Privacy Policy

Effective October 22, 2026 · Last updated October 22, 2026

ChatDoorman is operated by Morgan Findings LLC, 1800 Twin Branch Dr., Marietta, GA 30062, USA ("ChatDoorman", "we", "us"). This policy explains what personal information we handle, why, who we share it with, and the choices you have.

Who this policy covers

  • Site visitors - people who browse chatdoorman.com.
  • Prospects and customers - businesses (and the people who work there) that request a demo, receive our outreach emails, or buy our services.
  • Chat users - people who type into a ChatDoorman chat widget, either on a demo page or on a customer's website.

Information we collect

  • Demo requests: the website URL and email address you enter on our demo form.
  • Public website content: to build a demo or a live assistant we automatically read the public pages of the business website you give us (text such as services, hours, prices, and contact details published there).
  • Chat messages: the recent messages included in a chat request are sent to OpenRouter and the model provider selected for that request to generate a reply. ChatDoorman does not keep full chat transcripts in its database.
  • Contact details shared in chat: if you give your name, email address, or phone number in a chat (for example, to ask for a follow-up), the assistant may detect and store those contact details with the demo or customer assistant so the business can follow up. The business may also receive an email notification containing the relevant conversation context.
  • Business contact data for outreach: business names, websites, and business email addresses obtained from public sources and from data providers (Outscraper and Hunter).
  • Email engagement data: our outreach emails contain unique demo links and may contain a tracking pixel, so we can see whether a demo link was opened or clicked.
  • Technical data: IP address and basic request information, used to rate-limit and protect our services. We do not currently use a third-party analytics provider on this site. If that changes, we will update this policy.
  • Payment data: payments are processed by Stripe. We do not receive or store full card numbers.

How we use information

  • To build and host demo and live chat assistants based on a business's public website.
  • To answer chat users' questions with an AI model and pass follow-up requests (including contact details given in chat) to the business that owns the assistant.
  • To send business-to-business outreach emails offering a personalized demo, and to measure whether those emails were opened or clicked.
  • To take payment, deliver, and support our paid services.
  • To prevent abuse, enforce rate limits, and keep our systems secure.

We use information to provide services you request, respond to inquiries, operate and secure our systems, meet legal obligations, and conduct business-to-business outreach where permitted by law. We do not use chat messages to make decisions about a person's eligibility for credit, employment, housing, insurance, or other legal or similarly significant outcomes.

AI processing

Chat assistants are powered by third-party AI models accessed through OpenRouter. Chat messages and the business's website content are sent to OpenRouter and the underlying model provider to generate replies. AI answers can be inaccurate; the assistant is labelled as an AI assistant in the chat window.

Who we share information with (subprocessors)

  • Microsoft Azure - hosting of our chat engine and its database.
  • OpenRouter and the AI model providers it routes to - generating chat replies.
  • Stripe - payment processing.
  • Outscraper and Hunter - sourcing business contact information for outreach.
  • Email providers - Instantly or Smartlead for business outreach; AgentMail for replies, support, privacy and abuse requests, and lead notifications; and Resend for transactional demo-link delivery.
  • The business that owns a chat assistant - receives chats and contact details given in its assistant.

We do not sell personal information for money or share it for cross-context behavioral advertising. We disclose information to service providers that help us operate the service and to the business whose assistant you use.

Retention

  • Demos: demo website content, settings, usage counts, and captured contact details expire 14 days after creation unless we expressly extend the demo. Expired records are removed from the active database during a daily cleanup and may be removed sooner when accessed after expiry.
  • Live customer assistants: we retain assistant content, settings, usage counts, and captured lead contact details while the service is active. After the service ends, we remove those records from the active database within 30 days.
  • Outreach and suppression records: business contact details are kept while relevant to business outreach and are removed when no longer needed. We may retain a minimal suppression record for as long as needed to honor an opt-out and avoid contacting someone again.
  • Rate-limit data (IP addresses) is held in memory for up to one hour. Completed webhook event identifiers used to prevent duplicate email processing are removed after 30 days.
  • Email and infrastructure recovery: copies of email correspondence may remain in our email providers' mailboxes under their retention controls. We do not configure application database snapshots or Azure Backup for this service. Azure Files is configured to allow recovery of a deleted file share for seven days; that protection applies to a deleted share, not to individual database records.
  • We may retain limited records longer where reasonably necessary for legal obligations, dispute resolution, security, or accounting. Data handled by third-party providers is also subject to their retention practices.

Your choices and rights

  • Stop outreach emails: reply STOP to any email, or see our unsubscribe page.
  • Privacy requests: depending on where you live, applicable law may give you rights to request access to, correction of, or deletion of personal information, or to object to certain uses. Email doorman@agentmail.to and tell us what you are requesting. We may verify your identity and will respond within the time required by applicable law. An automated receipt is not confirmation that a request is complete. If you chatted with a business's assistant, that business may also be responsible for responding to your request.

Security

We use access controls, encrypted connections (HTTPS), and rate limiting. No system is perfectly secure.

Children

ChatDoorman is a business service and is not directed to children under 13. We do not knowingly collect personal information directly from a child under 13. If you believe a child has provided us personal information, contact doorman@agentmail.to so we can review and delete it where required.

Changes

We will post changes on this page and update the date above.

Contact

Morgan Findings LLC, 1800 Twin Branch Dr., Marietta, GA 30062, USA. Privacy requests: doorman@agentmail.to.