Privacy Policy

1. Introduction

Chambazo, a service operated by AAA Incubator LLC ("Chambazo", "we", "our", or "us"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights when you use Chambazo at chambazo.com.

2. What We Collect

We collect the following categories of information:

• Account information: Email address, name, and hashed password.
• Profile information (workers): Skills, availability, bio, profile photo, hourly rate, and location.
• Profile information (employers): Company name, industry, logo, and billing address.
• Gig and booking data: Gig details posted by employers, swipe decisions, booking confirmations, and gig outcomes.
• Ratings and reviews: Star ratings and comments submitted after completed gigs.
• Payment data: Payout account details (processed by Stripe — we store only your payout status, not your bank account number). Billing information for employers (processed by Stripe — we store only charge amounts and subscription status).
• Identity verification: If you complete ID verification, this is processed by our third-party verification partner. We receive only the result (pass/fail) and a reference ID.
• Usage analytics: Events such as gig views, swipe actions, session timestamps, and feature interactions.
• Marketing attribution: When you first arrive, we record how you found us — campaign tags in the link you clicked (UTM parameters), the website that referred you (e.g. a social platform), and the first page you landed on. We use this first-party data only to understand which channels bring people to Chambazo and to improve our own marketing. We do not sell it.
• Device and technical data: IP address, browser and device type, operating system, app version, device identifiers, and diagnostic and crash logs — collected automatically when you use Chambazo to keep the service secure and working.
• Approximate location: The city or area you enter, and an approximate location derived from your IP address, used to match local gigs and workers. We collect precise GPS only at clock-in for a confirmed booking, and only with your device permission.
• Cookies and similar technologies: We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and measure how the service is used. You can control cookies through your browser; some features may not work without them.

3. How We Use Your Information

• Matching: To surface relevant gigs to workers and relevant workers to employers based on skills, availability, and location.
• Bookings and payouts: To process confirmed bookings, route payments, and manage worker payouts via Stripe.
• Notifications: To send booking confirmations, reminders, and relevant platform updates.
• Trust and safety: To verify identities, investigate disputes, and enforce our Terms of Service.
• Analytics and product improvement: Aggregated, anonymized usage data helps us improve platform features.
• Marketing and growth: To understand which channels and campaigns bring people to Chambazo, measure their effectiveness, and reach similar audiences with our own advertising and communications. We may target our marketing by general factors such as city, category, or how you found us — never by sensitive characteristics, and we do not sell your personal information.
• Personalization: To tailor the gigs, workers, content, and recommendations you see based on your activity, location, and stated preferences.
• Research and business operations: To analyze trends, develop new features, prevent fraud, and operate and protect our business. Where we can, we use aggregated or de-identified data for these purposes.

We rely on the lawful bases described below (your consent, performance of our contract with you, and our legitimate interest in operating, improving, securing, and marketing Chambazo). You can opt out of non-essential analytics and marketing at any time — see “Your Choices” below.

4. Data Shared in a Booking

When a booking is confirmed, both parties receive limited contact information necessary to complete the gig:

• Employers see: Worker name, profile photo, rating, and contact information necessary to coordinate the gig.
• Workers see: Employer name, company, gig location, and contact details necessary to arrive for the gig.

This information may only be used for the purpose of the confirmed gig and must not be shared with third parties or used for solicitation outside the platform.

5. We Do Not Sell Your Data

Chambazo does not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Data Retention

We keep different categories of data for different periods:

• Wallet & payment ledger (earnings, tips, payouts, credits, refunds): retained for approximately 7 years for accounting, tax reporting (e.g. 1099), and legal record-keeping. These records are kept even after account deletion, as anonymized financial entries no longer linked to your profile.
• Booking history: retained while your account is active and for a legal record-keeping period afterward.
• Support tickets & messages: retained for the support and dispute lifecycle of the request, then purged.
• Product analytics events: when you delete your account, the link between these events and your profile is removed (the events are anonymized), so activity telemetry can no longer be traced back to you.
• Profile & account data: deleted or anonymized within 30 days of account deletion.

When you delete your account (Settings → Delete Account), we remove your login and cascade-delete or anonymize your associated data. Anonymized financial records are retained only as long as the law requires.

7. Third-Party Service Providers

We share limited data with the following providers to operate the service:

• Supabase: Database, authentication, and file storage. Data is stored on Supabase-managed infrastructure in the US. (Supabase Privacy Policy)
• Stripe: Payment processing for employer billing and worker payouts via Stripe Express. Stripe handles all payment details securely. (Stripe Privacy Policy)
• Expo: Push-notification delivery (Expo Push plus Apple and Google push services). We store device push tokens to send the alerts you've enabled. (Expo Privacy Policy)

8. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). Initiate from Settings > Danger Zone.
• Portability: Request a machine-readable export of your data.
• Opt-out of analytics: Contact us to opt out of non-essential analytics tracking.

To exercise any of these rights, email privacy@chambazo.com. We will respond within 30 days.

California residents will not be discriminated against for exercising these rights. EU/UK residents may also lodge a complaint with their local data-protection authority. Our legal bases for processing include performing our contract with you, your consent, and our legitimate interest in operating and securing the platform.

9. Data Security

We use industry-standard security measures including HTTPS, hashed passwords, and row-level database security. No transmission method is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Chambazo is not directed at anyone under 18. We do not knowingly collect data from minors. If we discover we have such data, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email and in-app notice. Continued use after the effective date constitutes acceptance.

12. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@chambazo.com or by mail at AAA Incubator LLC (Chambazo), 616 Desoto Ave, Lehigh Acres, FL 33972.