Privacy Policy

Last updated: April 21, 2026

Data controller

Nate Alexeev
Israel
Contact: natealex001@gmail.com

What we collect

When you use doormatch, we collect:

  • Account information — name, email, phone, profile picture
  • Authentication — password (hashed), OAuth tokens (if using Google/Apple login)
  • Usage data — search queries, listing views, saved listings, application history
  • Communication — chat messages between seekers and agents
  • Documents — files you upload (ID, Schufa, payslips) for applications
  • Device information — IP address, browser, device type, platform
  • Calendar data — if you connect Google Calendar, we read events to manage viewing appointments

Why we collect it

  • To provide the platform — listing search, applications, scheduling, contracts
  • To authenticate you and secure your account
  • To enable communication between seekers and agents
  • To generate analytics for agents (listing performance, conversion rates)
  • To improve search results using AI-powered recommendations
  • To send transactional emails (verification, reset, contract invitations)

Legal basis

We process your personal data under Article 6(1) of the GDPR:

  • Performance of a contract — you signed up to use the service
  • Legitimate interest — improving the service, preventing fraud
  • Consent — marketing emails, optional calendar integration
  • Legal obligation — retaining contracts per German commercial law

Who we share with

  • Between platform users — seekers and agents share contact info and application docs necessary for renting
  • Infrastructure providers — hosting (EU only), email delivery, analytics — bound by DPAs
  • AI processing — application content may be processed by Claude (Anthropic) to generate summaries and drafts. No training, EU residency preferred
  • Never sold — we don't sell your data to third parties. Ever.

Your rights

  • Access your data — download a full export from Settings
  • Correct inaccurate data — edit profile any time
  • Delete your account — from Settings → Privacy
  • Object to processing — contact us
  • Complain to a supervisory authority — the Berlin Data Protection Commissioner

Retention

We keep active-account data as long as your account is active. After deletion, personal data is removed within 30 days. Contract-related data may be retained up to 10 years per German commercial law. Anonymized analytics may be kept indefinitely.

Contact

Questions, deletion requests, or concerns? natealex001@gmail.com.