Privacy Policy

plus one (“plus one”, “we”, “us”) provides physical access-control software that lets members of a workspace unlock doors and lets administrators manage access. This policy explains what information we collect, how we use it, and the choices you have. It applies to our mobile apps and web application.

• Account information — your name and email address, and the workspace or organization you belong to.
• Authentication credentials — a password you set, used only to sign you in. Passwords are handled through a secure authentication provider and are stored in hashed, encrypted form; we never store your password in plain text and cannot read it.
• Access activity — records of door-access events associated with your account, such as which door was opened and when, kept for security and audit purposes.
• Technical information — basic device and usage data (for example app version and error diagnostics) needed to operate and secure the service.

• To authenticate you and keep your account secure.
• To grant and manage your access to doors within your organization.
• To maintain security and audit logs of access events.
• To provide support and to operate, maintain, and improve the service.

We do not sell your personal information, and we do not use it for advertising.

Information is encrypted in transit and at rest. Authentication is handled by a reputable third-party identity provider, and access to personal data is restricted to authorized personnel and to the administrators of your organization. We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse.

• Your organization — administrators of your workspace can see your account details and access activity in order to manage access.
• Service providers — trusted vendors (such as hosting and authentication providers) who process data on our behalf under confidentiality obligations.
• Legal reasons — where required to comply with applicable law or to protect the rights, safety, and security of users and the service.

We retain your information for as long as your account is active or as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. Access-event logs may be retained for a limited period for security and audit purposes.

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us or the administrator of your organization. We will respond in accordance with applicable law.

The service is intended for use by adults in a workplace setting and is not directed to children. We do not knowingly collect personal information from children.

We may update this policy from time to time. When we do, we will revise the “last updated” date above. Material changes will be communicated through the service where appropriate.

If you have questions about this policy or your information, contact us at support@speer.io.