Terms & Conditions

1. Agreement to these Terms

These Terms and Conditions (Terms) govern access to the Doorstone website, mobile application, web dashboard, content, support and related services (together, the Services).

The Services are operated by Marvel Technology and Information Systems WLL, with an office at Arcapita, Office 2, Bahrain Bay, Manama, Kingdom of Bahrain 346 (Marvel, Doorstone, we, us or our).

By selecting "I agree" and creating an account, you confirm that you have read and accepted these Terms. If you do not accept them, do not create an account or use the Services. Your acceptance is recorded electronically with the Terms version, account and timestamp.

An owners association, developer, property manager or other organisation responsible for your property or community may subscribe to Doorstone (the Community Customer). A separate agreement between Marvel and the Community Customer governs the commercial service. These Terms govern your use as an individual authorised user.

2. Eligibility and authority

You may use the Services only if:

• you are at least 18 and have legal capacity to accept these Terms; or
• you are acting through a legally authorised guardian or representative; and
• your Community Customer has invited, approved or otherwise authorised your access where community access is required.

If you accept these Terms for a company, association or another person, you confirm that you have authority to bind or act for them. Do not create an independent account for a child. Limited dependent/family information may be added only by an authorised adult for a lawful community purpose.

3. What Doorstone does

Doorstone is a technology platform that may allow authorised users to:

• access community and property information;
• submit and track service or maintenance requests;
• receive notices, alerts, news and event information;
• access documents and association information;
• view invoices, pay dues and obtain transaction status or receipts;
• take part in configured meetings, polls or votes; and
• use visitor, delivery, permit, offer or other functions enabled by the Community Customer.

Features differ by community, user role, platform, location and subscription. The description in an app store or marketing page is not a promise that every feature is enabled for you.

4. Doorstone's role and the Community Customer's role

Doorstone supplies software. Unless Marvel separately agrees in writing and holds any licence required by law, Marvel is not:

• your owners association, developer, landlord, property manager or facilities manager;
• a real-estate broker, legal adviser, accountant or association manager;
• the contractor that performs a maintenance or other community service;
• a bank, payment institution or card issuer; or
• an emergency, security or life-safety service.

The Community Customer is responsible for its community decisions, rules, notices, user approvals, service providers, invoices, violations, meeting requirements and the legal validity of votes or resolutions. Questions about those matters should normally be addressed to the Community Customer through the contact shown in the Services.

Nothing in these Terms transfers to Marvel a statutory duty that belongs to an owners association, property manager, developer, supplier or payment provider.

5. Accounts and security

You must:

• provide accurate, current and complete information;
• use only your own account and authorised role;
• protect your password, one-time code and device access;
• promptly update your contact information;
• promptly report suspected unauthorised use; and
• sign out or secure your device where another person could access it.

You are responsible for activity performed through your account to the extent caused by your failure to take reasonable security precautions. You are not responsible for activity caused by Doorstone's breach, a platform vulnerability, or circumstances outside your reasonable control.

If biometric login is enabled, your device performs the Face ID/fingerprint match. Doorstone receives an authentication result and does not receive your raw biometric or template. You remain responsible for the people whose biometrics are enrolled on your device.

We and the Community Customer may verify account eligibility, require re-verification after a material change, correct an assigned role, or temporarily restrict access to investigate security or authority.

6. Identity and community verification

Your Community Customer may require proportionate evidence that you are an owner, resident, tenant, authorised family member or representative. This may include a CPR card, passport or property/tenancy information.

You confirm that any document you submit is genuine, current, belongs to you or is supplied with lawful authority, and is used only for the stated verification purpose. Do not alter an identity document or submit another person's document without authority.

Doorstone restricts access to identity documents and applies the deletion approach described in the Privacy Policy. Verification through Doorstone confirms only the platform/community access decision. It does not certify legal title, immigration status, contractual rights or identity for an unrelated purpose.

7. Acceptable use

You may use the Services only for lawful, authorised community purposes. You must not:

• impersonate another person, misstate your role or use false information;
• access or attempt to access another user, unit, community, ballot or restricted record without authority;
• disclose another person's identity, contact, invoice, violation, visitor, access or voting information without lawful authority;
• upload content that is unlawful, fraudulent, threatening, harassing, defamatory, discriminatory, obscene or that infringes privacy, confidentiality or intellectual-property rights;
• submit malware or use the Services to probe, scan, disrupt, overload or bypass security;
• scrape, harvest, reverse engineer or use automated access except through a written, authorised interface and to the extent law permits;
• interfere with a meeting, poll, vote, service request, invoice or audit trail;
• make a payment using a method you are not authorised to use;
• use another community's data to market, profile or make unrelated decisions about a person;
• copy or commercialise the Services or Doorstone content except as expressly permitted; or
• assist another person to do any of the above.

Reasonable security research must be authorised in writing before testing production systems.

8. Your content

Your Content means information, text, images, video, audio, documents, comments and other material you submit through the Services. It does not include Doorstone software or content owned by the Community Customer or another person.

You retain ownership of Your Content. You give Marvel and the relevant Community Customer a non-exclusive, worldwide, royalty-free licence to host, copy, transmit, format and display Your Content only as needed to operate, secure and support the Services, comply with lawful instructions, and exercise or defend legal rights. This licence ends when the content is deleted from active systems, subject to retention, backups and legal holds described in the Privacy Policy.

You confirm that you have the rights and authority needed to submit Your Content. Submit only information that is relevant and proportionate. In particular, do not include identity documents, health details, children's data or another person's confidential information in a general request unless necessary and authorised.

We may restrict or remove content where reasonably necessary to comply with law, protect a person or the platform, enforce these Terms, or follow a lawful Community Customer instruction. Where appropriate, we will preserve the audit record and inform the affected user.

9. Community information and notices

Community content may be supplied by the Community Customer, its staff, association members, contractors or other users. The responsible contributor or Community Customer is responsible for its accuracy and authority. Doorstone may provide technical timestamps, delivery status or acknowledgement but does not guarantee that an electronic notice alone satisfies every legal notice requirement.

You should maintain current contact details and review important notices. A push notification, email or SMS may be delayed by your device, network or provider. Where law or a community rule requires another delivery method, the Community Customer remains responsible for using it.

10. Service and maintenance requests

The Services may route a request to the Community Customer or its selected contractor. A submission does not guarantee acceptance, a response time, availability, price or successful completion. The Community Customer or contractor is responsible for triage, appointment, performance, safety and any service warranty.

Do not use Doorstone for an emergency. If there is a threat to life, safety, security, property or essential services, contact the appropriate Bahrain emergency service, building security or responsible on-site contact directly.

When a contractor or external provider is assigned, information necessary to fulfil the request may be shared with it under the Community Customer's authority and applicable privacy terms.

11. Association meetings, polls and voting

Where enabled, Doorstone may record eligibility, attendance, participation, proxy information, ballot status, vote, result and audit events.

The Community Customer-not Doorstone-is responsible for determining and configuring:

• authority to hold the meeting or vote;
• membership, unit entitlement and voter eligibility;
• notice, agenda, quorum and majority requirements;
• proxy and representative rules;
• whether the ballot is open or secret;
• required records, minutes and result publication; and
• compliance with applicable law, RERA requirements and association instruments.

You must vote only when eligible, only once per entitlement unless the rules expressly allow otherwise, and without manipulating or disrupting the process. You are responsible for checking the displayed option before final submission.

The interface will tell you whether a submitted vote can be changed. An electronic result generated by Doorstone is a platform record, not a legal opinion or certification that the meeting, vote or resolution is valid. Any formal challenge must follow the Community Customer's process and applicable law.

12. Invoices, dues and payments

The Community Customer determines the amount, due date, description, credits, penalties and legal basis of an invoice or due. Contact it promptly if you dispute those matters.

If you choose to pay through Doorstone:

• the payment page will identify the amount, currency and payment provider;
• you authorise the provider to process the selected payment;
• complete card numbers and CVV data are handled by the provider and are not stored by Doorstone;
• Doorstone may receive transaction reference, status and reconciliation information;
• payment is complete only when confirmed by the provider and reflected by the Community Customer; and
• you should keep the electronic confirmation and report a mismatch promptly.

Fees, refunds, reversals and chargebacks are governed by applicable law, the invoice, the Community Customer's authorised policy and the payment provider's terms. Doorstone will reasonably assist with platform transaction evidence but cannot unilaterally cancel a valid community charge or reverse a provider-settled payment.

Failure or delay in the payment function does not itself cancel the underlying amount. The Community Customer must provide a reasonable alternative payment route where required.

13. Events, offers and third-party services

An event, offer, map, video, contractor or external link may be supplied by a Community Customer or third party. Unless clearly stated otherwise, Marvel does not endorse, sell or guarantee the third-party product or service. Its provider is responsible for availability, statements, fulfilment, price, refunds and its privacy practices.

Third-party terms apply when you choose to use that service. Review them before sharing information or paying.

14. Privacy and communications

The Doorstone Privacy Policy explains who controls personal data, categories, purposes, recipients, transfers, retention, security and your rights. The Doorstone Data Protection Policy explains our organisational controls.

You agree to receive operational electronic communications needed for account security and enabled community functions, such as authentication codes, service status, invoices, meeting notices and urgent alerts. These are different from marketing. We will send Doorstone marketing only under the applicable permission, and every marketing message provides an opt-out.

Electronic acceptance, notices and records may have legal effect under Bahrain law. You can request a copy of the Terms version you accepted.

15. Intellectual property

Marvel and its licensors own the Services, software, design, databases, trademarks, documentation and content they create, except for Your Content and content identified as belonging to the Community Customer or a third party.

Subject to these Terms, Marvel gives you a personal, limited, revocable, non-exclusive, non-transferable licence to use the Services for authorised community purposes. No source code, trademark, ownership right or broader licence is transferred.

If you send product feedback, you permit Marvel to use it without payment or confidentiality obligation, provided we do not publicly identify you or disclose personal data contrary to the Privacy Policy.

16. Availability, changes and beta features

We aim to provide reliable Services but do not promise uninterrupted or error-free availability. Maintenance, security, provider outages, connectivity, force majeure or Community Customer configuration may affect access. We will use reasonable efforts to communicate planned material outages and restore service.

We may update the Services for security, law, performance or product improvement. We will not intentionally remove a core paid Community Customer function without the notice required by its commercial agreement.

A feature identified as beta, pilot or preview may be changed or withdrawn and should not be relied upon for a legal deadline, safety-critical process or sole record unless the Community Customer has separately validated it.

17. Suspension and termination

You may stop using Doorstone and request account closure. Community records may still be retained by the Community Customer or as required by law.

We or the Community Customer may restrict or suspend access where reasonably necessary to:

• protect security, personal data or another user;
• investigate fraud, unauthorised access or a material breach;
• comply with law, court/regulator action or a lawful customer instruction;
• reflect the end of your unit/community authority; or
• address non-payment under the Community Customer's commercial agreement, where lawful and without improperly withholding your own records.

Where circumstances permit, we will provide notice, a reason and an opportunity to correct the issue. Immediate action may be taken for urgent security, safety or legal risk. Suspension does not authorise deletion or alteration of legally required records.

On termination, your licence to use the Services ends. Provisions concerning ownership, privacy/retention, lawful records, responsibility, disputes and any provision intended by its nature to survive will continue.

18. Service standards and disclaimers

We will provide the Services with reasonable care and skill and apply the security and data-protection commitments stated in our policies and applicable agreement.

Doorstone does not warrant a Community Customer's content, invoice, contractor, decision, legal compliance, title/tenancy data, meeting or vote. Information in the Services is not legal, accounting, engineering, safety or real-estate advice.

To the extent permitted by law, implied terms are excluded only where they can lawfully be excluded. Nothing in these Terms excludes or reduces a mandatory right or remedy under Bahrain consumer, data-protection or other applicable law.

19. Responsibility and liability

Each party is responsible for direct loss that was reasonably foreseeable and caused by its breach of these Terms, negligence or unlawful conduct, subject to applicable law.

To the extent permitted by law, Marvel is not responsible for:

• a Community Customer's or third party's content, invoice, decision, service, failure or unlawful instruction;
• loss caused by inaccurate information you or an authorised third party supplied;
• delay or failure of a telecommunications, device, app store, payment or other external provider outside Marvel's reasonable control; or
• indirect or consequential business loss, loss of profit or loss of opportunity not reasonably foreseeable from use by an individual resident.

Marvel does not exclude or limit liability that cannot lawfully be excluded, including liability for fraud or wilful misconduct, or any mandatory liability for death/personal injury, gross negligence, consumer rights or personal-data violations where applicable.

The commercial agreement with the Community Customer governs liability between Marvel and that Community Customer. It does not remove a right that you personally have under mandatory law.

20. Responsibility of business and administrative users

If you use Doorstone in a business capacity or administer a community, you are responsible for your permissions, lawful instructions, user roles, content, notices, invoices, governance settings and compliance obligations. To the extent permitted by law, your organisation will compensate Marvel for a third-party claim directly caused by its unlawful content or instruction or material breach of these Terms, except to the extent the claim was caused by Marvel. This section does not apply to an individual acting only as a consumer/resident.

21. Complaints and disputes

For a platform, account, security or Doorstone support issue, contact hello@doorstone.co. For an invoice, violation, service-provider, unit, association or governance issue, use the Community Customer contact shown in the Services. We will cooperate where a dispute involves both.

Privacy requests may be sent to info@marvel-technology.com. You may also use a statutory complaint route, including the Bahrain Personal Data Protection Authority for privacy matters or the Ministry of Industry and Commerce consumer-protection channel where applicable.

Please provide the account, community, date and transaction/request reference relevant to the issue, but do not email a password, one-time code, full card number or unnecessary identity-document copy.

The parties should first try in good faith to resolve a complaint through the appropriate support route. This does not prevent either party from seeking urgent court relief or using a statutory complaint mechanism.

22. Governing law and courts

These Terms and any non-contractual dispute connected with them are governed by the laws of the Kingdom of Bahrain, without limiting mandatory rights you have under applicable law.

The competent courts of the Kingdom of Bahrain have jurisdiction, subject to any mandatory consumer forum or dispute right that cannot lawfully be excluded.

23. Changes to these Terms

We may update these Terms for legal, security, operational or product reasons. We will post the updated version and effective date and give reasonable advance notice of a material change. A change will not retroactively remove accrued rights.

Where a material change requires renewed agreement, we will ask you to accept it before continued use. If you do not accept, you may stop using the Services and request account closure, subject to lawful record retention.

24. General terms

• Order of precedence: a specific written term presented for a feature or transaction controls that feature if it clearly says so. The Privacy Policy controls descriptions of personal-data processing. The Community Customer agreement does not impose an undisclosed obligation directly on an individual user.
• No waiver: a delay in enforcing a right does not waive it.
• Severability: if a term is unenforceable, it will be limited or removed to the minimum extent necessary and the remaining Terms continue.
• Assignment: you may not transfer your account or these Terms. Marvel may transfer these Terms as part of a merger, reorganisation or sale if user rights and data protection are preserved and notice is given as required.
• Language: these Terms may be published in English and Arabic. If there is a conflict, the version identified at publication as controlling will apply, subject to mandatory Bahrain law.
• Entire agreement: these Terms and the specific policies/feature terms they incorporate are the agreement between you and Marvel regarding individual use of Doorstone, without limiting rights against the Community Customer or a third party.

25. Contact

Marvel Technology and Information Systems WLL (Doorstone)

Arcapita, Office 2

Bahrain Bay, Manama 346

Kingdom of Bahrain

Support: hello@doorstone.co

Privacy: info@marvel-technology.com