Who this covers
This policy covers dpms.ca (the marketing site), the Direct PMS application, and the live demo. It applies to visitors, applicants, property managers using the product, and the owners, tenants and guests their organisations manage inside it.
What we collect
- Application & contact forms — company name, work email, portfolio size, business lines, and anything you write in a message (/register, /contact, /demo).
- Account data — name, email and role for anyone signed in to the product (staff, owners, tenants, guests with portal access).
- Product data you enter — properties, tenancies, bookings, ledger entries and everything else your organisation records to run its business. This is your data; we process it on your behalf.
- Usage analytics — page views and interactions via Google Analytics 4 and Ahrefs Analytics, and attribution data (UTM parameters, referrer, landing page) captured on lead forms.
- Payment data — if you enable guest card payments or owner payment methods, card details are handled directly by Stripe; we never see or store full card numbers.
Why we collect it
- To review applications and set up your organisation.
- To run the product: store your portfolio's data, generate statements, process bookings and payments you initiate.
- To respond to support and sales enquiries.
- To understand which pages and channels bring visitors to the site, so we can improve it.
- To meet legal, tax and accounting obligations.
Who we share it with
We don't sell personal information. We share it with the service providers that make the product work, each acting on our instructions:
- Supabase — database and authentication (hosted in the US).
- Vercel — application hosting and edge delivery.
- Resend — transactional email delivery (application notifications, magic links).
- Stripe — payment processing for guest bookings and owner payment methods.
- Google Analytics 4 and Ahrefs — website analytics.
We disclose information if required by law, or to protect the rights, safety or property of Direct PMS, our customers, or others.
Cookies and tracking
dpms.ca uses cookies and similar technology for session authentication (keeping you signed in) and analytics (Google Analytics 4, Ahrefs). We don't use third-party advertising cookies. Visitors in Quebec and the EU can decline non-essential analytics cookies; contact us to opt out at any time.
Data location and security
Product data is stored with Supabase in US-hosted infrastructure and encrypted in transit (TLS) and at rest. Access is restricted to authenticated staff and the organisation the data belongs to, enforced at the database level (row-level security).
Retention
We keep account and product data for as long as your organisation's account is active, and for a reasonable period after closure to meet legal and accounting obligations. Rejected applications and demo signups are kept for a limited period for lead-quality purposes, then deleted.
Your rights
Under Canadian privacy law (PIPEDA) and, for Quebec residents, Law 25, you can ask to access, correct or delete the personal information we hold about you, or withdraw consent for non-essential processing like analytics. Email support@dpms.ca and we'll respond within a reasonable time.
Changes to this policy
We'll update the date at the top of this page when this policy changes, and post material changes on our changelog.
Contact
Direct PM Systems Inc. · 100 University Ave, 5th Floor, Toronto, ON M5J 2Y1, Canada
support@dpms.ca · +1 (778) 726-5686