Privacy Policy
Last updated: 30 September 2026
Doorman answers Instagram direct messages and comments on behalf of the businesses that subscribe to it. This policy explains what we collect, why, and who else sees it. Where we say “you” we mean a Doorman subscriber; where we say “your customers” we mean the people who message you.
What we collect about you
- Your email address, name if you give one, and a hashed password. We never store your password itself and cannot read it.
- What you write into your bots: your offer, price, link, answers and objections.
- Billing state from Stripe — your plan and whether it is active. Card numbers are held by Stripe and never reach our servers.
- Access tokens for the Instagram accounts you connect. These are used only to send and receive messages on your behalf.
What we collect about your customers
- The content of messages and comments they send to your connected Instagram account, and the replies sent back, so the bot can hold a conversation and you can read the transcript.
- Their Instagram username and ID.
- Whether they clicked a link the bot sent, if you have switched link counting on for that bot.
We do not collect their email address or phone number, buy contact details, scrape them, or message anyone who has not messaged or commented to you first.
If we contacted your business
We sometimes reach out to coaches and consultants whose business pages are public. To do that we find public business profiles through a search engine, read your own public website or link-in-bio page, and build a Doorman bot from what your page says about your offer. We keep your public handle, name, bio, the pages we read and the bot, and nothing else. Every message is sent by a person, never automatically, and we never access Instagram to find you.
The link in our message has a button to delete your bot and stop us contacting you, and it works immediately. After that we keep only your handle, marked do not contact, so a later search can never put you back on the list. An unclaimed bot is deleted 30 days after we message you.
Who else sees it
- Anthropic — message text is sent to Claude to generate replies. Anthropic does not train models on it.
- Meta — for Instagram messages and comments, because that is where the conversation happens.
- Stripe — payments and card details.
- Resend — to email you about your own account: password resets, usage warnings and alerts that a conversation needs you. We never email your customers.
- Brave — search queries, when we look for public business profiles to contact. No personal information is sent to it.
- Neon and Vercel — database and hosting.
We do not sell personal information to anyone, and we do not run advertising.
How long we keep it
Conversations are kept while your account is open, because the product does not work without them. Delete your account and all of it goes with it, normally within seven days including backups. You can delete an individual bot at any time, which removes its conversations immediately.
One exception: each Instagram account gets one free trial, so we keep the numeric ID of every Instagram account that has used one, which Doorman account it was on, and the date — nothing else, not the username and not any messages. This is kept even after an account is deleted, because otherwise the trial could be claimed again.
Your rights
You can ask for a copy of your data, correct it, or have it deleted. Deleting your account is the fastest route and you can do it yourself from the billing page — see data deletion. Depending on where you live you may also have the right to object to processing or complain to a regulator; in New Zealand that is the Office of the Privacy Commissioner.
Anyone who has messaged one of your bots can ask for their conversation to be deleted — see data deletion.
Security
Passwords are hashed with scrypt. Session and reset tokens are stored hashed. Every query is scoped to the account that owns the data, so one subscriber cannot read another's. Traffic is encrypted in transit.
Contact
Questions, requests or complaints: doorman.chat@gmail.com.
Doorman, New Zealand.