DoorlyxTerms of Use

Version 1.0 · Effective 2026-07-11

Esta traducción se ofrece solo por conveniencia; la versión en inglés es la que rige (Sección 30.5).

Tradiksyon sa a se pou konvenyans sèlman; se vèsyon anglè a ki gouvène (Seksyon 30.5).

See also: Terms of Use

DOORLYX

PRIVACY POLICY

Effective Date: July 11, 2026 • Version 1.0

This Privacy Policy describes how Doorlyx LLC, a Florida limited liability company ("Doorlyx," "we," "us," or "our"), collects, uses, shares, and protects information in connection with doorlyx.com, doorlyx.app, and the Doorlyx software platform and related services (the "Services"). This Policy is incorporated by reference into the Doorlyx Terms of Use. Section 6 of this Policy is the Biometric Information Notice referenced in Section 10 of the Terms of Use. By using the Services, you agree to the practices described here. If you do not agree, do not use the Services.

1. Who This Policy Covers; Our Two Roles

1.1 Users. When we collect information from account holders (real estate agents, brokers, and their staff --- "Users" or "you"), Doorlyx acts as the data controller of that information and this Policy applies directly.

1.2 Leads and Consumers. When a User captures or uploads information about consumers --- for example, leads submitted through a User's landing pages, QR codes, and forms, or contact lists a User imports ("Lead Data") --- the User is the controller of that information and Doorlyx acts as a service provider / processor on the User's behalf. We process Lead Data only on the User's instructions to provide the Services, and we do not sell it or use it for our own marketing. Consumers with questions about how their information is used should contact the agent or brokerage they interacted with; we will assist Users in honoring consumer requests through available account tools.

2. Information We Collect

2.1 Information You Provide

  • Account and identity data: name, email address, phone number, password credentials, language preference, real estate license number, brokerage name and affiliation, and profile details.
  • Listing content: property data, descriptions, prices, photographs, videos, floor plans, and related marketing materials you upload or connect.
  • Recordings of your face and voice: training videos, photographs, voice recordings, and consent statements you submit to create a Digital Twin avatar or synthetic voice (see Section 6 --- Biometric Information Notice).
  • Brand assets: logos, headshots, taglines, color preferences, and templates.
  • Payment data: processed by our third-party payment processor; Doorlyx does not store full card numbers.
  • Communications: messages you send to support, feedback, and survey responses.

2.2 Information Collected Automatically

  • Usage and device data: IP address, browser type, device identifiers, operating system, pages viewed, features used, generation and publishing activity, timestamps, and referring URLs.
  • Cookies and similar technologies: session cookies required for login and security, and first-party analytics cookies used to understand feature usage. We honor applicable browser signals as required by law.
  • Legal records: acceptance records of the Terms of Use and consents (version, hash, timestamp, IP address, user agent, and language), retained as evidence of agreement.

2.3 Information From Third Parties

  • Connected platforms: when you connect a social media account, MLS feed, email service, or other integration, we receive tokens and data those platforms provide under their terms and your authorization.
  • Lead Data: information consumers submit through your marketing assets (name, contact information, message content, listing interest, and engagement events such as page views and QR scans).

3. How We Use Information

  • To provide, operate, secure, and maintain the Services, including generating marketing content in English, Spanish, and Haitian Creole at your direction.
  • To create and operate your Digital Twin avatar and synthetic voice, solely for content generated for your account (see Section 6).
  • To publish content and send communications to channels and recipients you connect or upload, at your direction, including automated (Autopilot) workflows you enable.
  • To process payments, manage subscriptions, enforce usage limits and spend caps, and prevent fraud and abuse.
  • To run automated compliance, tone, quality, and safety checks on generated content.
  • To provide support, send service and legal notices, and --- with your consent where required --- send product news you can opt out of at any time.
  • To analyze usage in order to improve the Services, using aggregated or de-identified data where practicable.
  • To comply with law, enforce our Terms, and protect the rights, safety, and property of Doorlyx, our Users, and the public.

We do not use your personal information for third-party advertising, and we do not sell or "share" (as defined by applicable state privacy laws) personal information.

4. Artificial Intelligence Processing

The Services use third-party AI infrastructure to generate text, images, audio, and video. When you request generation, relevant inputs (for example, listing data, photos, scripts, or your avatar/voice model) are transmitted to our AI service providers as sub-processors solely to produce the requested output. We select providers that contractually restrict use of customer data, and we do not permit our providers to use your face, likeness, or voice data to train their generalized models. Doorlyx does not use your face, likeness, or voice recordings to train generalized AI models unrelated to your account without your separate, explicit opt-in consent. Generated outputs are stored in your account for your use.

5. How We Share Information

  • Service providers and sub-processors: hosting and databases, content delivery, video rendering, AI text/image/voice/video generation, avatar rendering, email delivery, SMS carriers, payment processing, analytics, and security --- in each case only as needed to provide the Services and under confidentiality obligations.
  • Connected platforms at your direction: when you publish content or connect an account (for example, a social network or MLS), we share the content and data necessary to perform the action you requested; the receiving platform's own privacy policy applies.
  • Your brokerage: if your seat is provisioned under a brokerage plan, your broker administrator may access your usage data, generated content, campaign performance, and ROI analytics.
  • Legal and safety: to comply with law, legal process, or enforceable governmental requests; to enforce our Terms; or to protect the rights, property, or safety of Doorlyx, our Users, consumers, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Policy's commitments.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

6. Biometric Information Notice

This Section is the "Biometric Information Notice" referenced in the Terms of Use. It applies when you (or a consenting Depicted Person) submit face or voice recordings to create or operate a Digital Twin avatar or synthetic voice.

6.1 What We Collect

To build and operate an avatar or voice model, our systems and our avatar/voice processing providers may process photographs and video of the face and body, voice recordings, and information derived from them --- including facial geometry, appearance characteristics, and voiceprints --- which may constitute "biometric identifiers" or "biometric information" under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act, and Washington's biometric privacy law.

6.2 Consent First

We collect and process biometric information only after the Depicted Person provides prior, informed, written (electronic) consent through a dedicated consent screen, separate from general Terms acceptance, and --- where our providers require it --- completion of the provider's own consent-verification step. We never collect biometric information from anyone under 18.

6.3 Purpose and Use

Biometric information is used solely to create, render, store, and operate the Digital Twin and synthetic voice for the associated account, and to generate the marketing content that account requests, in English, Spanish, Haitian Creole, and other supported languages. We do not use biometric information for identification, surveillance, profiling, or advertising; we do not sell, lease, or trade it; and we do not use it to train generalized AI models without separate, explicit opt-in consent.

6.4 Disclosure

Biometric information is disclosed only to the avatar, voice, rendering, and hosting sub-processors necessary to provide the features, under contractual restrictions; at the direction of the account holder (for example, publishing a generated video); or as required by law.

6.5 Retention and Destruction

We retain biometric source data and derived models only as long as needed to operate the Digital Twin for the account. We permanently destroy biometric identifiers and derived models upon the earliest of: (a) revocation of consent by the Depicted Person; (b) deletion of the associated account; (c) three (3) years after the account's last interaction with the avatar/voice features; or (d) any earlier destruction date required by applicable law --- in each case within a commercially reasonable period, except where retention is legally required or reasonably necessary for dispute resolution. Content already generated and published at the account's direction is not recalled by revocation.

6.6 Revocation

A Depicted Person may revoke consent prospectively at any time by emailing privacy@doorlyx.com or using available account tools. Upon revocation, generation of new content using that person's likeness or voice is disabled and deletion under Section 6.5 begins.

6.7 Security

Biometric information is protected using the same or greater care as other confidential information we hold, and at least the reasonable standard of care within our industry, including encryption in transit, access controls, and signed, expiring URLs for stored recordings.

7. Lead Data --- Notice to Consumers

If you submitted your information through a real estate agent's landing page, form, or QR code powered by Doorlyx: your information was collected by and belongs to that agent and their brokerage, who use it to respond to your inquiry. Doorlyx stores and processes it on their behalf and may send communications at their direction (for example, a follow-up email about the listing you asked about). Every marketing email includes an unsubscribe link, and SMS messages honor STOP requests. To exercise privacy rights over that information (access, correction, deletion), contact the agent or brokerage directly; you may also contact privacy@doorlyx.com and we will route your request to the responsible agent and assist with fulfillment.

8. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Services. Generated assets and Lead Data remain available for export during an active subscription. After account termination, we delete or de-identify personal information within a reasonable period (generally thirty (30) days), except: legal acceptance and consent records, billing and tax records, and information reasonably retained for backups, security, legal compliance, or dispute resolution, which are kept for the period required by law or legitimate business need. Biometric information follows the shorter schedule in Section 6.5.

9. Security

We use commercially reasonable technical and organizational safeguards, including encryption in transit, row-level access controls, role-based permissions, authenticated and rate-limited endpoints, signed URLs for stored media, secret-protected automation routes, and fail-closed spending and compliance controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for protecting your credentials. If we learn of a breach affecting your personal information, we will notify you and regulators as required by applicable law, including Fla. Stat. § 501.171.

10. Your Choices and Rights

  • Access and portability: view your information in your account and export your generated assets and Lead Data with available tools, or request a copy from us.
  • Correction: update your account and profile information at any time in settings, or ask us to correct inaccuracies.
  • Deletion: delete your account at any time; we will delete your information as described in Section 8.
  • Marketing opt-out: unsubscribe from product news via the link in any marketing email; service and legal notices will still be sent.
  • Biometric revocation: revoke avatar/voice consent as described in Section 6.6.
  • Cookies: manage cookies through your browser; blocking essential cookies may break login.

State privacy rights. Depending on your state of residence (for example, California, Colorado, Connecticut, Texas, Oregon, or Virginia), you may have statutory rights to know, access, correct, delete, and obtain a copy of personal information, to opt out of sale, sharing, targeted advertising, and certain profiling, and to non-discrimination for exercising rights. Doorlyx does not sell or share personal information or engage in targeted advertising or profiling with legal effects, so there is nothing to opt out of; we honor the remaining rights for all Users regardless of state. To exercise any right, email privacy@doorlyx.com with your account email; we will verify your identity, respond within the time required by applicable law (generally 45 days), and you may appeal a refusal by replying to our decision. Authorized agents may submit requests with proof of authorization.

11. Children

The Services are for adults 18 and over. We do not knowingly collect personal information from anyone under 18, and Users may not submit face, voice, or likeness content of minors. If we learn we have collected a minor's information, we will delete it. Parents or guardians may contact privacy@doorlyx.com.

12. United States Only; International Visitors

The Services are operated from the United States and intended for Users in the United States. Information is stored and processed in the U.S. (and in the regions used by our infrastructure providers). If you access the Services from outside the U.S., you do so on your own initiative and consent to processing in the U.S., where privacy laws may differ from those of your jurisdiction.

13. Changes to This Policy

We may update this Policy from time to time. The current version, with its effective date and version number, is always available at doorlyx.com/privacy. For material changes --- and for ANY new use of biometric information --- we will provide prominent notice and, where required, obtain fresh consent before the change applies. Continued use after the effective date constitutes acceptance of non-material changes.

14. Contact Us

Doorlyx LLC

Attn: Privacy

749 SW Acapulco Terr., Port St. Lucie, FL 34953

Email: privacy@doorlyx.com

*