No effective date
This is not an effective privacy notice. The responsible legal entity, controller and processor roles, addresses, support and privacy contacts, provider agreements, and counsel-approved response policy have not been finalized. Production activation fails closed while those facts are missing.
INFORMATION WE PROCESS
The proposed maintenance-only beta is limited to named staff account data, maintenance-safe property facts, maintenance tickets, approved vendor contacts, and specifically approved maintenance photos. New winterization PDF and text originals are not accepted. Tenant, application, screening, lease, finance, payment, tax, email or SMS, e-signature, import, broad upload, Google authentication, and AI document workflows remain server-disabled.
AI DATA USE
AI document processing, legal or compliance recommendations, and automated housing decisions are disabled for the maintenance-only beta. No beta maintenance document is authorized for transmission to an AI provider. Any future AI release requires separate provider, data-flow, synthetic rehearsal, and activation approval.
RETENTION AND LEGAL HOLDS
Approved maintenance photos require a configured counsel-approved document schedule. Unknown or unscheduled file classes fail closed. File deletion remains subject to legal holds, shared-file references, provider confirmation, and the verified disposal workflow. Retention and hold procedures for tickets, events, properties, contacts, audit evidence, logs, backups, and provider copies remain a Production release gate.
SHARING AND PROVIDERS
The provider register lists services represented in the software. Listing does not prove a service is enabled, receives beta data, is under contract, or completed DPA and security review. Provider activation requires separate evidence.
YOUR RIGHTS
Access, correction, export, deletion, and appeal depend on role, jurisdiction, verified identity, legal holds, contracts, backups, and provider disposal. DoorSpan does not claim that every rights workflow is operational. A verified request channel and response procedure are required before Production activation.
SECURITY
The hardening target includes HTTPS, staff MFA, scoped authorization, private provider-managed storage, selected secret encryption, audit controls, and governed document disposal. Provider storage encryption is not DoorSpan client-side per-file encryption. Monitoring, incident ownership, backup and restore, provider deletion, and response procedures require release evidence.
CONTACT
The legal entity, notices address, support contact, privacy contact, and request and appeal channel are not finalized. Production activation remains blocked until they are configured and published.