Privacy Policy

2. Information we collect

2.1 Information you provide

• Account details. Name, email address, phone number, postal address, and profile photo when you create an account or accept an invitation.
• Profile and company details. For service professionals: business name, industry, service areas, team members, schedule availability, and any public profile content you publish.
• Service and messaging content. Details of service requests, scheduling notes, attachments, and messages exchanged in Chaz chat channels.
• Payment information. We do not store full card numbers. Payment details are collected and processed by Stripe, Inc. We retain identifiers (e.g. payment intent IDs, last four digits, brand) for accounting and dispute handling.

2.2 Information we collect automatically

• Device and usage data. IP address, device model, OS version, app version, crash reports, and performance metrics (collected via Sentry to diagnose errors).
• Location. When you grant permission on mobile, we use coarse or precise location to match customers with nearby professionals, show service areas on a map, or record a job location. You can revoke this at any time in your device settings.
• Push notification tokens. When you enable notifications we receive a token from Apple or Google (via Expo) so we can deliver chat and job updates.
• Cookies and similar. Session cookies and local storage to keep you signed in and remember your preferences.

2.3 Information from third parties

If you sign in with an OAuth provider or are invited to a company, we receive basic profile information (name, email, profile image) from that source.

3. How we use information

• Provide, operate, and maintain the Services.
• Match customers with service professionals and facilitate bookings, scheduling, messaging, and payments.
• Send transactional notifications by in-app message, push, SMS, or email (e.g. a new message, a payment request, a scheduled visit reminder).
• Improve the Services — debug crashes, diagnose performance issues, and develop new features.
• Detect, prevent, and respond to fraud, security incidents, and abuse.
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your chat content to train general-purpose AI models.

4. How we share information

We share personal information only in these circumstances:

• With other Chaz users when necessary to fulfil a service request — for example, sharing your contact details with the professional you hire, or sharing a customer's address with a scheduled helper.
• With service providers who operate parts of the Services on our behalf under confidentiality and data protection obligations:
  • Stripe, Inc. — payment processing
  • Amazon Web Services — hosting and storage
  • Sentry — crash and performance monitoring
  • Expo (EAS) — push notification delivery
  • Twilio — SMS delivery for customer payment links
  • Anthropic — optional AI-assisted features in chat (only when explicitly invoked)
• For legal reasons — to comply with subpoenas, court orders, or other legal processes, or to protect our rights or the safety of users.
• In a business transfer — as part of a merger, acquisition, or sale of assets, with notice to you where required by law.

5. Data retention

We keep personal information only as long as necessary to provide the Services, meet legal and accounting obligations, and resolve disputes. You may request deletion of your account at any time (see Section 7). Some records (e.g. invoices, payment logs) may be retained for up to seven years to satisfy U.S. tax and accounting rules.

6. Security

We use industry-standard safeguards including TLS in transit, encryption at rest for database backups, OAuth2 with PKCE for authentication, scoped API tokens, and strict access controls on production systems. No system is perfectly secure; if we become aware of a breach that affects you we will notify you as required by applicable law.

7. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict processing, and to withdraw consent. You can exercise most of these rights inside the app:

• Update your profile in Settings.
• Delete your account from Settings → Privacy → Delete Account or by emailing privacy@chazcanhelp.com.
• Revoke location or notification permissions in your device settings.
• Unsubscribe from marketing email via the footer link.

California residents have additional rights under the CCPA / CPRA (right to know, right to delete, right to opt out of sale or share — Chaz does not sell or share for cross-context behavioral advertising). Residents of the EEA and UK have rights under the GDPR / UK GDPR.

8. Children

Chaz is not directed to children under 16 and we do not knowingly collect information from them. If you believe a child has provided us with personal information, contact privacy@chazcanhelp.com and we will delete it.

9. International transfers

Chaz is based in the United States. If you use the Services from outside the U.S., your information will be processed in the U.S. subject to U.S. law. We take appropriate safeguards for any cross-border transfers where required.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, give you prominent notice in the app or by email before the changes take effect.

11. Contact

Questions, requests, or complaints? Email privacy@chazcanhelp.com or write to: