BeatTheDoor
Privacy

What we collect, and what we do with it.

This policy covers the BeatTheDoor website, the client portal and our business database. BeatTheDoor is a product of Prompt AI USA.

Who we are

Prompt AI Ethical Solutions USA LLC, trading as Prompt AI USA, PO Box 1209, Milwaukee, WI 53208. Contact us at support@promptaiusa.com or (414) 513-6375 about anything in this policy.

Visitors to this website

  • We don't use analytics, advertising pixels or tracking cookies.
  • The Lead Finder and profit calculator run in your browser. What you pick or type isn't sent to us.
  • Our fonts load from Google Fonts, so Google receives your IP address and browser details when the page loads.
  • Our hosting provider (Cloudflare) keeps standard request logs for security.
  • If you email or call us, we keep that conversation to answer you.
  • If you book a demo, the form sends your name, email, company and the optional details you add to our client portal (also run on Cloudflare), and we email them to ourselves. We use them only to arrange and follow up on the demo, and delete them after 12 months if you don't become a customer.

Customers using the client portal

  • Account: your name, email and a password (stored only as a salted hash).
  • One cookie: a session cookie that keeps you signed in. No tracking cookies.
  • Your workspace: your campaigns, leads, emails, replies and meetings, visible only to your workspace's members.
  • Payments: handled by Stripe. We never see or store your card number; we keep your plan, billing status and invoice records.
  • Activity log: sign-ins, exports and approvals, kept for security and support.

Businesses in our database

We hold business information from public records and the business's own public presence: name, address, phone, business email, website, licences, and the names of owners or managers where public records show them. We use it to help our clients reach businesses with relevant offers by email. For businesses in California, we don't show owners' or managers' names to our clients.

If you are in our database, you can ask what we hold about you, ask us to correct it, or ask us to delete it, by emailing us. Replying "unsubscribe" to any of our emails stops all emails from that sender and keeps your address off every client's campaigns.

Business owners who claim a listing

Each listing has a public page that shows only business information: name, address, category and state licence number. It never shows an email address, a phone number or an owner's name.

  • Claiming: you ask for a one-time code, sent by email to the contact we already hold for the business. Tapping the button is your request; we don't text or message anyone who hasn't asked. Codes expire after 10 minutes. We never use SMS.
  • Proof: to unlock inquiries and your dashboard you add at least one document (a business licence or a utility bill). Files are stored privately, shown only to our review staff and, if you turn on your credentials passport, to people you share the link with. Links to files expire after 15 minutes. Rejected uploads are deleted. Utility bills are never shown on the passport unless you choose.
  • Inquiries: people who ask about a business must confirm their email first. Their name, email and message are shown to the owner only after the owner's business proof is approved. We email an unclaimed business at most once a week to say inquiries are waiting, without naming anyone.
  • WhatsApp: alerts and job messages go only to numbers whose owners opted in with a code. Reply STOP to any message to stop. Messages are sent through Meta's WhatsApp Business platform.
  • Reviews: Google and Yelp ratings are shown separately and fetched live. We don't keep review text; we keep review identifiers and star ratings so we can tell you about new low-star reviews.
  • Street view and weather: when a signed-in visitor taps Street view on a business page, a Google map opens in a window, so Google receives your IP address and browser details and may set its own cookies. We send Google no account details. The weather card on a business page is fetched by our server from the US National Weather Service for the business's town, so nothing about the visitor goes to them.
  • Removal: you can remove or correct a listing, or stop messages, any time at /remove. We send a code to the contact on file, hide the listing right away and add the contact to our do-not-contact list.
  • Member accounts: to see a business's details, send an inquiry or list a service you sign in with a one-time code sent to your email. We keep that contact, an optional name, what you came for, and a sign-in session (30 days, until you sign out). Your inquiries and applications are tied to the account. We never use SMS and we don't sell this information. To delete your account, email us.
  • Service providers who apply: we keep the details you give us (business name, your name, email, optional phone, service, areas, and any licence or insurance information) to review your application and to email you introduction requests from owners who ask for your service. Remove it any time by emailing us.
  • Job alerts: people who sign up at /alerts get alerts on WhatsApp and share their screening answers and number with the business that sent the alert. We don't sell numbers.

The apps and your account

  • The iOS and Android apps are this website in a native shell. They use no advertising, no tracking and no third-party analytics.
  • Notifications are optional. If you allow them, we keep a token that identifies your phone so we can send you a short notice when, for example, an owner answers your question. The notice carries no private details. We send it through Apple's push service (iPhone) or Google's Firebase Cloud Messaging (Android). The token is deleted when you sign out or delete your account.
  • Location is used only when you tap "near me", to list businesses close to you, and is not stored. The camera and photos are used only when you choose to attach a business document.
  • Deleting your account: in the app or on the website, open your profile (owners: Settings) and choose Delete my account, or follow these steps. It erases your account, reviews, questions, requests, saved searches and phone tokens, and cancels any paid plan. Businesses you claimed return to public records and your uploaded documents are deleted.
  • Plans are not sold in the apps. Nothing in the apps can be purchased.

Your privacy rights

Wherever you live, you can ask us to tell you what we hold about you, correct it, delete it, or stop using it to reach you. Email support@promptaiusa.com with your name, the business and the email or phone we may hold. We'll confirm the request comes from you (usually by replying to that address) and answer within 45 days. We won't treat you differently for asking.

California residents: under the California Consumer Privacy Act you have the rights above, plus the right to opt out of the "sale" or "sharing" of your personal information. Because our clients receive business leads that can include an owner's or manager's name and business contact details, we treat that as a possible sale, and anyone can opt out: email us with the subject "Do not sell or share my personal information". We then remove you from every client's leads and put your email on our do-not-email list. You can use an authorized agent; we may ask them for proof. We don't collect sensitive personal information, and we don't knowingly hold information about anyone under 16.

Other states: several states give similar rights, and we honor the same requests wherever you live.

Who we share it with

  • Clients receive the business leads in their own campaigns.
  • Service providers that run parts of the service for us: Cloudflare (hosting), Stripe (payments), Microsoft (email), and AI model providers that draft suggested replies from the text of a reply a business sent: Groq, and as backups Google (Gemini) and Cloudflare Workers AI. Google also provides the Street view maps embedded on business pages (Google Maps), as described under businesses above.
  • The law: when we are legally required to.

We don't sell or share personal information about website visitors or customers. For the businesses in our database, see "Your privacy rights" above for how to opt out.

How long we keep it

  • Customer accounts and workspace data: while you're a customer, and for 30 days after your plan ends so you can export, unless you ask us to delete sooner. Billing records are kept as tax law requires.
  • Do-not-email requests: kept permanently, so the request keeps working.
  • Business records: refreshed from public sources and removed on request.

Security

Data travels over HTTPS. Passwords are hashed, sessions expire, repeated failed sign-ins are locked out, and each workspace can only see its own data. No system is perfectly secure; if something goes wrong that affects you, we'll tell you.

Children

Our service is for businesses. It isn't directed at children and we don't knowingly collect information about them.

Changes

We'll update this page when our practices change and change the date below. Significant changes are emailed to customers.

Last updated October 15, 2026.