Privacy Policy

1. Introduction

MagicDoor, Inc. ("the Company," "we," "us," or "our") operates magicdoorx.com (the "Service") -- a rental back-office platform built for independent landlords managing their own residential units. Through the Service, landlords manage tenant applications, rent tracking, maintenance dispatch, and lease records in one place.

This Privacy Policy explains what information we collect when you use the Service, how we use it, who we share it with, and the rights you have. It applies to information collected through magicdoorx.com and any direct communications with us.

The Company is based at 1600 Wynkoop Street, Suite 200, Denver, CO 80202. For privacy questions, email us at [email protected].

2. Information We Collect

2.1 Information You Provide

When landlords and tenants use the Service, we collect information submitted directly, including:

• Account registration details (name, email address, phone number, number of rental units);
• Property information (property address, unit details, lease terms);
• Tenant application data submitted by applicants for landlord review (name, contact details, income information, and background-check consent);
• Rent payment records and reminder preferences set by landlords;
• Maintenance request descriptions and associated communications between tenants and landlords;
• Lease documents uploaded or stored within the platform;
• Messages submitted through the contact form or sent directly to our support address.

2.2 Information Collected Automatically

When you visit magicdoorx.com, we automatically collect limited technical information:

• IP address and approximate location (city and region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.3 Background Check Data

When a prospective tenant consents to a background screening, we work with third-party screening providers to retrieve credit and background information. That data is processed solely for the landlord's tenancy decision and is not used for any other purpose. We do not retain full credit report data on our servers beyond the period needed for the landlord's review.

2.4 We Do Not Knowingly Collect Children's Data

magicdoorx.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

The Company uses information collected through the Service to:

• Operate and deliver the rental back-office platform -- processing tenant applications, sending rent reminders and late notices, routing maintenance requests to vendors, and storing lease records;
• Match maintenance requests with available vendors in our network and generate morning-summary reports for landlords;
• Respond to inquiries and provide technical support via [email protected];
• Send service-related notifications (rent due reminders, maintenance status updates, new feature announcements);
• Maintain and improve the reliability and accuracy of the Service;
• Detect and prevent fraud, unauthorized access, and abuse;
• Comply with legal obligations applicable to us under federal and Colorado law.

We do not use tenant application data, rent records, lease documents, or maintenance request content to train AI models without explicit written consent. We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

The Company shares personal information only as described here:

• Service providers acting on our behalf (hosting infrastructure, email delivery, analytics, background-check screening partners) under contractual confidentiality and data-protection terms;
• Maintenance vendors in our network, who receive only the information necessary to respond to a specific work request (property address, issue description, urgency) -- not full tenant or landlord profiles;
• Authorities, when required by applicable law or to protect the rights, safety, or property of the Company, our users, or the public;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties.

5. Cookies and Tracking

We use cookies and similar technologies to keep you signed in to your landlord dashboard, remember display preferences, and measure how features are used. For details and your choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described above and to meet legal or accounting obligations. Specifically:

• Active account data is retained for the life of the account plus 12 months after closure;
• Tenant application records are retained for up to 36 months to support landlord recordkeeping under applicable state landlord-tenant law;
• Maintenance dispatch logs are retained for 24 months;
• Marketing-list contacts who have not engaged are purged after 24 months;
• Server access logs are retained 90 days, then aggregated and anonymized.

7. Security

We use administrative, technical, and physical safeguards to protect personal information, including TLS encryption for data in transit, restricted-access databases, and least-privilege access controls. No system is perfectly secure; we cannot guarantee absolute security. If you believe your account has been compromised, contact [email protected] immediately.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law. State-specific rights are described in the sections below.

9. Colorado Residents (CPA)

Because MagicDoor, Inc. is based in Denver and serves landlords and tenants across Colorado, the Colorado Privacy Act ("CPA") applies to our processing of Colorado residents' personal data.

9.1 Your CPA Rights

• Right of Access: confirm whether we are processing your personal data and obtain a copy.
• Right to Correction: correct inaccuracies, considering the nature and purposes of processing.
• Right to Deletion: request deletion of personal data concerning you.
• Right to Data Portability: obtain a portable copy where technically feasible (up to twice per year).
• Right to Opt Out: opt out of (a) targeted advertising, (b) sale of personal data, and (c) profiling that produces legal or similarly significant effects.

9.2 Universal Opt-Out Mechanism

We honor browser-transmitted universal opt-out signals, including the Global Privacy Control ("GPC"), as a request to opt out of sale and targeted advertising. Configuring GPC in your browser is sufficient -- no separate request is required.

9.3 How to Exercise

Submit a request by emailing [email protected]. We respond within 45 days; one 45-day extension is available where reasonably necessary, with notice.

9.4 Appeal

You may appeal a denial by replying to our response email. If we maintain the denial, you may contact the Colorado Attorney General at coag.gov.

9.5 California Visitors

If you are a California resident visiting from another state, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing. We do not sell personal information and do not "share" personal information for cross-context behavioral advertising.

To submit a CCPA / CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new effective date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints about this Policy can be sent to: