Privacy Policy

1. Introduction

Chambazo, a service operated by CHAMBAZO LLC ("Chambazo", "we", "our", or "us"), is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights when you use Chambazo at chambazo.com.

2. What We Collect

We collect the following categories of information:

• Account information: Email address, name, and hashed password, phone number, date of birth, and the location or area you enter.
• Profile information (workers): Skills, availability, bio, profile photo, hourly rate, and location.
• Profile information (employers): Company name, industry, logo, and billing address.
• Gig and booking data: Gig details posted by employers, swipe decisions, booking confirmations, and gig outcomes.
• Ratings and reviews: Star ratings and comments submitted after completed gigs.
• Payment data: Payout account details (processed by Stripe — we store only your payout status, not your bank account number). Billing information for employers (processed by Stripe — we store only charge amounts and subscription status).
• Identity verification: If you complete ID verification, this is processed by our third-party verification partner. We receive only the result (pass/fail) and a reference ID.
• Usage analytics and visit recordings: Events such as pages viewed, gig views, swipe actions, time on a page, session timestamps, and feature interactions. On our website these are collected only if you choose Allow in our cookie banner. On our website we also record how pages are used (clicks, scrolling and page changes) so we can find screens that confuse people or break. Anything you type into a form is hidden in these recordings, and our staff console is never recorded. When you are signed in, a recording is linked to your Chambazo account ID, not to your name, email or phone number.
• Marketing attribution: When you first arrive, we record how you found us — campaign tags in the link you clicked (UTM parameters), the website that referred you (e.g. a social platform), and the first page you landed on. We use this first-party data only to understand which channels bring people to Chambazo and to improve our own marketing. We do not sell it. When you open one of our download links on an iPhone, we send you to the App Store with that campaign's name in the link; Apple tells us only how many people from each campaign viewed or downloaded the app, in totals, never who you are.
• Device and technical data: IP address, browser and device type, operating system, app version, device identifiers, and diagnostic and crash logs — collected automatically when you use Chambazo to keep the service secure and working.
• Device location (optional): We read your device's location only when you tap “Use my location” while filling in the area for a gig, a Pro request, or your worker profile (Nearby is described in the next item), and only after your phone or browser asks you and you allow it. Before we store anything, we reduce the position to a city or area name. We save that area only on the gig, request, or profile you are filling in, exactly as if you had typed it. To turn the position into an area name we send it once to the same address-lookup services we use for addresses you type; we do not send it anywhere else. We never sell it, never use these form-location readings for advertising or analytics, and never read location in the background for these forms. You can say no and type your area instead, and you can turn location off at any time in your device or browser settings.En español: Ubicación del dispositivo (opcional): Leemos la ubicación de tu dispositivo solo cuando tocas “Usar mi ubicación” al completar la zona de una chamba, una solicitud de Pro o tu perfil de trabajador (Cerca de ti se describe en el punto siguiente), y solo después de que tu teléfono o navegador te lo pregunte y tú lo permitas. Antes de guardar nada, reducimos la posición al nombre de una ciudad o zona. Guardamos esa zona solo en la chamba, la solicitud o el perfil que estás completando, igual que si la hubieras escrito. Para convertir la posición en el nombre de una zona, la enviamos una sola vez a los mismos servicios de búsqueda de direcciones que usamos para las direcciones que escribes; no la enviamos a ningún otro lugar. Nunca la vendemos ni usamos estas lecturas de los formularios para publicidad o análisis, y nunca leemos tu ubicación en segundo plano para estos formularios. Puedes decir que no y escribir tu zona, y puedes desactivar la ubicación cuando quieras en los ajustes de tu dispositivo o navegador.
• Nearby while signed in (optional): When you are signed in and open or return to Nearby, we use your current location automatically, without a tap, but only if location is already allowed for Chambazo on the phone or browser you are using. We never ask for that permission on our own: your phone or browser asks only after you tap a location button, such as “Near me.” If you already allowed location for another Chambazo feature, Nearby uses that permission too. If you say no, you can search by city or ZIP instead. To stop the automatic use, turn off “Use my location automatically in Nearby” in Nearby's settings. That choice is remembered on that phone or browser for your account (we store only that it is off, never your location) until you turn it back on, clear that browser's data or delete the app. Turning off location for Chambazo in your phone or browser settings always stops it. If getting your location is interrupted or does not work, Nearby does not try again on its own during that visit; tap “Near me” to try again. If you search for a city or ZIP, Nearby shows that area instead of your location and remembers it only inside the app until you close or reload the app or tab; an area picked from the list gives way to your location the next time you open Nearby, if automatic use is on and location is allowed. We use your location only while Nearby is on screen, to show businesses within about 10 miles, show your position on the map, and show approximate straight-line distances. Nearby does not save your location to your account, does not use it for advertising or analytics, and drops it when you leave Nearby, put the app or tab in the background, or your account changes or cannot be confirmed. The map loads images of the area on screen from the map service (OpenStreetMap on the web, your phone's built-in maps in the app); directions open your maps app with only the business's location; city and ZIP searches go to our area-lookup service without your device location. When you are signed out, or we cannot confirm your sign-in, Nearby reads your location only if you tap “Near me” or the map's location button. Browsing Nearby does not enable background location; the optional special alerts below have separate consent.En español: Cerca de ti con sesión iniciada (opcional): Cuando tienes tu sesión iniciada y abres Cerca de ti o vuelves a esa pantalla, usamos tu ubicación actual automáticamente, sin que toques nada, pero solo si la ubicación ya está permitida para Chambazo en el teléfono o navegador que usas. Nunca pedimos ese permiso por iniciativa propia: tu teléfono o navegador te lo pregunta solo después de que tocas un botón de ubicación, como “Cerca de mí”. Si ya permitiste la ubicación para otra función de Chambazo, Cerca de ti también usa ese permiso. Si dices que no, puedes buscar por ciudad o código postal. Para detener el uso automático, desactiva “Usar mi ubicación automáticamente en Cerca de ti” en los ajustes de Cerca de ti. Esa opción se recuerda en ese teléfono o navegador para tu cuenta (allí solo guardamos que está desactivada, nunca tu ubicación) hasta que la vuelvas a activar, borres los datos de ese navegador o elimines la app. Desactivar la ubicación para Chambazo en los ajustes de tu teléfono o navegador siempre detiene el uso automático. Si obtener tu ubicación se interrumpe o no funciona, Cerca de ti no vuelve a intentarlo por sí solo durante esa visita; toca “Cerca de mí” para intentarlo de nuevo. Si buscas una ciudad o código postal, Cerca de ti muestra esa zona en lugar de tu ubicación y la recuerda solo dentro de la app hasta que cierres o recargues la app o la pestaña; una zona elegida de la lista deja paso a tu ubicación la próxima vez que abras Cerca de ti, si el uso automático está activado y la ubicación está permitida. Usamos tu ubicación solo mientras Cerca de ti está en pantalla, para mostrar negocios a unas 10 millas, mostrar tu posición en el mapa y mostrar distancias aproximadas en línea recta. Cerca de ti no guarda tu ubicación en tu cuenta, no la usa para publicidad ni análisis, y la descarta cuando sales de Cerca de ti, pasas la app o la pestaña a segundo plano, o tu cuenta cambia o no se puede confirmar. El mapa carga imágenes de la zona en pantalla desde el servicio de mapas (OpenStreetMap en la web, los mapas integrados de tu teléfono en la app); las indicaciones abren tu app de mapas solo con la ubicación del negocio; las búsquedas por ciudad o código postal van a nuestro servicio de búsqueda de zonas sin la ubicación de tu dispositivo. Sin sesión iniciada, o si no podemos confirmar tu sesión, Cerca de ti lee tu ubicación solo si tocas “Cerca de mí” o el botón de ubicación del mapa. Consultar Cerca de ti no activa la ubicación en segundo plano; los avisos opcionales de especiales descritos a continuación requieren un consentimiento aparte.
• Nearby restaurant special alerts (optional): These discovery alerts are off by default and require a separate choice in the app; following a restaurant does not enable them. While you use Nearby, they use its recent location to check loaded restaurant specials within your chosen distance, up to 3,500 feet. Closed-app alerts require a second choice plus notification and background location permission. Your phone monitors up to 20 selected restaurant areas. On entry, Chambazo checks a recent device location and current public offer before deciding whether to alert. Your device position is neither saved for these alerts nor included in offer requests. Selected restaurant identifiers and public map pins are saved locally for up to two hours of eligibility and may reveal the area you visited. Opaque notification records remain eligible for deduplication and the device limit for 24 hours, including across opt-out or account changes. Expired selections and records are removed when the app next runs the relevant check; the phone may retain expired region monitoring until that cleanup runs. Public offer requests reveal the offer requested, your IP address and request time to the host and may imply proximity. Alerts are limited to three per 24 hours on this device, with the same special at most once in that period; 10 PM–8 AM quiet hours skip alerts. Restaurant announcements and other devices may still notify separately. Delivery can be delayed or prevented by phone restrictions, including force-quitting; newly published specials may be missed while you stay inside a selected area. Open Nearby to refresh selections. Turning alerts off, signing out, or changing accounts clears the selection and stops this feature's monitoring when the app can execute; the device limit record remains. You can also revoke location or notifications in phone settings.En español: Avisos de especiales de restaurantes cercanos (opcionales): Están desactivados por defecto y requieren activación aparte en la app; seguir un restaurante no los activa. Mientras usas Cerca de ti, usan su ubicación reciente para consultar los especiales cargados dentro de la distancia que elijas, hasta 3,500 pies. Los avisos con la app cerrada requieren una segunda elección y permisos de notificaciones y ubicación en segundo plano. El teléfono supervisa hasta 20 zonas de restaurantes seleccionados. Al entrar, Chambazo consulta una ubicación reciente y la oferta pública actual antes de avisar. Tu posición no se guarda para estos avisos ni se incluye en las consultas de ofertas. Los identificadores y marcadores públicos seleccionados se guardan localmente con hasta dos horas de validez y pueden revelar la zona que visitaste. Los registros opacos de avisos cuentan durante 24 horas para evitar duplicados y aplicar el límite del dispositivo, incluso si desactivas los avisos o cambias de cuenta. Las selecciones y registros vencidos se borran cuando la app vuelve a ejecutar la consulta correspondiente; el teléfono puede mantener zonas vencidas hasta esa limpieza. El servidor recibe la oferta consultada, tu dirección IP y la hora, lo que puede indicar proximidad. Hay un máximo de tres avisos cada 24 horas en este dispositivo y uno por el mismo especial en ese periodo; de 10 PM a 8 AM se omiten los avisos. Los anuncios y otros dispositivos pueden avisar por separado. El teléfono puede retrasar o impedir la entrega, especialmente si fuerzas el cierre; puedes perder especiales nuevos si permaneces dentro de la zona. Abre Cerca de ti para actualizar las selecciones. Desactivar los avisos, cerrar sesión o cambiar de cuenta borra la selección y detiene esta supervisión cuando la app puede ejecutarse; el registro del límite permanece. También puedes revocar permisos en los ajustes del teléfono.
• Precise location at clock-in and On My Way: We collect precise GPS at clock-in for a confirmed booking or when you tap On My Way, and only with your device permission. Nearby and its optional alerts use location as described above.
• Cookies and similar technologies: We and our service providers use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, and measure how the service is used. Analytics cookies are used only if you chooseAllow in our cookie banner. You can control cookies through your browser; some features may not work without them.
• Advertising measurement. When you come to our website from one of our ads, and only if you choose Allow in our ad-measurement choice, we load the measurement tag of the partner whose ad brought you: Reddit, Google, Microsoft (Bing), Meta (Facebook and Instagram), TikTok, LinkedIn or OpenAI (ChatGPT ads). When the ad was Google's, we may also load Google Analytics on that visit. These tags record that you visited, and whether you later signed up or posted a gig, using a cookie, the ad click code in the web address, your browser and device details, and your IP address. The partner uses this to tell us which ads work and to help show our ads to people like you, and may collect information about your activity over time and across other websites under its own privacy policy (Reddit, Google, Microsoft, Meta, TikTok, LinkedIn, OpenAI). We do not load these tags on sign-in, sign-up, payment, account, message or legal pages (one exception: right after you sign up, and only if you chose Allow, a short “Account created” page tells that partner you signed up, with nothing you typed); we do not send them your name, email, phone number, messages, gig details or payment information; we turn off each partner's automatic collection of button and form details where the partner allows it; and we do not use them in our iPhone app. Cox Media Group also places some of our ads, such as streaming TV ads and ads on other websites and apps. We do not load a Cox tag on our website and do not send Cox anything about your visit.

3. How We Use Your Information

• Matching: To surface relevant gigs to workers and relevant workers to employers. Gig eligibility and delivery use locality and availability; skills are displayed as profile information and do not decide Gig eligibility or order. Pro results may use the customer's stated project needs and locality.
• Bookings and payouts: To process confirmed bookings, route payments, and manage worker payouts via Stripe.
• Notifications: To send booking confirmations, reminders, and relevant platform updates.
• Trust and safety: To verify identities, investigate disputes, and enforce our Terms of Service.
• Analytics and product improvement: Usage data and visit recordings help us find broken or confusing screens and improve the platform. We review them in aggregate and, to fix a specific problem, one visit at a time.
• Marketing and growth: To understand which channels and campaigns bring people to Chambazo, measure their effectiveness, and reach similar audiences with our own advertising and communications. We may target our marketing by general factors such as city, category, or how you found us — never by sensitive characteristics, and we do not sell your personal information.
• Personalization: To tailor the gigs, workers, content, and recommendations you see based on your activity, location, and stated preferences.
• Research and business operations: To analyze trends, develop new features, prevent fraud, and operate and protect our business. Where we can, we use aggregated or de-identified data for these purposes.

We rely on the lawful bases described below (your consent, performance of our contract with you, and our legitimate interest in operating, improving, securing, and marketing Chambazo). You can opt out of non-essential analytics and marketing at any time — see “Your Choices” below.

4. Data Shared in a Booking

When a booking is confirmed, both parties receive limited contact information necessary to complete the gig:

• Employers see: Worker name, profile photo, rating, and contact information necessary to coordinate the gig.
• Workers see: Employer name, company, gig location, and contact details necessary to arrive for the gig.

This information may only be used for the purpose of the confirmed gig and must not be shared with third parties or used for solicitation outside the platform.

5. We Do Not Sell Your Data

Chambazo does not sell, rent, or trade your personal information. If you allow advertising measurement, the partner whose ad brought you (Reddit, Google, Microsoft, Meta, TikTok, LinkedIn or OpenAI) receives the limited information described under “Advertising measurement” so we can tell which ads work; you can say no, and Global Privacy Control or Do Not Track turns it off.

6. Text Messages (SMS)

Providing a mobile number, requesting or verifying a one-time sign-in code, or accepting our Terms of Service or Privacy Policy does not enroll you in recurring text messages.

How you consent. Chambazo sends recurring automated texts only after you affirmatively select the separate, unchecked text-alert choice. If you opt in, messages may include account, security, Gig, booking, payment-status, and support alerts you request or enable. Consent is optional and is not a condition of creating an account, using Chambazo, or purchasing. See the SMS Terms.

Marketing texts. We will not send you promotional or marketing text messages unless you give separate, express written consent for that purpose. You may withdraw consent at any time, by any reasonable means, including by replying STOP.

Stopping texts. Reply STOP to any Chambazo text to stop receiving them, or reply HELP for help. You can also write to support@chambazo.com. Opting out of text messages does not close your account and does not stop essential email or in-app notices about your bookings, payments, or security.

Frequency and cost. How often you hear from us depends on your activity on the platform. Message and data rates may apply. Mobile carriers are not liable for delayed or undelivered messages.

We never sell your mobile number. We do not sell, rent, or trade mobile phone numbers, and we do not share mobile numbers or text-message consent with third parties for their own marketing. We share your number only with the providers who deliver these messages for us, and only so that they can deliver them.

7. Data Retention

We keep different categories of data for different periods:

• Wallet & payment ledger (earnings, tips, payouts, credits, refunds): retained for approximately 7 years for accounting, tax reporting (e.g. 1099), and legal record-keeping. These records are kept even after account deletion, as anonymized financial entries no longer linked to your profile.
• Booking history: retained while your account is active and for a legal record-keeping period afterward.
• Support tickets & messages: retained for the support and dispute lifecycle of the request, then purged.
• Product analytics events: when you delete your account, the link between these events and your profile is removed (the events are anonymized), so activity telemetry can no longer be traced back to you.
• Profile & account data: deleted or anonymized within 30 days of account deletion.

When you delete your account (Settings → Delete Account), we remove your login and cascade-delete or anonymize your associated data. Anonymized financial records are retained only as long as the law requires.

8. Third-Party Service Providers

We share limited data with the following providers to operate the service:

• Supabase: Database, authentication, and file storage. Data is stored on Supabase-managed infrastructure in the US. (Supabase Privacy Policy)
• Stripe: Payment processing for employer billing and worker payouts via Stripe Express. Stripe handles all payment details securely. (Stripe Privacy Policy)
• Expo: Push-notification delivery (Expo Push plus Apple and Google push services). We store device push tokens to send the alerts you've enabled. (Expo Privacy Policy)
• PostHog: Product analytics and website visit recordings, stored in the United States. On our website, only if you allow analytics. (PostHog Privacy Policy)
• Vercel: Hosts our website and, if you allow analytics, counts page views without cookies. (Vercel Privacy Policy)
• Google Maps Platform: On Nearby, some business listings show a card made by Google with the business's photo and a link to Google Maps. To show that card, your browser connects to Google directly, so Google receives your IP address, basic browser details and which business the card is for. We do not send Google your name, account or location. (Google Privacy Policy)
• OpenAI: Writes a draft when you use the optional AI draft box. We send it the text you type or dictate into the box, after removing the street addresses, phone numbers, emails, links and card or ID numbers we detect. (OpenAI Privacy Policy)
• Twilio: Delivers our text messages. It receives your mobile number and the message, only so that it can deliver it. (Twilio Privacy Policy)
• Resend: Delivers the emails we send you, such as account, booking and support messages. It receives your email address and the message. (Resend Privacy Policy)
• Google Sign-In: If you choose to continue with Google, Google confirms who you are and shares your name and email address with us. (Google Privacy Policy)
• Photon (Komoot): Suggests addresses and areas as you type and finds the map point for a job address. Your browser or app sends the text you type to Photon directly, so Photon also receives your IP address. Our servers may send it a job address or area to find its map point, and the position you share with “Use my location” so we can turn it into an area name. (Komoot Privacy Policy)
• US Census Bureau geocoder: Finds the map point for a job address. Our servers send it only the job address or the job's area; it receives nothing else about you. (Census Bureau Privacy Policy)
• Sign in with Apple: If you choose to continue with Apple, Apple confirms who you are and shares your name and your email address (or a private relay address) with us. (Apple Privacy Policy)
• Reddit: Measures which of our Reddit ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (Reddit Privacy Policy)
• Google Ads: Measures which of our Google ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (Google Privacy Policy)
• Microsoft Advertising (Bing): Measures which of our Microsoft ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (Microsoft Privacy Statement)
• Meta (Facebook, Instagram): Measures which of our Facebook and Instagram ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (Meta Privacy Policy)
• TikTok: Measures which of our TikTok ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (TikTok Privacy Policy)
• LinkedIn: Measures which of our LinkedIn ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (LinkedIn Privacy Policy)
• OpenAI (ChatGPT ads): Measures which of our ChatGPT ads bring visitors, sign-ups and gig posts, on our website only and only if you allow it. (OpenAI Privacy Policy)
• Google Analytics: Counts visits, sign-ups and gig posts on our website after a click on one of our Google ads, only if you allow it, with Google signals off. (Google Privacy Policy)
• Cox Media Group: Places some of our ads, such as streaming TV ads and ads on other websites and apps. We do not load a Cox tag on our website and do not send Cox information about your visit. When you see or click one of those ads, Cox and the site or app showing it may record that under their own privacy policies.

9. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). Initiate from Settings > Danger Zone.
• Portability: Request a machine-readable export of your data.
• Analytics choices: Our website sends usage analytics only after you choose Allow in our cookie banner. ChooseDecline, or turn on Do Not Track or Global Privacy Control, and nothing is sent from that browser. To change an earlier choice, clear this site's data in your browser; you will be asked again. You can also contact us and we will opt you out.
• Advertising choices: Choose No thanks in our ad-measurement choice and we will not load advertising tags in that browser. We honour Global Privacy Control and Do Not Track: when your browser sends either signal, we do not load advertising tags and do not ask. To change an earlier choice, clear this site's data in your browser; you will be asked again. You can also manage ads at adssettings.google.com, reddit.com/settings/privacy,account.microsoft.com/privacy/ad-settings,facebook.com/adpreferences, linkedin.com/psettings/advertisingand optout.networkadvertising.org, and in the ad settings of your TikTok and ChatGPT accounts.

To exercise any of these rights, email privacy@chambazo.com. We will respond within 30 days.

California residents will not be discriminated against for exercising these rights. EU/UK residents may also lodge a complaint with their local data-protection authority. Our legal bases for processing include performing our contract with you, your consent, and our legitimate interest in operating and securing the platform.

10. Age Information and Younger Users

11. Data Security

We use industry-standard security measures including HTTPS, hashed passwords, and row-level database security. No transmission method is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email and in-app notice. Continued use after the effective date constitutes acceptance.

13. Contact

For privacy-related questions or to exercise your rights, contact us at privacy@chambazo.com or by mail at CHAMBAZO LLC, 10676 Colonial Blvd, Ste 30 PMB 1019, Fort Myers, FL 33913.