Privacy policy
Effective October 26, 2026
Hundred Doors (the “app”) is run by Initial Six (“we”, “us”). This policy explains what we collect when you use the app, why, who helps us run it, and the choices you have. Questions: hello@initialsix.co.
What we collect
- Your account: your name and email address, and a securely hashed password.
- What you enter: properties and their addresses, parcel IDs, purchase prices, values, loans, insurance, rehab budgets and draws, LLCs, contacts, lenders, saved deals and sale plans.
- Tenant details you add: tenant names, phone numbers, email addresses, rent and lease dates.
- Files you upload: leases and lender term sheets.
- Feedback you send from the app, with the page you sent it from and your browser type.
- Basic technical data: our hosting provider records standard request information such as IP address and browser type to keep the service running and secure.
We don’t use advertising or analytics trackers, and we don’t sell or rent your data.
How we use it
- To run the app: calculating cash flow, refinance and deal estimates, showing your map, and building your lender schedule.
- To send emails you’ve asked for or that the service needs: sign-up confirmation, password resets, and the weekly reminder email (which you can turn off in Settings).
- To answer feedback and support requests, and to fix problems.
- To keep the service secure and prevent abuse.
Tenant and third-party information
When you add information about tenants, contacts or partners, you’re responsible for having the right to store it and for using it lawfully. We store and process it only to provide the app to you, and it’s visible only in your account.
Who helps us run the app
These providers process data on our behalf, only as needed for the parts of the app listed:
- Supabase: accounts, the database and file storage.
- Cloudflare: hosting and the app’s server functions.
- Mapbox: address search and maps. Addresses you type are sent to Mapbox to find them.
- Anthropic (Claude): reading a term sheet, only when you upload one for that. The PDF is sent to Anthropic to pull out the loan terms. Under its commercial terms, Anthropic doesn’t use this data to train its models.
- Resend: sending emails.
- Google Fonts and jsDelivr: fonts and code libraries the page loads, which see your IP address like any website request.
These providers may process data in the United States.
Share links
If you create a share link for your lender schedule, anyone with the link can see that schedule: addresses, parcel IDs, values, loans, rent and cash flow. It never includes tenant names, contacts, notes or documents. You can turn a link off at any time.
Storage on your device
The app keeps a few things in your browser: your sign-in session, your light or dark mode choice, your working Next Deal and sale plan, and which tips you’ve seen. Clearing your browser data removes them.
How long we keep it
We keep your data while your account exists. When you delete your account, your data and files are deleted right away. Copies in our providers’ backups are removed as those backups expire, normally within 30 days. Feedback you sent is kept without your email address.
Your choices
- Export: Settings → Download all my data gives you everything as CSV files.
- Correct: edit anything in the app.
- Delete: Settings → Delete my account removes your account and everything in it.
- Emails: turn off reminder emails in Settings.
For anything else, including privacy rights under your state’s law, email hello@initialsix.co.
Security
Data is encrypted in transit and at rest with our providers. Every record is tied to your account, and the database refuses access to anyone else’s. No system is perfectly secure, so use a strong password you don’t use elsewhere.
Children
The app is for adults managing real estate. It isn’t meant for anyone under 18.
Changes
If we change this policy in a meaningful way, we’ll update the date above and let you know by email or in the app.