← Threshold

Privacy Policy

Last updated: July 16, 2026

This policy describes what Threshold collects, why, and what we do with it. Short version: we collect what's needed to run your door service, we don't sell it, and we don't record your calls.

What we collect

• Account information: your name or unit label, username, and a cryptographically hashed password (we never store or see your actual password).
• Contact details: the phone numbers you designate to ring, and any notification email addresses you add.
• Call metadata: when your intercom number is called, we log the time, the caller ID presented, and what happened (forwarded, answered, missed, auto-unlocked). We do not record call audio.
• Activity records: auto-unlock arm/disarm events, guest pass creation and use, and settings changes, so you have an audit trail of your own door.
• Push subscriptions: if you enable notifications, the anonymous push token your browser generates.

What we use it for

Operating the Service: routing your calls, opening your door when you've asked us to, sending the notifications you've enabled, and support. That's it. We do not sell or rent your information, and we do not use it for advertising.

Who processes it

• Twilio carries the calls and stores service data (call logs, account state) as our telecommunications provider.
• Stripe processes payments. Your card details go directly to Stripe; we never see or store them.
• Resend delivers email notifications if you've configured them.

Each processes data under its own privacy terms as a service provider to us.

Retention

Account data is kept while your account is active. Activity logs are kept on a rolling basis for your own review. When your account is closed, your number is released and account data is deleted within a reasonable period, except records we must keep for billing or legal compliance.

Security

Passwords are stored only as salted scrypt hashes. All traffic is encrypted in transit (HTTPS/TLS). Door-control endpoints validate cryptographic signatures so that only genuine telephone events can trigger them.

Your choices and rights

• You can view your activity log, change your phones, emails, and notification settings, and revoke guest passes at any time in the app.
• You can request a copy or deletion of your data by emailing us.
• California residents: we do not sell personal information as defined by the CCPA.

Children

The Service is for adults and is not directed at children under 13. We do not knowingly collect information from children.

Changes

We'll post any changes here with an updated date. Material changes will be highlighted on the site.

Contact

support@thresholdbuzz.com