Privacy Policy

Summary

What we collect

We collect only the information needed to deliver and bill the service. That means:

• Subscription owner details. The name and contact details (email and/or phone number) of the person who owns the subscription. This is used to manage the account, send receipts, and provide support.
• Notification recipient details. The name, email address and/or phone number of each person added to a subscription as a notification recipient. This is used to deliver doorbell alerts.
• Location details. The address and/or map-pin coordinates of the registered doorbell, used to create your QR code and to confirm that a visitor is physically at the door. For private homes the address is stored only as a one-way hash, never in raw form.
• Device details. If you install the app and enable push notifications, a device push token (a device identifier) so we can deliver alerts to your phone.
• Billing records. Subscription status, plan, billing cadence, and payment history. Actual card details are handled by our payment provider (see below) and never touch our servers.
• Operational logs. Minimal technical logs needed to keep the service running (for example, timestamps of notification deliveries and error traces). These are retained for a short period and then discarded.

What we do not collect

We deliberately avoid collecting anything that is not strictly necessary. In particular:

• We do not see your conversations. Text, voice, and video communication between a visitor and a subscriber is peer-to-peer (WebRTC). The content of those conversations never passes through our servers and we cannot read, listen to, or replay them.
• We do not store visitor identities. Visitors who scan a QR code are not required to create an account or share personal details with us.
• We do not keep visitors' location. When a visitor scans a QR code, their device location is checked against the registered doorbell to confirm they are actually at the door. Those coordinates are held only momentarily to perform that check and are then discarded; we do not build any location history for visitors.
• We do not sell or rent data. Your information is not a product we offer to anyone.
• We do not run third-party advertising or tracking pixels on authenticated pages. The marketing site may use basic analytics to understand traffic patterns.

How we use your information

We use the data we collect to:

• Deliver doorbell notifications to the recipients you have configured.
• Operate your account (authentication, plan management, support).
• Process payments and send receipts.
• Send important service notices (for example, billing failures or security events).
• Diagnose and fix bugs, and improve reliability.

We do not use your information for behavioural profiling, advertising, or training third-party models.

Who we share it with

We share a limited amount of information with the service providers that make Dorbel possible:

• PayPro Global, Inc. is our Merchant of Record. PayPro Global processes all payments on our behalf, handles tax compliance globally, and is the party named on your payment statement. When you subscribe, your payment details are provided directly to PayPro Global: we do not receive or store them. PayPro Global's privacy policy is available at payproglobal.com/legal.
• Notification providers. We use reputable email and SMS delivery providers to send alerts. These providers receive only the information needed to deliver a given message (recipient address and message content).
• Hosting and infrastructure providers. The service runs on standard cloud infrastructure. These providers may process data in the course of running servers and databases but do not have independent use of your information.
• Legal obligations. We may disclose information if required to do so by law or a valid legal process.

Where your data is stored

Data is stored on servers operated by our hosting providers. Because the service is global, data may be processed in jurisdictions different from your own. We take reasonable steps to ensure that any such processing is protected by appropriate safeguards.

Security

We protect your data with:

• Encryption in transit (HTTPS/TLS) for all traffic to and from the service.
• Peer-to-peer, encrypted channels for call and chat media (WebRTC with DTLS/SRTP).
• Single-use, expiring session links so that notification URLs cannot be replayed.
• Standard access controls and monitoring on our infrastructure.

No system is perfectly secure. If a breach occurs that affects your data, we will notify you as required by applicable law.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing. You can exercise these rights by contacting us at the address below. We will respond within a reasonable time and will not charge you for reasonable requests.

You can also remove notification recipients yourself at any time from your subscription dashboard. Removing a recipient stops future alerts from being sent to that address and deletes the associated record.

Deleting your data. You can delete your data yourself at any time at dorbel.app/delete-account (also linked from your dashboard). Account holders can delete their entire account there; people who were added as notification recipients can erase all of their recipient data by verifying their email. Deletion takes effect immediately: access is revoked and notifications stop, and your personal data is permanently purged after a 30-day grace period, during which you can contact us to reverse the request. If you have an active paid subscription, cancel it with our payment provider first so billing stops. Financial records held by our payment provider are retained for the period required by tax and accounting law.

Data retention

We retain subscription and billing records for as long as your account is active, and for a limited period afterwards as required to meet tax and accounting obligations. Notification recipient records are kept for as long as they remain on a subscription; removing a recipient deletes the record. Operational logs are retained for a short rolling window. When you request deletion (see Your rights), access is revoked immediately and your personal data is permanently purged after a 30-day grace period; financial records held by our payment provider are retained as required by law.

Children

Dorbel is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Changes to this policy

If we make material changes to this policy we will update the "last updated" date above and, where appropriate, notify account holders by email. Continued use of the service after an update constitutes acceptance of the revised policy.

Contact us

Questions about this policy, or requests relating to your personal information, can be sent through our contact form.