent, or complain to an applicable privacy authority, depending on where you live. Contact us to exercise applicable rights.

6. Security and processing locations

DoorSlate uses authentication, server-side permissions, organization data-access policies and private-storage controls. No system or transmission is guaranteed completely secure. Protect your credentials and contact us promptly about suspected unauthorized access. DoorSlate and its providers may process information in the United States and other locations where they operate; privacy laws can differ between locations.

7. Children’s information

DoorSlate is intended for people managing or participating in rental relationships, not as a service directed to children. Do not create an account for a child who cannot independently agree to the service terms. Authorized adults should provide only necessary occupant information and have authority to do so. Contact support if you believe a child has created an account or information has been supplied improperly.

8. Changes and questions

We may update this policy when features, providers or data practices change. We will update the effective date and provide additional notice or obtain consent when required. Contact Virtual Guruz LLC at support@doorslate.com with privacy questions or requests.

Questions? support@doorslate.com