Privacy Policy

Last Updated: 7/26/2026

Introduction

Data Plus, Inc. (“Data Plus,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website (www.dphs.com), use our software-as-a-service (SaaS) platform, or interact with our products and services, including DP Finance, DP Pay, DP Supply, DP Connect, and DP Invoice (collectively, the “Services”).

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

Information We Collect

We collect information you voluntarily provide when using our Services, including:

  • Account Information: Name, email address, phone number, job title, company name, and billing address when you register for an account or request a demo.
  • Financial Information: Payment card details, banking information, and billing records processed through our payment systems.
  • Business Data: Financial records, accounting data, vendor information, invoices, purchase orders, and other hospitality-specific business information you input into our platform.
  • Communications: Information contained in emails, chat messages, support tickets, and other communications you send to us.
  • User Content: Any files, documents, or data you upload to or create within our Services.

When you access our Services, we automatically collect certain information, including:

  • Device Information: IP address, browser type, operating system, device identifiers, and hardware settings.
  • Usage Information: Pages visited, features used, clickstream data, session duration, and interaction patterns within our platform.
  • Log Data: Server logs, error reports, timestamps, and referring URLs.
  • Location Information: General geographic location based on IP address.

We may receive information from third parties, including:

  • Integration Partners: Data from property management systems (PMS), point-of-sale systems, payroll providers, and other hospitality technology platforms you connect to our Services.
  • Business Partners: Information from referral partners, resellers, and technology partners.
  • Service Providers: Analytics providers, payment processors, and identity verification services.

How We Use Your Information

We use the information we collect for the following purposes:

  • Service Delivery: To provide, maintain, and improve our Services, process transactions, and fulfill our contractual obligations.
  • Account Management: To create and manage your account, authenticate users, and provide customer support.
  • Communications: To send service-related notifications, respond to inquiries, and provide technical support.
  • Product Development: To analyze usage patterns, conduct research, and develop new features and services.
  • Security: To detect, prevent, and respond to fraud, unauthorized access, and other security threats.
  • Marketing: To send promotional communications about our products and services (with your consent where required).
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We share information with third-party vendors who perform services on our behalf, including cloud hosting, payment processing, customer support, and analytics. These providers are contractually obligated to use your information only for the purposes of providing services to us and must maintain appropriate security measures.

Integration Partners

When you connect third-party services to our platform (such as PMS systems, banks, or payroll providers), we share necessary data to enable these integrations. Your use of third-party services is governed by their respective privacy policies.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.

We may disclose your information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

We may share your information for other purposes with your explicit consent.

Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest (AES-256)
  • Secure data centers with physical access controls
  • Regular security assessments and vulnerability testing
  • Role-based access controls and multi-factor authentication
  • Employee security training and background checks
  • Incident response procedures and breach notification protocols

While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

Data Retention

We retain your information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on:

  • Account Data: Retained for the duration of your account plus a reasonable period for backup and compliance purposes.
  • Financial Records: Retained in accordance with applicable tax and accounting regulations (typically 7 years).
  • Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics purposes.

Upon termination of your account, we will delete or anonymize your personal information within a reasonable timeframe, except where retention is required by law or for legitimate business purposes.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements.
  • Portability: Request a machine-readable copy of your data.
  • Opt-Out: Unsubscribe from marketing communications at any time.
  • Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, please contact us using the information provided in Section 14. We will respond to your request within the timeframe required by applicable law.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights:

  • Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt-Out of Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: You may limit our use of sensitive personal information to purposes necessary to provide the Services.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a request, please contact us at privacy@dphs.com or call (978) 888-6300. We may verify your identity before processing your request.

Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws provide you with certain rights:

  • Consent: We collect, use, and disclose your personal information with your knowledge and consent, except where permitted or required by law.
  • Access and Correction: You may request access to your personal information and challenge its accuracy.
  • Withdrawal of Consent: You may withdraw consent at any time, subject to legal or contractual restrictions.

To exercise your rights under PIPEDA, please contact our Privacy Officer using the information in Section 14.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. Types of cookies we use include:

  • Essential Cookies: Required for the operation of our Services, including authentication and security.
  • Functional Cookies: Remember your preferences and settings to enhance functionality.
  • Analytics Cookies: Help us understand how visitors interact with our website and Services.
  • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

Third-Party Services and Integrations

Our Services integrate with numerous third-party systems, including property management systems, banks, payment processors, and other hospitality technology platforms. When you enable these integrations:

  • Data is exchanged between our Services and the third-party platform as necessary for the integration to function.
  • The third party’s privacy policy governs their collection and use of your data.
  • We encourage you to review the privacy policies of any third-party services you connect to our platform.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.

Children’s Privacy

Our Services are designed for business use and are not intended for children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us immediately.

International Data Transfers

Our Services are hosted in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

We implement appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally, including standard contractual clauses and other legally recognized transfer mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this policy
  • Notify you via email or through a prominent notice on our website
  • Obtain your consent where required by applicable law

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Plus, Inc.

Attn: Privacy Officer

03 Autumn Ridge Road
Ayer, Massachusetts 01432

Email: privacy@dphs.com

Phone: (978) 888-6300

Website: www.dphs.com

For California residents: You may also submit privacy requests via our website or by calling the number above.

Acknowledgment

By using our Services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described above.