Legal

Privacy Policy

DoorChannel helps neighbors set a price for the things they'd actually buy, then pools that demand into deals with brands and vendors. To do that well we collect a small amount of information about you. This page explains what we collect, why, who we share it with, and the controls you have. We try to keep this honest and plain-English.

1. Who this covers

This policy applies to anyone who visits doorchannel.com, signs in to a DoorChannel account, sets a buy price, joins a pool, or otherwise uses our services (together, the “Services”). “DoorChannel,” “we,” and “us” refer to Intentional Platforms, Inc., a Delaware corporation.

2. Information we collect

You give us

Contact & account

Your email address, used to send one-time passcodes (OTPs) and notify you when a pool you joined moves forward. We may store your name, and a phone number if you choose to add one.

Address & location

The street address you attach to your account (used to match you with neighbors, deliver group-buy goods, and decide which local services are available).

Buy intents & bids

The items, brands, and services you tell us you'd pay for, the price you'd pay, and any notes you attach. This is the core of what makes DoorChannel work.

Payment details

When you lock in to a pool, you authorize a card to be held on file. Your full card number, expiration, and CVC are sent directly to our payment processor and stored there — never on our servers. We only see a token, the card brand (e.g. Visa), and the last four digits.

Messages & content

Anything you write in chats with us or other users, descriptions you compose with our AI assistants, and photos or files you upload.

We collect automatically

Device & usage

IP address, browser and operating system, the pages you view, referring URL, and timestamps. We use this to keep the site working and to spot abuse.

Approximate location

Worked out from your IP address by the platform that hosts the site, when your browser doesn't share location. We use it to show you nearby pools and places before you've set an address. Your IP address isn't sent to any separate location provider.

From third parties

Address autocomplete

An address lookup service helps us normalize the addresses you type. Its own terms apply when its widget loads.

Public brand & vendor data

We pull publicly available logos, domains, and category metadata about brands and vendors so the catalog stays readable.

3. How we use it

• To run the Services — match buyers, form pools, charge cards on close, and deliver what you bought.
• To send transactional messages (OTPs, pool status, payment receipts) by email.
• To negotiate on a pool's behalf with the relevant brand or vendor.
• To send optional product updates (you can opt out at any time).
• To improve the product — understand which pools form, where demand clusters, what UI works.
• To detect, prevent, and investigate fraud, abuse, or violations of our Terms.
• To comply with law and respond to lawful requests.

We do not sell your personal information, and we do not use it to serve third-party ads.

4. When we share information

With brands and vendors

When a pool clears and a deal locks, we share only what the deal needs with the brand or vendor — typically the aggregate count of buyers, the agreed price, and, for fulfillment, the names and shipping addresses of the buyers who'll receive goods or gift cards. We do not share buy-price history, browsing activity, or contact info beyond what fulfillment requires.

With other DoorChannel users

Pool pages show counts and high-level activity (“14 neighbors joined”), not the names or addresses of who joined.

With service providers

We share information with the vendors listed in §5 to operate the Services. They're bound by contract to use that information only on our behalf.

For legal reasons

We may disclose information if required by subpoena, court order, or law, or if we have a good-faith belief disclosure is needed to protect someone's safety, our rights, or to investigate fraud.

In a business transfer

If DoorChannel is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction, subject to the same protections described here.

5. Service providers

We rely on a small number of providers to run the Services, each for a specific purpose. Every one of them is bound by contract to use information only to provide its service to us:

Database & sign-in

Hosted database, authentication, and file storage.

Payments

Card tokenization, card-on-file, and charges when a deal locks.

Maps & address lookup

Address autocomplete, mapping, and geocoding.

Email delivery

Transactional email — sign-in codes, pool updates, and receipts.

AI models

Power the “describe-it” composer and document extraction. Prompts are sent server-side and include the content you're working with — text you type, documents you upload, and your city/region when we search for local vendors. Under our API terms this content is not used to train the provider's models. We never send your sign-in credentials or payment details.

Product analytics

Usage analytics tied to your account (see §6) so we can understand and fix the product.

A few narrower categories of providers round out the list: a telecom provider that delivers our texts and verification codes (it processes the phone number and message content); a hosting platform that serves the site, which also works out an approximate city from your connection so we can show you nearby pools before you've set an address; brand-data and logo services we query for public company information (requests for logos and brand lookups flow through our servers, not your browser); and the brand's own commerce systems (for example their gift-card platform) when fulfilling a deal you bought. Brand-name search runs through our servers, not your browser; brand logo images load from a logo CDN (which, like any image host, sees the standard request data your browser sends). Each provider is bound by contract to use information only to provide its service to us, and we'll keep this section current as the list changes.

6. Cookies & analytics

Until you sign in, DoorChannel sets no cookies. Analytics for signed-out visitors runs in memory only — nothing is stored on your device, which also means we count visits, not visitors. Signing in sets the cookie that keeps you signed in, and (unless you've turned analytics off) lets product analytics remember your session between visits.

Our product analytics tool records the pages you visit and the actions you take so we can understand and fix the product — never to serve ads, and never shared beyond the processors in §5. The “Help us improve DoorChannel” toggle in Settings turns this off for real: it stops collection in your browser and on our servers. We also honor the Global Privacy Control browser signal as an analytics opt-out, even where no law requires us to. We do not use cross-site advertising cookies, and short-lived cookies protect sign-in handshakes (they expire in minutes).

7. Your choices & rights

Access & export

You can see your account information from Settings, and download a complete JSON export of it — profile, prices, payment history — from Settings → Data & export. It downloads immediately. If anything looks missing, email privacy@doorchannel.com.

Correct or delete

You can edit most of what we have about you from your settings page, and delete your account from Settings → Data & export. Deletion runs immediately: it removes your profile and uploaded files, and deletes your card profile at our payment processor. What survives is what must: completed payment records (tax and audit law), money we still owe someone (held against the email it's owed to until claimed), and opt-out lists — an unsubscribe only works if it outlives the account. If a charge is mid-flight, deletion waits until it settles. You can also email privacy@doorchannel.com and we'll handle it for you.

Stop messages

Use the unsubscribe link in any marketing email, or turn off product updates in Settings. Transactional messages tied to an active pool will keep coming until you leave the pool.

State-law rights

If you live in California, Colorado, Virginia, or another state with a comprehensive privacy law, you have additional rights — including the right to access, correct, delete, and opt out of certain processing. To exercise any of these rights, email privacy@doorchannel.com from the address on your account.

8. Security

We use TLS everywhere, encrypt sensitive data at rest, scope database access through row-level security, and review access logs. Card numbers never touch our servers. Sign-in is passwordless — a one-time code sent to your email — so keeping your email account secure is the most important protection for your DoorChannel account. No system is perfect, though, so tell us at security@doorchannel.com if you spot a vulnerability.

9. How long we keep things

We keep account and buy-intent data for as long as your account is active; deleting your account removes it immediately (with the exceptions in §7). Some records also expire on a schedule while your account is open:

• Door access ledger — raw view events are kept 90 days, then reduced to anonymous daily counts (the ledger never contains viewer identities to begin with).
• Text messages — the content of a text is deleted after 90 days; the delivery record (number, status) after a year.
• Email delivery log — the address and subject line are scrubbed after 180 days; a contentless delivery record remains so we never double-send.

Our payment processor retains payment records on our behalf per its own policies. Aggregate, de-identified data (e.g., “how many people set a buy price for X in May 2026”) may be retained indefinitely.

10. Children

DoorChannel is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email privacy@doorchannel.com and we'll delete it.

11. Where data is processed

DoorChannel operates in the United States, and our service providers may process information in the U.S. and other countries. If you're visiting from outside the U.S., you consent to your information being processed here, subject to U.S. law.

12. Changes to this policy

We'll post any changes on this page with a new effective date. If the changes are material, we'll let you know by email or in-app notice at least 14 days before they take effect.