Privacy Policy

1. Introduction

Chambazo, a service operated by AAA Incubator LLC ("Chambazo", "we", "our", or "us"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights when you use Chambazo at chambazo.com.

2. What We Collect

We collect the following categories of information:

• Account information: Email address, name, and hashed password, phone number, date of birth, and the location or area you enter.
• Profile information (workers): Skills, availability, bio, profile photo, hourly rate, and location.
• Profile information (employers): Company name, industry, logo, and billing address.
• Gig and booking data: Gig details posted by employers, swipe decisions, booking confirmations, and gig outcomes.
• Ratings and reviews: Star ratings and comments submitted after completed gigs.
• Payment data: Payout account details (processed by Stripe — we store only your payout status, not your bank account number). Billing information for employers (processed by Stripe — we store only charge amounts and subscription status).
• Identity verification: If you complete ID verification, this is processed by our third-party verification partner. We receive only the result (pass/fail) and a reference ID.
• Usage analytics: Events such as gig views, swipe actions, session timestamps, and feature interactions.
• Marketing attribution: When you first arrive, we record how you found us — campaign tags in the link you clicked (UTM parameters), the website that referred you (e.g. a social platform), and the first page you landed on. We use this first-party data only to understand which channels bring people to Chambazo and to improve our own marketing. We do not sell it.
• Device and technical data: IP address, browser and device type, operating system, app version, device identifiers, and diagnostic and crash logs — collected automatically when you use Chambazo to keep the service secure and working.
• Device location (optional): We read your device's location only when you tap “Use my location” while filling in the area for a gig, a Pro request, or your worker profile, and only after your phone or browser asks you and you allow it. Before we store anything, we reduce the position to a city or area name. We save that area only on the gig, request, or profile you are filling in, exactly as if you had typed it. To turn the position into an area name we send it once to the same address-lookup services we use for addresses you type; we do not send it anywhere else. We never sell it, never use it for advertising or analytics, and never read your location in the background. You can say no and type your area instead, and you can turn location off at any time in your device or browser settings.En español: Ubicación del dispositivo (opcional): Leemos la ubicación de tu dispositivo solo cuando tocas “Usar mi ubicación” al completar la zona de una chamba, una solicitud de Pro o tu perfil de trabajador, y solo después de que tu teléfono o navegador te lo pregunte y tú lo permitas. Antes de guardar nada, reducimos la posición al nombre de una ciudad o zona. Guardamos esa zona solo en la chamba, la solicitud o el perfil que estás completando, igual que si la hubieras escrito. Para convertir la posición en el nombre de una zona, la enviamos una sola vez a los mismos servicios de búsqueda de direcciones que usamos para las direcciones que escribes; no la enviamos a ningún otro lugar. Nunca la vendemos, nunca la usamos para publicidad ni análisis, y nunca leemos tu ubicación en segundo plano. Puedes decir que no y escribir tu zona, y puedes desactivar la ubicación cuando quieras en los ajustes de tu dispositivo o navegador.
• Precise location at clock-in and On My Way: We collect precise GPS only at clock-in for a confirmed booking or when you tap On My Way, and only with your device permission.
• Cookies and similar technologies: We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and measure how the service is used. You can control cookies through your browser; some features may not work without them.

3. How We Use Your Information

• Matching: To surface relevant gigs to workers and relevant workers to employers. Gig eligibility and delivery use locality and availability; skills are displayed as profile information and do not decide Gig eligibility or order. Pro results may use the customer's stated project needs and locality.
• Bookings and payouts: To process confirmed bookings, route payments, and manage worker payouts via Stripe.
• Notifications: To send booking confirmations, reminders, and relevant platform updates.
• Trust and safety: To verify identities, investigate disputes, and enforce our Terms of Service.
• Analytics and product improvement: Aggregated, anonymized usage data helps us improve platform features.
• Marketing and growth: To understand which channels and campaigns bring people to Chambazo, measure their effectiveness, and reach similar audiences with our own advertising and communications. We may target our marketing by general factors such as city, category, or how you found us — never by sensitive characteristics, and we do not sell your personal information.
• Personalization: To tailor the gigs, workers, content, and recommendations you see based on your activity, location, and stated preferences.
• Research and business operations: To analyze trends, develop new features, prevent fraud, and operate and protect our business. Where we can, we use aggregated or de-identified data for these purposes.

We rely on the lawful bases described below (your consent, performance of our contract with you, and our legitimate interest in operating, improving, securing, and marketing Chambazo). You can opt out of non-essential analytics and marketing at any time — see “Your Choices” below.

4. Data Shared in a Booking

When a booking is confirmed, both parties receive limited contact information necessary to complete the gig:

• Employers see: Worker name, profile photo, rating, and contact information necessary to coordinate the gig.
• Workers see: Employer name, company, gig location, and contact details necessary to arrive for the gig.

This information may only be used for the purpose of the confirmed gig and must not be shared with third parties or used for solicitation outside the platform.

5. We Do Not Sell Your Data

Chambazo does not sell, rent, or trade your personal information to third parties for their marketing purposes.

6. Text Messages (SMS)

Providing a mobile number, requesting or verifying a one-time sign-in code, or accepting our Terms of Service or Privacy Policy does not enroll you in recurring text messages.

How you consent. Chambazo sends recurring automated texts only after you affirmatively select the separate, unchecked text-alert choice. If you opt in, messages may include account, security, Gig, booking, payment-status, and support alerts you request or enable. Consent is optional and is not a condition of creating an account, using Chambazo, or purchasing. See the SMS Terms.

Marketing texts. We will not send you promotional or marketing text messages unless you give separate, express written consent for that purpose. You may withdraw consent at any time, by any reasonable means, including by replying STOP.

Stopping texts. Reply STOP to any Chambazo text to stop receiving them, or reply HELP for help. You can also write to support@chambazo.com. Opting out of text messages does not close your account and does not stop essential email or in-app notices about your bookings, payments, or security.

Frequency and cost. How often you hear from us depends on your activity on the platform. Message and data rates may apply. Mobile carriers are not liable for delayed or undelivered messages.

We never sell your mobile number. We do not sell, rent, or trade mobile phone numbers, and we do not share mobile numbers or text-message consent with third parties for their own marketing. We share your number only with the providers who deliver these messages for us, and only so that they can deliver them.

7. Data Retention

We keep different categories of data for different periods:

• Wallet & payment ledger (earnings, tips, payouts, credits, refunds): retained for approximately 7 years for accounting, tax reporting (e.g. 1099), and legal record-keeping. These records are kept even after account deletion, as anonymized financial entries no longer linked to your profile.
• Booking history: retained while your account is active and for a legal record-keeping period afterward.
• Support tickets & messages: retained for the support and dispute lifecycle of the request, then purged.
• Product analytics events: when you delete your account, the link between these events and your profile is removed (the events are anonymized), so activity telemetry can no longer be traced back to you.
• Profile & account data: deleted or anonymized within 30 days of account deletion.

When you delete your account (Settings → Delete Account), we remove your login and cascade-delete or anonymize your associated data. Anonymized financial records are retained only as long as the law requires.

8. Third-Party Service Providers

We share limited data with the following providers to operate the service:

• Supabase: Database, authentication, and file storage. Data is stored on Supabase-managed infrastructure in the US. (Supabase Privacy Policy)
• Stripe: Payment processing for employer billing and worker payouts via Stripe Express. Stripe handles all payment details securely. (Stripe Privacy Policy)
• Expo: Push-notification delivery (Expo Push plus Apple and Google push services). We store device push tokens to send the alerts you've enabled. (Expo Privacy Policy)

9. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). Initiate from Settings > Danger Zone.
• Portability: Request a machine-readable export of your data.
• Opt-out of analytics: Contact us to opt out of non-essential analytics tracking.

To exercise any of these rights, email privacy@chambazo.com. We will respond within 30 days.

California residents will not be discriminated against for exercising these rights. EU/UK residents may also lodge a complaint with their local data-protection authority. Our legal bases for processing include performing our contract with you, your consent, and our legitimate interest in operating and securing the platform.

10. Age Information and Younger Users

11. Data Security

We use industry-standard security measures including HTTPS, hashed passwords, and row-level database security. No transmission method is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email and in-app notice. Continued use after the effective date constitutes acceptance.

13. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@chambazo.com or by mail at AAA Incubator LLC (Chambazo), 616 Desoto Ave, Lehigh Acres, FL 33972.