CHS Operations / Privacy Policy
Privacy Policy
For the internal dashboard used by CHS staff.
This policy explains what information CHS Operations collects, why, where it is kept, who can see it, and how to have it deleted.
Who we are
CHS Operations is run by Corporate Hospitality Services, LLC (“CHS”, “we”, “us”), a workforce lodging company based in Irving, Texas.
Corporate Hospitality Services, LLC125 E John W Carpenter Fwy, Suite 1050
Irving, TX 75062, United States
Privacy questions: [email protected]
What CHS Operations is
CHS Operations is our internal operations dashboard. CHS staff use it to run day-to-day work, and the marketing team uses it to manage the company’s own social media pages, Google Business listings, reviews, website analytics and advertising accounts in one place.
It is not offered to the public. Only CHS staff with an account can sign in. It only connects to accounts that CHS owns or manages, and it never acts on anyone else’s accounts.
Information we access from connected platforms
When an authorised CHS staff member connects one of our company accounts, the dashboard reads the following, and only for that account:
Google Business Profile
Our business listings: listing details, posts, customer reviews of our locations and our replies, and performance statistics such as views, searches, calls and direction requests.
YouTube (YouTube Data API and YouTube Analytics API)
Our company channel: channel and video details, comments on our videos, and viewing statistics such as views, watch time and subscribers.
Google Analytics (Google Analytics Data API)
Traffic reports for our own websites: visits, pages viewed, traffic sources and conversions. These are aggregate reports; they do not identify individual visitors.
Google Ads (Google Ads API)
Our own advertising accounts: campaign settings, budgets and performance figures such as impressions, clicks, cost and conversions.
Facebook and Instagram (Meta Pages API and Instagram Graph API)
Our own Facebook Pages and Instagram business accounts: page and profile details, our posts, comments on our posts and our replies, reviews or recommendations on our Pages, and page and post insights.
LinkedIn (Community Management API)
Our own company page: page details, our posts, comments on our posts, and page and post statistics such as followers, impressions and engagement.
Comments and reviews on our pages and listings are written by members of the public. When we read them we see what the platform shows to any page owner: the person’s public name or username, their profile picture, what they wrote and when. We do not collect anything else about them.
How we use it
- To see and answer reviews and comments on our own listings and pages.
- To publish and schedule posts on our own pages, where the platform allows it.
- To report on how our pages, listings, websites and ads are performing, for our own marketing decisions.
We use this information only to run CHS’s own marketing. We do not use it for any other purpose.
Where it is stored and who can see it
Information is stored in our database, hosted by Supabase in the United States (US East). The dashboard’s web pages are hosted by Netlify. These companies host the service for us and do not use our data for their own purposes.
Only signed-in CHS staff can see it, and only what their role allows. Access is set per person and per role, so platform data is visible to the marketing team and company leadership, not to every employee. Information is encrypted in transit and at rest.
The access permissions a platform grants us (its access tokens) are stored securely and are used only to fetch data for the account they belong to.
How long we keep it
- Platform data is kept while the account stays connected and for as long as we need it for our own reporting.
- When an account is disconnected, or its access is revoked, we delete its access tokens straight away and the rest of the data from that account within 30 days.
- Staff information is kept while the person works for CHS, and afterwards only as long as we need it for business records or the law requires.
What we never do
- We never sell information from this tool.
- We never share it with advertisers, data brokers or information resellers.
- We never use it to target or retarget advertising at individual people.
- We never use it to build profiles of the people who comment on or review our pages.
- We never use it to develop, improve or train general artificial intelligence or machine learning models.
We share information only with the service providers that host the tool for us, or if the law requires it.
Google user data
CHS Operations’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
CHS Operations uses YouTube API Services. By using the YouTube features of CHS Operations you agree to be bound by the YouTube Terms of Service. Google’s handling of your information is described in the Google Privacy Policy.
You can remove CHS Operations’ access to a Google account at any time from your Google account’s security settings: security.google.com/settings/security/permissions. When access is removed, we stop collecting data from that account and delete what we hold from it as described above.
Data deletion
Asking us to delete your data
Email [email protected] with the subject “Data deletion request”, and tell us which account or page it concerns (for example, the Facebook Page or Instagram account name). You do not need a CHS account to ask.
We will delete the information we hold from that account: page and profile details, posts, comments, reviews, statistics and the stored access tokens. We will do this within 30 days and email you to confirm when it is done.
If you are a member of the public who commented on or reviewed one of our pages, you can ask us the same way to delete our copy of your comment or review. The original stays on the platform; to remove that, delete it there.
Removing the app’s access yourself
- Facebook: go to Settings & privacy, then Settings, then Business integrations (or Apps and websites). Find CHS Operations and select Remove.
- Instagram: in Settings, open Apps and websites, find CHS Operations and select Remove.
- LinkedIn: go to Settings, then Data privacy, then Permitted services. Find CHS Operations and select Remove.
- Google and YouTube: use security.google.com/settings/security/permissions.
Removing access stops all further collection. To have what we already hold deleted, email us as described above.
Staff information in the dashboard
For the people who use it, the dashboard also holds the information needed to run the business day to day, for example:
- Name, work email, job title, department and role.
- Work contact details and emergency contacts entered by HR or the employee.
- Tasks, comments, messages, files and photos shared at work.
- Forms completed in the dashboard, including signatures.
- Work schedules, shifts, time-off requests and certifications.
- Notification settings for the devices where the person has turned notifications on.
This information is used only to run CHS and is visible only to the people whose role requires it.
Other information on the dashboard
The dashboard also shows enquiries sent through the contact and quote forms on our website (the details the person typed, such as name, company, phone, email and message), visible only to the named staff who follow them up. It also shows scan counts for our printed QR codes, which contain no names or contact details.
Children
CHS Operations is a workplace tool. It is not meant for children and we do not knowingly collect information from anyone under 18.
Changes to this policy
If we change this policy, we will post the new version on this page and update the effective date at the top.
Contact
Questions, requests or concerns about privacy: [email protected], or write to us at the address above.