Privacy Policy

DVC Points Plus ("we," "us," or "our") is an independent web application that helps Disney Vacation Club members manage their memberships. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at dvc-points-plus.com (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

• Account registration: email address, display name, and password (password is hashed — we never store it in plain text).
• Contract data: DVC contract details you enter, including resort name, use year, point allocations, and point balances. This data is stored exclusively for your personal use and is never shared or sold.
• Payment information: the Service is free. If you choose to leave an optional tip, payment is handled entirely by Stripe — your card details go directly to Stripe, and we never see or store your card number.

• Authentication tokens and session cookies, used solely to keep you logged in.
• If you accept our cookie consent banner: product analytics (pages visited, features used, button clicks) and session replay (a reconstruction of on-page activity — clicks, scrolling, typing patterns, not a video) through our analytics provider, to help us understand how the Service is used and improve it. Sensitive input fields are masked before recording. This is entirely optional — see Section 6.
• Browser theme preference, stored in your browser's localStorage.

• To create and maintain your account.
• To provide, operate, and improve the Service.
• To process optional tips via Stripe.
• To send account-related emails (e.g., email verification, password reset) and alerts you turn on.
• To occasionally email you important updates about the Service. Every such email includes an unsubscribe link, and we never sell your email address.
• To display your DVC contract and points data back to you — this data is used for no other purpose.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your data is stored in a secure, access-controlled cloud database. Database-level security policies ensure each user can only access their own data.

We implement reasonable administrative and technical safeguards to protect your information. However, no internet transmission or electronic storage is 100% secure. We encourage you to use a strong, unique password.

Your data is stored in the United States. By using the Service, you consent to this transfer.

We use a small number of trusted service providers to run the Service, such as cloud hosting, database and sign-in, email delivery, optional analytics, the AI assistant, and bot protection. They process data only on our behalf to provide those functions and may not use it for their own purposes.

• Stripe processes optional tips. Your payment details go directly to Stripe and are never seen or stored by DVC Points Plus. Stripe Privacy Policy
• AI assistant: your personal contract and points data is only sent to our AI provider when you, the logged-in user, ask the assistant a question that needs it (e.g. "can I afford this trip"). It is never sent automatically.

We are not responsible for the privacy practices of these third parties.

We use session cookies necessary to authenticate you and keep you logged in — these are always active and required for the Service to function.

We also use an optional analytics tool for product analytics and session replay (a reconstruction of on-page clicks, scrolling, and typing — not a video — with sensitive input fields automatically masked), to understand how visitors use features like the Purchase Planner and improve the Service. This is never active by default — a cookie consent banner appears on your first visit, and no analytics cookie is set and no analytics data is collected until you click "Accept." Clicking "Reject" keeps analytics off entirely; you can change your mind at any time by clearing your cookies to see the banner again.

Your browser's theme preference is stored in localStorage, which is not transmitted to our servers.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your account and all associated data.
• Export your contract data (available as CSV for Member subscribers).

To exercise these rights, contact us at hello@dvc-points-plus.com. We will respond within 30 days.

If you are in the European Economic Area, you also have rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except as required by law (e.g., billing records may be retained for tax purposes).

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

Questions about this Privacy Policy? Contact us at:

Email: hello@dvc-points-plus.com
Service: DVC Points Plus (dvc-points-plus.com)