Privacy Policy

1. About this policy

Connected Processing Services, LLC ("CPS," "we," "us," or "our") provides the Connected Portal and related business services. This policy explains how we collect, use, disclose, and retain personal information in connection with those services, including Workspace and Ask CPS.

The portal is intended for authorized business users. Access to a privacy notice does not provide access to portal accounts or records. This policy does not replace applicable service agreements or describe every independent practice of banks, processors, networks, or other third parties.

2. Information we process

Depending on the services used and information provided, we process:

• Account and business-contact information, such as names, email addresses, business addresses, telephone numbers, organizations, roles, and account assignments.
• Terminal information, including terminal identifiers, business locations, operational status, assigned users, and related activity.
• Transaction, deposit, settlement, and account-reference information needed to provide reports and related services.
• Contracts, files, messages, internal notes, tasks, support communications, and other content submitted through the portal.
• Activity and audit information, including the identity of users and administrators performing actions, affected records, timestamps, and recorded changes.
• Ask CPS requests, responses, and relevant information retrieved to respond to a request.
• Technical information used to operate and protect the service, such as authentication/session information, browser or device information, and service or security logs, where collected by CPS or its hosting providers.

CPS does not store full payment-card numbers in the portal. Where card-number information is present, it is masked. Sensitive identifiers displayed by the portal are limited to masked references, such as the last four digits, where applicable. Masking a displayed field is different from deleting information or establishing what an external service stores.

Do not submit full payment-card numbers, passwords, authentication codes, or unnecessary sensitive information in messages, notes, documents, or assistant requests. Files and free-text content may contain information entered by their authors; masking of structured fields should not be assumed to redact arbitrary uploaded content.

3. Sources and purposes

We receive information from users and their organizations, authorized administrators, terminal and processing systems, and third-party service providers involved in providing processing, network, banking, and related services under applicable arrangements with CPS or its customers.

We use information to operate accounts; manage terminals and business relationships; provide transaction, settlement, and reporting functions; support communications and document sharing; respond to service requests; maintain audit records; detect misuse; troubleshoot the portal; and meet applicable legal and contractual obligations.

4. Access and disclosures

Portal access depends on applicable roles, connection relationships, assignments, and sharing permissions. Authorized organization or upstream administrators may access and manage records within their permitted scope. A user's account is not necessarily a private account separate from the business that manages it.

Files, messages, tasks, and notes have different access rules. Internal notes are intended for the authorized management audience identified for the record. Users should review the owner and audience before posting or sharing information.

Authorized CPS administrators may access records for administration, support, security, and troubleshooting. When an administrator uses the acting-as function, audit records distinguish the administrator performing the action from the user being acted as.

We disclose information as needed to hosting, storage, authentication, AI, and other service providers; to processing partners and banks for the services involved; and to recipients authorized through portal permissions. We may also disclose information when legally required or necessary to address fraud, security incidents, disputes, or protection of rights.

Some banks, networks, and processors handle information under their own agreements, obligations, and privacy notices. Their retention and processing practices may differ from CPS's.

CPS does not sell personal information or share it for cross-context behavioral advertising. CPS does not use advertising trackers in the portal. Service-related processing and authorized sharing described above are separate from advertising uses.

5. Hosting and Ask CPS

The portal uses third-party service providers for application hosting and backend services, including database, authentication, and file storage. These providers may use infrastructure providers and subprocessors to deliver their services.

Ask CPS uses third-party AI service providers. When the feature is used, the request and portal information needed to respond may be processed by those providers. Ask CPS is intended to operate within the effective user's permissions. Banking identifiers are masked before being included in model requests; system credentials, sign-in tokens, and API keys are not intended to be included.

Conversation history is stored in the portal's database. This does not mean service providers retain no information. Provider processing, operational logs, retention, and any training restrictions depend on the applicable service agreements and configuration. This policy does not promise zero provider retention.

Ask CPS responses may contain errors. Users should review source records and proposed actions before relying on an answer or confirming a change.

6. Optional voice input

Voice input uses supported browser speech-recognition capabilities and requires microphone permission. Depending on the browser, device, and configuration, audio may be processed on the device or by an external speech-recognition service under that provider's terms.

The portal's dictation feature receives the resulting text rather than recording microphone audio in CPS's database. Users can review and edit the transcript before submitting it. Submitted text is processed like other Ask CPS input. Users may type instead or revoke microphone access through browser/device settings.

7. Retention, archiving, and deletion

Removing an item from the portal's ordinary view does not necessarily erase the underlying record. The portal distinguishes between records visible in daily workflows and records retained in its database or administrative archive.

Workspace message conversations with no new messages for 30 days are moved out of ordinary views by a scheduled nightly process. Each new message restarts that period. Conversations marked for continued retention are exempt from this automatic archiving. Archived conversations remain in a read-only archive accessible to authorized System Admins; the 30-day rule does not permanently erase their contents.

Transaction details, imported transaction, deposit and terminal-status data, and import logs currently have no scheduled automatic deletion and are retained indefinitely. A screen showing only recent import history does not mean earlier records have been deleted.

Ask CPS conversations currently have no automatic expiry. Older messages may stop appearing in the conversation view while remaining stored.

Where permissions allow a user or upstream administrator to delete notes, tasks, announcements, or messages, that action removes the item from ordinary views but retains the underlying record. Those retained records currently have no scheduled automatic purge.

Banking-account change history is retained indefinitely as part of terminal audit notes and cannot be deleted through ordinary portal controls.

These statements describe current portal retention behavior, not a claim that the law requires every record to be retained forever. Requests concerning personal information are assessed under applicable law as described below. Third-party service providers and independent processing partners may have separate retention practices, and removal from portal views does not establish removal from their systems or backups.

8. Security

CPS uses access controls, authentication, permission checks, and audit functions to help protect portal information. No internet service or security measure can guarantee absolute security. Users are responsible for protecting their credentials and promptly reporting suspected unauthorized access to Support@connectedps.com.

9. Requests and choices

Contact Support@connectedps.com to ask about personal information or request access, correction, or deletion. Depending on applicable law, individuals may have additional privacy rights. We may need to verify identity and authority before responding and may coordinate with the organization responsible for the account.

Some requests may be limited by applicable legal requirements, another person's rights, or the need to preserve required records. Portal permissions alone do not determine whether an individual has a statutory privacy right. We will assess requests under applicable law.

10. Changes and contact

We may update this policy as our services and practices change. The effective date identifies the current version. Material changes will be communicated through an appropriate notice where required by applicable law.

Connected Processing Services, LLC 6211 W. Northwest Hwy. Suite C200-B Dallas, TX 75225 Email: Support@connectedps.com