ChairPal LogoChairPal

Privacy

Privacy Policy

Last updated: July 05, 2026

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal Data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for You to access our Service or parts of our Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.

Client means an individual who books, or seeks to book, an appointment with a Provider through the Service.

Company (referred to as either "the Company", "We", "Us" or "Our" in this Privacy Policy) refers to ChairLink LLC, 1001 Wade Ave, Suite 327, North Carolina, United States, operating the ChairPal service.

Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history on that website among its many uses.

Country refers to: North Carolina, United States.

Device means any device that can access the Service such as a computer, a cell phone or a digital tablet.

Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. We use "Personal Data" and "Personal Information" interchangeably unless a law uses a specific term.

Provider (also "Seller") means an individual or business that creates an Account to offer, manage, and accept bookings and payments through the Service.

Service refers to the Website and the related booking, payment, messaging, and communication features offered by the Company.

Service Provider means any natural or legal person who processes the data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, to provide the Service on behalf of the Company, to perform services related to the Service or to assist the Company in analyzing how the Service is used.

Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

Website refers to ChairPal, accessible from https://chairpal.com

You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Note: The Service has two kinds of users. Providers create an Account to run their booking page. Clients use a Provider's public booking page to request and pay for appointments. This Policy applies to both.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City (including a Provider's business or shop location)
  • Booking information, such as the service requested, appointment date and time, and any notes or messages You provide when booking
  • Payment and payout information processed through our payment provider (see "Payment Information" below). We do not store full payment card numbers on our own systems
  • Communications consent records, including SMS and email consent and opt-out status
  • For Providers who connect a social media account, the account identifier and access authorization needed to operate the messaging features You enable (see "Information From Social Media Messaging Automation")

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (for example, IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device's unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit Our Service or when You access the Service by or through a mobile device.

Payment Information

When a Client pays a deposit or balance, or when a Provider subscribes to a paid plan or receives payouts, payment is processed by our third-party payment processor, Stripe. Card and bank details are collected and processed directly by Stripe under its own privacy policy and security standards. We receive limited information such as the transaction amount, status, the last four digits of a card, and a payment identifier, but We do not receive or store full card numbers. For Providers who accept payouts, Stripe Connect may collect identity and banking information directly from the Provider to enable payouts and to meet legal and anti-fraud requirements.

Information From Social Media Messaging Automation

If You are a Provider and You choose to connect an Instagram account, You authorize Us, through Meta's official interfaces, to access the messaging needed to power the features You enable, such as automatically replying to inbound direct messages using the services, hours, pricing, and booking link You have set in Your Account. In operating this feature We process the content of inbound messages sent to Your connected account in order to generate a relevant reply and drive the sender to Your booking page. You can disconnect the integration at any time from Your dashboard.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track the activity on Our Service and store certain information. Tracking technologies We use include beacons, tags, and scripts to collect and track information and to improve and analyze Our Service. The technologies We use may include:

  • Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service.
  • Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

Where required by law, we use non-essential cookies (such as analytics and advertising cookies) only with Your consent. You can withdraw or change Your consent at any time using Our cookie preferences tool (if available) or through Your browser or device settings. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

We use the following categories of Cookies and similar technologies:

Necessary / Essential Cookies

Type: Session and short-lived Cookies. Administered by: Us. Purpose: These Cookies are essential to provide the Service and to keep it secure. For example, We set a security token cookie to help authenticate requests and prevent cross-site request forgery. Without these Cookies the Service cannot function properly.

Functionality Cookies and Local Storage

Type: Persistent Cookies and browser local storage. Administered by: Us. Purpose: These technologies allow Us to remember choices You make and to keep You signed in. Your login session is stored in Your browser's local storage rather than in a cookie.

Analytics Cookies

Type: Persistent Cookies. Administered by: Us and our analytics providers. Purpose: These technologies help Us understand how the Service is used so We can improve it. See "Analytics" below.

Advertising Cookies

Type: Persistent Cookies. Administered by: our advertising provider. Purpose: These technologies measure the effectiveness of our advertising and allow related remarketing. See "Behavioral Remarketing" below.

For more information about the cookies we use and Your choices, please visit our Cookie Policy at https://chairpal.com/cookie-policy

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

  • To provide and maintain our Service, including to monitor the usage of our Service.
  • To manage Your Account, including Your registration as a Provider and Your access to the features available to registered users.
  • To operate bookings and payments, including creating, confirming, canceling, and reminding about appointments, collecting deposits and balances, processing subscriptions, and enabling payouts to Providers.
  • For the performance of a contract, the development, compliance and undertaking of the purchase or booking of the products or services You have requested or of any other contract with Us through the Service.
  • To contact You by email, telephone calls, SMS, or other equivalent forms of electronic communication regarding bookings, reminders, security updates, and functional or service-related notices.
  • To send You transactional messages, such as appointment confirmations, reminders, and login codes, and, where You have opted in, marketing or promotional messages about the Service.
  • To manage Your requests, to attend and manage Your requests to Us.
  • To power features You enable, including automated responses to inbound social media messages for Providers who connect an account.
  • For analytics and improvement, to understand usage trends, measure the effectiveness of our communications and advertising, and improve the Service.
  • For security and fraud prevention, to protect the Service, our users, and the public.
  • For business transfers, to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Our assets.
  • To comply with legal obligations and enforce our terms and policies.

We may share Your Personal Data in the following situations:

  • With Service Providers: We may share Your Personal Data with Service Providers to operate, secure, monitor, and analyze the Service, to process payments, to send communications, and to power features You enable. The providers We use are listed under "Detailed Information on the Processing of Your Personal Data."
  • For business transfers: We may share or transfer Your Personal Data in connection with, or during negotiations of, any merger, sale of Company assets, financing, or acquisition of all or a portion of Our business to another company.
  • With Affiliates: We may share Your Personal Data with Our affiliates, in which case we will require those affiliates to honor this Privacy Policy.
  • In connection with a Provider's booking page: If You are a Client, the Personal Data You submit to book an appointment (such as Your name, contact details, and booking details) is shared with the Provider You are booking with, so that the Provider can fulfill and manage Your appointment. Each Provider is responsible for its own handling of that information.
  • For legal reasons: as described under "Disclosure of Your Personal Data."
  • With Your consent: We may disclose Your Personal Data for any other purpose with Your consent.

We do not sell Your Personal Data for money. Our use of advertising cookies may be considered "sharing" or a "sale" under certain state privacy laws, as explained in "Your California Privacy Rights."

Detailed Information on the Processing of Your Personal Data

The Service Providers We use may have access to Your Personal Data. These third-party vendors collect, store, use, process and transfer information about Your activity on Our Service in accordance with their Privacy Policies. Depending on configuration, not every provider below is active at all times, but We list them for transparency.

Hosting and Core Infrastructure

Payments

  • Stripe processes payments, subscriptions, and Provider payouts, including through Stripe Connect. Card and bank details are handled directly by Stripe. Privacy policy: https://stripe.com/privacy

Communications

Analytics

We use analytics tools to understand how the Service is used and to improve it.

Behavioral Remarketing

We use remarketing and advertising measurement services to advertise the Service on third-party websites and apps after You have visited our Service, and to measure the effectiveness of that advertising.

Usage, Performance and Miscellaneous

  • Google Places, operated by Google, is used to help with location and address lookup. Google Places may collect information from You and Your Device for security purposes. Privacy policy: https://policies.google.com/privacy

Social Media Messaging Automation and Artificial Intelligence

For Providers who connect an Instagram account, We use Meta's official interfaces (the Instagram messaging and Graph APIs) to receive inbound messages and send automated replies on the Provider's behalf. To generate relevant replies, the content of inbound messages, together with the Provider's own services, hours, and pricing, is processed by our artificial intelligence provider, Anthropic, which operates the AI model that drafts the reply. Anthropic processes this content to return a response and does not use data submitted through its business API to train its models. Anthropic privacy policy: https://www.anthropic.com/legal/privacy Meta privacy policy: https://www.facebook.com/privacy/policy/

SMS and Text Messaging

If You provide Your phone number and consent, We may send You text messages through our SMS provider, Telnyx.

  • Transactional messages include appointment confirmations, reminders, and login or verification codes. These are sent because they are necessary to provide the Service You requested.
  • Marketing messages are only sent where You have separately opted in, and You can opt out of them at any time.
  • Consent to receive text messages is not a condition of purchase.
  • Message frequency varies. Message and data rates may apply.
  • You can opt out at any time by replying STOP to any message, and You can reply HELP for help. You can reply START to opt back in.
  • We do not share Your mobile phone number with third parties for their own marketing purposes. We share it only with providers that help Us deliver messages, such as Telnyx and the mobile carriers.

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Where possible, We apply shorter retention periods and reduce identifiability by deleting, aggregating, or anonymizing data. Unless otherwise stated, the retention periods below are maximum periods ("up to") and We may delete or anonymize data sooner when it is no longer needed:

Account Information

  • Provider Accounts: retained for the duration of the account relationship plus up to 24 months after account closure to handle post-termination issues or resolve disputes.
  • Client booking records: retained for up to 24 months after the appointment to support the Provider relationship, resolve disputes, and meet record-keeping needs.

Payment and Financial Records

  • Transaction and payout records: retained for up to 7 years to comply with tax, accounting, and financial reporting obligations. Card and bank details themselves are retained by Stripe under its own policies, not by Us.

Communications and Consent

  • SMS and email consent and opt-out records: retained for as long as needed to honor Your choices and to demonstrate compliance with applicable communications laws.
  • Support tickets and correspondence: up to 24 months from the date of closure.

Usage Data

  • Website analytics data (cookies, IP addresses, device identifiers): up to 24 months from the date of collection.
  • Server and error logs (IP addresses, access times): up to 24 months for security monitoring and troubleshooting.

We may retain Personal Data beyond the periods stated above where: We are required by law to retain specific data (for example, financial records for tax authorities); the data is necessary to establish, exercise, or defend legal claims; You ask Us to retain specific information; or the data exists in backup systems scheduled for routine deletion.

When retention periods expire, We securely delete or anonymize Personal Data. Residual copies may remain in encrypted backups for a limited period consistent with our backup schedule and are not restored except where necessary for security, disaster recovery, or legal compliance.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. This means that this information may be transferred to, and maintained on, computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of Your jurisdiction.

Where required by applicable law, We will ensure that international transfers of Your Personal Data are subject to appropriate safeguards. The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy, and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service. You may update, amend, or delete Your information at any time by signing in to Your Account and visiting the account settings section, or by contacting Us.

Please note, however, that We may need to retain certain information when We have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (for example, a court or a government agency).

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

  • Comply with a legal obligation
  • Protect and defend the rights or property of the Company
  • Prevent or investigate possible wrongdoing in connection with the Service
  • Protect the personal safety of Users of the Service or the public
  • Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.

Your California Privacy Rights (CCPA/CPRA)

If You are a California resident, You have specific rights regarding Your Personal Information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

Categories of Personal Information We collect include: identifiers (such as name, email, phone number, IP address); customer records (such as address and payment-related information); commercial information (such as bookings and transactions); internet or network activity (such as usage and interaction data); geolocation data (such as city or general location); and inferences drawn to improve the Service. Sources include You directly, Your Device and browser, Providers (for Client bookings), and our Service Providers.

Sale or sharing. We do not sell Your Personal Information for money. However, our use of advertising cookies such as the Meta Pixel may be considered a "sale" or "sharing" for cross-context behavioral advertising under California law. We do not knowingly sell or share the Personal Information of individuals under 16.

Your rights. Subject to legal exceptions, You have the right to: know and access the Personal Information We collect; delete Your Personal Information; correct inaccurate Personal Information; opt out of the sale or sharing of Your Personal Information; limit the use of sensitive Personal Information; and not receive discriminatory treatment for exercising Your rights.

How to exercise Your rights. You can submit a request by emailing support@chairpal.com. You may also opt out of sale or sharing by emailing Us or by using an opt-out preference signal such as Global Privacy Control where supported. We will not discriminate against You for exercising any of these rights.

"Do Not Track" and Opt-Out Signals

Some browsers offer a "Do Not Track" (DNT) signal. Our Service does not currently respond to DNT signals because no common standard has been adopted. Where required, We honor recognized opt-out preference signals such as Global Privacy Control for purposes of opting out of sale or sharing.

Your Data Protection Rights

Depending on Your location, You may have rights to access, correct, update, delete, or restrict the use of Your Personal Data, and to object to certain processing. The Service is intended for users in the United States. If You access the Service from outside the United States, You understand that Your information may be processed in the United States. To exercise any right, contact Us at support@chairpal.com.

Children's Privacy

Our Service is intended for users who are 18 years of age or older and is not directed to children. We do not knowingly collect personally identifiable information from anyone under the age of 16. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 16 without verification of parental consent, We take steps to remove that information from Our servers.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top. Where appropriate, We will let You know via email or a prominent notice on Our Service prior to the change becoming effective. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, You can contact us: