Privacy Policy

Doorstep Gifts is run by ClickClackLabs LLC, a small business based in New York. We make illustrated prints of houses for real estate agents to give their clients as closing gifts. We are the seller of record for everything we ship.

This policy covers doorstepgifts.com, the app, and the email we send. It also covers doorstep.gifts, our short link. It applies to anyone whose information passes through the product, account or not.

Are you the homebuyer, the person a gift was made for? Your agent gave us the house and maybe your name. You never signed up for anything, so the section headed "If you are the homebuyer" is written for you. Email [email protected] any time. You do not need an account to ask us anything.

A photo of somebody’s home is the most personal thing we handle, so here is its whole journey.

• We save a copy of the file the moment it arrives, along with its size, format, and a note of where it came from. We keep the file rather than a link on purpose: listings go offline within weeks of a closing, which is exactly when the gift gets ordered.
• We record that you were allowed to give it to us. See the next section.
• We check the image for resolution, blur, and how much of the frame the house fills.
• We send the photo to our illustration service, which makes the portrait from it. Where there are several photos of the same house, it gets up to three, so it can see more than one angle. It receives those photos, our style instructions, and the changes requested for that portrait. It also receives the street number and any street name shown on the house. That is what the portrait shows on the house, and it lets us check those characters against the real ones. It does not receive your client’s name, their contact details, the city, or the delivery address.
• Our staff can see the photo and the portrait while your proof is prepared. To help with an order, a staff member can open your account and see it as you do. Every such view is logged.
• When you approve, the print file goes to our print vendor with the delivery name and address. The print file carries only the words you asked us to set under the portrait; with none, it is the artwork alone. They print, frame, pack, and hand it to a carrier. We do not send the printer the price you paid. Our printer adds no packing slip, so we no longer take a gift note. A note written before October 15, 2026 stays on its order where our staff can see it.

You can optionally rename a portrait in your account to tell it apart later. If you do, we store the name you choose. If you ask for changes, by email or on the proof, we keep what you wrote and the spots you marked for as long as we keep the portrait. Sales tax is worked out on the delivery address, never on the house. Nothing is printed on the artwork itself: the print is the portrait alone.

If you give us an address instead of a photo, on our site or by email, we first put it in standard form with the U.S. Census Bureau's address service, then look that house up on a public listing site. We save a copy of a listing photo of the front. We send each of them the address and nothing about you or your client. A person on our team approves every portrait before you see it. If we find no photo, we ask you for one.

We never use Google Street View or Google Maps imagery for anything we print, and no part of the product can. Address suggestions in our internal tools come from OpenStreetMap.

Whoever adds a photo is telling us they are allowed to. Listing photos usually belong to the photographer or the brokerage rather than the agent, so we record who made that promise instead of assuming it. You make it by agreeing to the Terms and then uploading. These are the words:

I have the right to use this photo and to have it printed.

For each photo we record those words, the version of the Terms they came from, the time, your IP address, your browser, and your account. Before you have an account, it names the email address you gave us instead. We write the record on our own servers. Your browser does not supply any part of it, and it cannot be edited afterwards.

Read the photo section of the Terms

After you order, we may send one personal note asking how ordering went. Reply if you want to share feedback. We keep your reply with your customer conversation, and we skip this note if you have asked us to stop emailing you.

You sign in with a link or a six-digit code we email you. There is no password for us to hold. Your email address and name are your account.

When you start a project from the homepage, the photo goes to the studio as soon as you give us your email address, before you sign in. So does the address of the house, if you typed that in place of a photo. We hold your email address on that project so the code can open it and so we can reach you about it. It is cleared the moment you sign in. To keep that door from being abused, we allow a few unclaimed projects per email address and per connection each day. For a project started from a house address, we note your email address and your IP address to count them.

If we made a portrait of a home for you and sent you a page, that page can email you its link. What we send is a sign-in link for the address you type, and it only works for whoever reads that inbox. If you have not ordered, we send it again on days three, five, and eight, unless you reply, order, or ask us to stop. If you ask for a change from that page, we store what you wrote and the address you gave, and reply there. Another home goes through the same upload page as everyone else and lands on the same account. Beside the email box is an unticked option for occasional updates. Leave it and the address goes on no list. Each reminder carries a one-click way to stop. The link and change emails are answers to what you asked for, and the reminders stop the moment you order or ask us to.

Every account belongs to an organization, even a solo agent. We store its name, a short handle, and its timezone. If you invite teammates, we store their email address, their role, and who invited them.

We keep a record of every message we send you: who it went to, which message, when, and whether it arrived, bounced or was marked as spam. We keep the words of the emails that send you a proof, without the sign-in link, with your conversation. We do not keep a copy of other routine automated emails. We keep personal replies as described below. It is how we answer you when an email never turned up. If one bounces or you mark it as spam, we note the address and stop writing to it, except mail about an order you placed. Each day our staff read a sample of our automatic emails and note whether each one was right. The note stays with that message.

When you email us or reply to our outreach, we keep your message, our replies, the requests still open, and the orders they concern. We also keep any picture we send you in a reply. A photo used for your portrait stays with your record until you ask us to delete it. If a photo you send shows the front of the house, we use it to make the portrait, the same way as a photo you upload. Google's software looks at it first to check that it shows a house. If you ask us by email to change the portrait, that request, with email addresses and phone numbers removed, can be sent to our illustration service. Anthropic helps prepare replies from that conversation, current order facts, and our help articles, and a sentence or two summing up the conversation for our staff. We keep what we showed Anthropic and what it proposed for ninety days, as the record of how an automated decision was made. After a year we delete what is left of that record. The first portrait for an outreach conversation can appear automatically on its preview page. A person on our team approves the reply before we send you that link. Simple replies can go without a person reading them first. Everything else waits for one. We record who approved or changed an answer and why, so you do not have to explain the same thing again. For thirty days, accepted corrections can guide later drafts for your account while our product facts remain current. We retain the original To and CC participants so a reply can include the same people. Staff review that audience. We also keep a list of the people who write for you or are copied, such as an assistant, with the name they gave. Later replies include them too. Staff can take anyone off it. Being on it never gives anyone access to your account. When you first sign in, we send up to five of them an invitation to join your account. They only get access if they accept it. If our reply asks you for something, we may follow up up to three times, with Anthropic preparing a draft that a person can stop before it goes. We keep the planned dates and whether each reminder was sent, paused or stopped. A new reply from you pauses them. If you say not now, we wait until the time you named before we follow up again. When it is about a portrait we sent you, we may follow up twice more, over about three weeks. Staff can save a rule for your account or for similar questions. Those rules expire after thirty days and stop applying when our product information changes. Staff can also mark something read from your message as not a request. We keep its short label for up to a year and show it to Anthropic, so it stops raising things like it for anyone. We remove message text and decision notes from the request workspace ninety days after its last activity once every request is closed. Open requests keep their context until we have dealt with them. Support inbox copies are removed ninety days after we reply. Our email and staff chat providers also hold their copies.

We keep each conversation with you in one record: each message, who wrote it, who was copied, when, and which home it is about. We blank the message text ninety days after the conversation closes. Our earlier messages with you are gathered into the same record. The words and marks you leave on a proof are kept with the conversation about that portrait, for the same time.

For each person we have written to, we keep a note of where things stand. It says which homes we have talked about and how far each got. It says what you last told us about each portrait (it looks good, you want a change, not now, or no) and which message said it. That is a note, not an approval: nothing is charged until you approve on your order page. It says whether you asked us to wait and until when, and whether you asked us to watch for your next closing. It says when we plan to write next and why. When that is a reminder about a page you asked us to email you, it holds the email address you typed and which page it was. We keep a dated record of each change to that note. If we stop writing to you, we keep a note of why with the stop.

Card details go straight to Stripe and never reach our servers. We hold a Stripe customer identifier and a payment method identifier, and we show the card brand and last four digits Stripe reports back. The card is held against you personally, not your account, so nobody else on your team can see it or spend on it.

We keep a card only when you save it, by the box at payment or on your profile. Remove it in your profile and we tell Stripe to forget it. A saved card is charged only when you approve a proof, for the amount shown above the button.

When you approve, we collect the delivery address if we do not have it. Usually that is yours, and we keep it on your account so you do not type it again. If you ship straight to your client, that address stays on that one order and is never suggested anywhere else. We pass the delivery name and address to our print vendor and the carrier. Stripe Tax uses it to work out sales tax. A gift note, if you add one, is stored on that order. Our current printer does not print it.

If you order from a page we made for you, before you have an account, Stripe collects the address, your email, and your card on its own page. It passes us the name, the delivery address, your email, and what you paid. Saving the card is a box you tick. The address stays on that one order.

For every charge we keep the amount, the tax, the date, the card brand and last four digits, and Stripe’s reference. A free portrait from your punch card is recorded at Stripe too, as a $0 invoice under your customer record, so every order has one. Nothing is charged on it. If a charge fails we keep the reason the bank gave, so we can tell you whether to try again. Once the print ships we store the carrier, the tracking number, and the dates it shipped and arrived. Once it ships we also make a picture of the portrait hung in a stock photo of a room. It sits on your order page and we email it to you, to share if you like. We keep that picture with the portrait.

Your agent gave us your details so we could make you a gift. Here is exactly what that means.

• We may hold your name, if your agent gave it to us. It labels the order and is not printed on the artwork.
• We may hold the street address of the house, if your agent gave it to us.
• We hold a photo of your home, supplied by your agent or saved from its public listing, and the portrait made from it.
• We hold your delivery address only if your agent asked us to ship the print straight to you. Usually the print goes to the agent, who hands it over.

We use this to make the print. Once your agent orders it, the finished portrait may appear among the examples of our work on our site, with no name, no address and no photo. Ask and we take it down. We do not build a profile of you, sell your information, or add you to any list. We never email or text you.

Ask us to delete your information at [email protected], with the address of the house. We will confirm it is you, remove your name, any contact details, and any delivery address we hold, and tell the agent we did. Ask and we will delete the photo and the portrait too. A paid order leaves an invoice and a tax record, and those keep the address we shipped to.

We keep the house record after the order is finished, on purpose. It lets your agent reorder or replace a print that arrived damaged. If you would rather we did not, say so and we delete it.

We find an agent from a public record of a sale they just closed, either by hand or by searching listing data. Two agents work most sales: the one who listed the house, and the one who represented the buyer. The record names both, so we may reach out to either. Sometimes we email first to ask whether you want a portrait of that house, with no picture and no link in it, and make one only if you say yes. Otherwise we make a portrait of one of those houses at our own cost and send a message with a link to it. It goes by a route you show in public: a your business email, the form on your site, or a call by hand. That is information about someone who never asked us to hold it, so here is what we gather. The address of the sale, what it sold for and the date it closed, all of which the listing already makes public. Your name and brokerage, and your public handle, business email or business phone. The identifiers the listing carries for you: a licence number where one is shown, an industry membership number, and the listing reference. We keep those so we can tell two agents of the same name apart. We may note your website, your social page and the follower count shown on it. All of it comes from a brokerage site, a listing or a public profile. We use a phone number only if one of us dials it by hand; we never text it. Up to three photos of the house, from a source we are allowed to use. The portrait we made, and that portrait placed in a stock photo of a room, which holds nothing of yours. If you reply, what you said, so we write a better message next time; opt out and we delete it.

The portrait waits in a placeholder account nobody can reach. Your page shows the portrait, its source photo and the street name, and your first name and brokerage when we have them. Never your handle or email. If you reply, we note whether the answer was yes or no. We note when you first open the page. If you go quiet we may follow up, up to three times after our last message. A person on our team approves each one before it goes. What we say can depend on whether you looked. If you say yes to a portrait, buy one, or ask us to keep you posted, we note that on your record. We then watch public listing sites for your next closing, so we can offer a portrait of that house too. Tell us to stop and we stop. Sign in through the link and the placeholder becomes your account, with the house already in it.

If you ask us to keep you posted about a future listing, we check public listing sites for your new closings each day. We write back in the same thread once we have made a portrait of one. We stop on your say-so, or on our own after two messages you never answer. We also stop once you have done nothing for 75 days: no reply, no click, no order. Write to us or order again and we may start watching again.

We also email loan officers. We find them in the business contact database our email provider keeps. From it we take a name, a job title, an employer and a work email address. The email asks whether you would like a free proof of a house. During our move to a new email system, we copy existing outreach records and prior sent-mail contact records into our private database. This preserves conversations and helps us avoid contacting you again by mistake. These include addresses previously assigned to a campaign, even if no email was sent. You can ask us to delete them.

Do not want to hear from us? Reply and say so, use the opt-out link, or email [email protected]. We record the opt-out so we never contact you again, your page stops working, and we stop. The portrait and the placeholder go when we delete unanswered pages (we plan to do that at twelve months). No reason needed. A reminder about a page you asked us to email you has its own stop link: that one stops the reminders and leaves your page open.

We never send unsolicited text messages. If an email to you bounces or you mark it as spam, we record the address and stop writing to it. If you never reply, we plan to delete the record and the portrait after twelve months.

Our staff receive daily prospect lists by email with public business contact details and listing information. We record who received each lead so it is not assigned twice or added to an automated campaign.

We use other companies to run the product. Each gets only what it needs. One of them, Google, also counts what our ads lead to. That is the only advertising tool we use.

Company · What it receives

Supabase

Our database, sign-in, and file storage. Everything in this policy is stored there, including photos and portraits.

Vercel

Hosting. Serves the site and keeps ordinary request logs, including IP addresses. Also counts page views for us: the page, the referrer, the browser and the country, tied to a hashed identifier that resets daily. No cookie, and nothing that names you.

Google Ads

Counts the results of our ads. On our public pages, and on the upload page before you sign in, Google's tag sets a cookie. It tells Google the page, your browser and your IP address. If an ad brought you, it also notes when you give us your email to start a portrait. The email itself is not sent, and neither is any photo or order. We have switched off its use for building advertising audiences. It is not on the pages you use after signing in.

Stripe

Card details straight from your browser, amounts, your email, and the delivery address for sales tax. The receipt comes from us, not from Stripe.

Artelo, our printer. Printful for orders placed with them before the change

The product, the delivery name and address, and a link to the print file that works for seven days. They send back the carrier and tracking number. Printful also received your name and gift note for its packing slip.

The shipping carrier

The delivery name and address, and tracking.

Our illustration service

House photos, candidate portraits, marked areas, correction notes, our style instructions, and the house street line so it can show and check physical address markings. We do not add the client's name, contact details, or delivery address. It runs on Render, a hosting company, and makes portraits with tools from Google and Anthropic. Google's software looks at a photo an agent sends, or a listing photo we saved, to check that it shows a house. It also reads a public listing's price and description, to check that the house is one worth drawing. An image-tool host called fal may receive a crop of a portrait and a mask of the area to redo. That happens when our checks find a small flaw, or when you ask for a change. It never receives the house photo or anything about a person.

Google Workspace and Zapmail

The addresses, message contents and attachments in our team email inboxes. Google hosts the inboxes; Zapmail provides and connects them. When enabled, our own outreach jobs send campaign emails through these inboxes and keep the recipient, copy, sending time and result.

Resend

Email addresses and the contents of email we send and receive, including attached photos.

Anthropic

Messages and relevant replies from your conversation with us, order progress, house details, and saved staff guidance, to prepare an answer and a short summary for our staff. It also reads an agent's reply to sort what it asks for: a yes, a stop, another house, or a question our help pages answer. We replace email addresses and common phone number formats before those calls. Names and house details needed to answer can remain. It also sees short labels staff marked as not a request. When a reply is about a portrait, it can see a smaller copy of that portrait. Never the house photo. A person approves every reply but the simple ones. Also, when our staff ask its assistant a question about our pipeline, what it reads to answer: a name or handle, a market, and where an order stands. Never an email address, a street address or a card.

Slack

What happens on your order, posted to our staff channels so a person can act. That is the moves it makes, and your replies and change requests in your words. Also your photo of the house beside our portrait of it, so a person on our team can check one against the other. Never a sign-in link. Also a support message with its drafted reply, under who sent it: your name, email address, brokerage and market. Also a follow-up email to you, in full, with the original question and exact recipients, before a person on our team sends it. When our personal note asking about ordering goes out, staff see its wording and recipient in the same channel.

Instantly

Sends our first email to an agent we found, and shows us their reply. It also connects our team inboxes so messages outside a campaign reach our staff: the agent's email address, name, the street of the house, and the opt-out link. We keep existing outreach records there during our move to a new email system, so we can preserve conversations and avoid repeat contact. You can ask us to delete them. It also keeps a database of business contacts. We find loan officers in it and email them from there: name, job title, employer and work email.

MillionVerifier

When enabled, checks whether a business email address can receive mail before we add it to outreach. It receives the address. We keep the result and when we checked it.

Inngest

Runs our background jobs. Job payloads carry record identifiers rather than customer details.

Sentry

Error reports, so we learn when something breaks. A report holds the fault, the file, an account identifier, and a user identifier. Names, addresses, phone numbers, email addresses, and photo links are removed before it is sent.

U.S. Census Bureau geocoder

The street address an agent emails us, so it comes back in standard form with its town, state and ZIP. Not names, not email addresses.

A public listing site

The street address an agent emails us, so it can return that house's listing and photos. Not names, not email addresses.

Komoot (Photon)

Address suggestions from OpenStreetMap, in our internal tools. It receives the characters typed into an address box. Not names, not photos.

We do not sell personal information. Nothing from your account, your photos or your orders is shared for advertising.

What · How long

Your account and organization

While the account is open. Ask after closing it and we delete it, apart from records we have to keep.

Houses, photos, and portraits

Kept after an order finishes, so you can reorder or replace a damaged print. Deleted on request, from you or from the homebuyer.

Orders, payments, and tax records

Seven years, for tax and accounting rules. These keep the amount, the tax, the date, the last four digits, and the address we shipped to.

A project you started but never opened

Until you ask us to delete it, photo and all. The email address on it is cleared the moment you sign in.

The rights record on each photo

As long as we hold the photo, and afterwards as evidence of the promise.

A page we made for you before you replied

Twelve months, then we plan to delete it. Deleting it removes the portrait and the placeholder account.

Request workspace content and staff decision notes

While requests remain open, then ninety days after the last activity. Saved rules expire after thirty days and are deleted a further ninety days later.

Private original email copies

While a message or request needs review. After the conversation closes or becomes inactive and its request content is cleared, we remove the original after ninety days. Copies from failed captures that no record uses are removed after a day.

Conversations with you

As long as your record exists. The message text is blanked ninety days after the conversation closes.

Where things stand with you, and its changes

As long as your record exists. A note of why we stopped writing to you is kept with the opt-out record.

The people who write for you or are copied

As long as your record exists. Ask us and we remove a person from it.

The record of messages we sent you

We plan to keep these two years. Personal reply text follows the request-workspace period described above.

Opt-out records

Kept indefinitely. It is the only way to be sure we never contact you again.

Technical and error logs

As long as our vendors keep them, currently up to ninety days.

Staff actions on an order

We plan to keep these two years. What our staff did on an order in the internal console is logged.

Agent, homebuyer, or someone we contacted once: email [email protected] and ask for any of these. We answer within 30 days and we do not charge for it.

• A copy of what we hold about you.
• A correction, including the spelling of a name.
• Deletion. We will say plainly if something has to be kept for tax reasons.
• To stop being contacted.
• To know who we shared it with.

We will not treat you differently for asking. If a client of yours contacts us directly, we act on their request and tell you we did.

For California residents: we collect identifiers, commercial information, internet activity, and photographs, for the reasons above. We do not sell personal information or share it for cross-context advertising, so there is nothing to opt out of there. You can know, delete, correct, and limit, and you can use an authorized agent to ask.

• Customer data is fenced at the database by the organization it belongs to. Your clients’ names are visible to your organization and no other.
• Data is encrypted in transit and at rest by our providers.
• Sign-in links are stored as hashes, never as the link itself.
• A house page link is the house’s address or three random words. Anyone holding it can see that portrait and order a print of it, and nothing else about your account.
• Every email about an order carries a link to a page that shows where it is. Anyone holding that link can see the stage, the town it ships to and the tracking number, and nothing else. It cannot approve, pay or change anything.
• Client names and street addresses are kept out of technical logs, error reports, and URLs.
• Every incoming webhook is signature-checked before we read it.

No system is perfectly secure. If you find a problem, email us and we will take it seriously.

When you sign in, we set a cookie named ds_card. It remembers which account's punch card to show on this browser. It holds only an account number and a date. It never holds your name, your email, an address or anything about an order. It lasts a year. It stays after you sign out, so the card still shows here.

We do not send text messages today. If you give us a mobile number and tick the box, we hold the number and your permission for the day we can text you about your own orders. Nothing is sent until then, and we will not text you to ask. Turn it off any time; that number is then off for good.

This is a product for real estate professionals. It is not meant for anyone under 18, and we do not knowingly collect information from children.

We sell and ship in the United States, and our providers store data there. If that changes, this policy changes first.

Every version of this document carries a date and a version at the top. If we change what we collect, who we share it with, or how long we keep it, we email account holders before it takes effect.

Questions, corrections, and deletions all go to one place. A person reads them.

[email protected]

Doorstep Gifts is run by ClickClackLabs LLC, New York, United States.

Read the Terms of Service