Privacy Policy

ChairUp LLC ("we," "us," "our," "ChairUp," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services (the "Platform").

ChairUp is an online marketplace that connects licensed barbers, cosmetologists, nail technicians, estheticians and other licensed beauty and grooming professionals ("Professionals") with barbershops, salons and studios that list available chairs or stations for rent ("Shops"). This Privacy Policy applies to both Professionals and Shops, and we note where our practices differ depending on your role. Payments on the Platform are processed by Stripe, Inc. ("Stripe"); Section 4 explains how payment information is handled.

Please read this policy carefully. If you do not agree with our policies and practices, please do not use our Platform.

A. Information Needed to Use the Platform

All User Accounts:

• Name, email address, phone number
• Profile photo
• Role (Professional, Shop Owner)

Professional Profiles:

• Years of experience, specialties
• Bio, location, service rates
• Professional license number, issuing state, and status

Shop Profiles:

• Shop name, address, phone
• Shop photos
• Owner name and contact information
• Number of chairs, amenities, rates

Payment Information:

• Payment card details, which you provide directly to Stripe when you save a payment method; ChairUp never receives or stores your full card number or CVV and retains only a secure payment token and non-sensitive metadata (such as card brand and last four digits)
• Billing address
• Transaction history and records, including authorization holds, captures, fees, cancellation and no-show charges, refunds, and Shop payouts
• If you are a Shop: payout and identity verification information (such as bank account details and identity documents), which you provide directly to Stripe when completing Stripe Connect onboarding; this information is collected and held by Stripe subject to the Stripe Privacy Policy

B. Information You May Choose to Provide

You can choose to provide additional information, including:

• Video portfolio content you upload to showcase your work
• Instagram and other social media handles (optional)
• Messages sent through the Platform (text, photos, videos)
• Interview questions and video answers
• Information about others: if content you upload (such as a portfolio or interview video) shows other people — for example, a client whose haircut you are showcasing — you are responsible for obtaining that person's permission before uploading it

C. Information Collected Automatically

• IP address and device information
• Browser type and operating system
• Pages visited and time spent
• Referring/exit pages
• Cookie identifiers
• Location data (approximate, from IP address)
• Check-in and geolocation information: if you are a Professional, your device's precise location, captured once at the moment you check in for a confirmed booking (subject to your device permissions), as evidence of your arrival (see Section 4). We do not track your location continuously or in the background, and check-in does not fail solely because location is unavailable
• Check-in records: the date, time, and the Shop's in-app confirmation that the Professional arrived
• Signing location: when you electronically sign the payment authorization during onboarding, we record your device's location at the time of signing as part of the authorization record (subject to your device permissions).

D. Information from Third Parties

• License Verification: We verify professional licenses through the applicable state licensing authority or its public license-lookup systems. We may provide this information to Shops, and your professional license status may be visible to Shops.
• Payment Processing: Stripe collects and processes payment information and provides us with transaction status, fraud-screening signals (including through Stripe Radar), and dispute and chargeback information.
• Identity and Background Screening: where we elect to conduct the identity or background screening described in our Terms of Service, we may receive identity-verification information and background information — including public records of criminal convictions or sex offender registrations — from screening providers, third-party databases, or public records sources.

We use collected information to:

• Operate the Platform: Create and manage your account, facilitate connections between Professionals and Shops
• Facilitate Transactions: Process authorization holds, payments, fees, refunds, and Shop payouts for chair rentals (see Section 4) and any paid subscriptions
• Verify Credentials: Confirm Professionals' licenses are active and valid
• Communications: Send transactional emails, service updates, and promotional content (you can opt out anytime)
• Safety & Compliance: Prevent fraud, enforce our Terms of Service, comply with legal obligations
• Automated Message Screening: Use automated tools to scan messages sent through the Platform for indications of off-platform payment arrangements and other violations of our Terms of Service; flagged messages are logged and may be reviewed by ChairUp administrators
• Fraud Prevention & Chargebacks: Screen transactions for fraud, maintain records of payment disputes and chargebacks associated with accounts (and limit accounts with repeated chargebacks), and use check-in records, check-in geolocation, booking and Terms acceptance records, and related Platform communications as evidence to resolve payment disputes and defend chargebacks
• Dispute Resolution: Administer the Platform's dispute process between Professionals and Shops
• Analytics & Improvement: Understand how users interact with the Platform to improve features and user experience

All payments on the Platform are processed by Stripe through Stripe Connect. ChairUp does not hold, store, or control user funds at any point: funds are collected, held, and moved within Stripe's payment system, and rent is transferred to the Shop's connected Stripe account. Payment card details and Shop payout details are provided directly to Stripe and are subject to the Stripe Privacy Policy.

In accordance with our Terms of Service, your personal information may be used as follows in the booking and payment flow:

• Authorization: when a Shop accepts a booking, ChairUp instructs Stripe to place two authorization holds on the Professional's payment method.
• Check-in and capture: When a Professional arrives at a Shop, the Shop confirms arrival and ChairUp records the Professional's geolocation, as evidence only.
• Payouts: as a Shop, before receiving payouts, you must complete Stripe Connect onboarding, including providing your bank account to Stripe and completing their identity verification process.
• Chargebacks and payment disputes: if a payment is disputed, we may provide Stripe, card networks, and issuing banks with evidence relating to the transaction, including check-in confirmations, check-in geolocation, booking and Terms acceptance records, and relevant Platform communications.

A. Other Users on the Platform

Your public profile information is visible to:

• Professionals, who can see Shop profiles (name, location, rates, amenities, photos)
• Shops, who can see Professional profiles (name, experience, specialties, license status, video portfolio, ratings)

Private information shared only after mutual interest:

• Phone number (when applying/interviewing)
• Email (for direct communication)
• Video interview responses (shared only with the relevant shop)

You can edit optional profile details at any time. Information required for the Platform to function — such as your name, license verification status (for Professionals), and listing details (for Shops) — is visible as described above whenever your profile is visible. Profile visibility also depends on your verification status as described in our Terms of Service.

Booking and dispute information: the other party to your booking can see relevant transaction information, such as booking status, check-in confirmation, and applicable fees. If a payment or other dispute is opened, the evidence described in Section 4 may be reviewed by ChairUp administrators and disclosed as needed to resolve it.

B. Service Providers

We share information with third parties who provide services on our behalf:

• Stripe: Payment processing
• Postmark: Email delivery
• Supabase: Cloud hosting and database services
• Lovable: Application hosting services
• Claude (Anthropic): AI features supporting Platform operations; your personal information is not used to train third-party AI models
• Google Analytics: Website and application reports

These providers are contractually obligated to use your information only to provide services to us and are bound by confidentiality agreements.

C. Legal Requirements

We may disclose your information if required by law, court order, or government request. Where appropriate and legally permitted, we may notify you of such requests.

D. Business Transfers

If ChairUp is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

A. Access & Portability

You have the right to request a copy of all personal information we hold about you. Contact us at contact@chairup.io.

B. Correction

You can update or correct your profile information directly in your account settings.

C. Deletion

You can request deletion of your account and associated data. We will initiate the process to delete your profile and personal information within 30 days of receiving a request to delete your account and associated data. As provided in Section 7 of this Privacy Policy:

• We will retain your account data for 90 days after your account is deactivated. After that we will permanently and irretrievably purge it;
• Your payment records, communications, and messages will be retained as described in Section 7 of this Privacy Policy; video portfolios are deleted when your account is deleted and are not retained during the 90-day period; and
• We may retain certain aspects or elements of your data where required to by applicable law.

D. Marketing Communications

You can opt out of promotional emails anytime by clicking "Unsubscribe" in any email or updating your preferences in account settings. Transactional emails cannot be opted out of while your account is active.

We retain personal information for as long as needed for the purposes for which it was collected, consistent with applicable law. In general:

• Account Data: retained while your account is active. Your account is active until you delete it, we terminate it under our Terms of Service, or it is deactivated after an extended period of inactivity (12 or more months without logging in). Once your account is no longer active, we may retain your data for 90 days before it is permanently and irretrievably purged
• Payment Records: transaction records are retained for 7 years (US tax/legal compliance); payment card data is held within Stripe under Stripe's own retention policies
• Check-In & Geolocation Records: check-in confirmations and check-in geolocation are retained for 24 months following the rental transaction to support payment-dispute resolution and chargeback defense, after which they are deleted
• Communications/Messages: retained for the duration of the rental relationship plus 2 years
• Video Portfolios: deleted when your account is deleted; they are not retained during the 90-day purge period

Professionals: You can delete your profile anytime, which removes your public visibility. Messages you exchanged with Shops remain visible to those Shops until deleted under the schedule above.

We implement administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication using hashed credentials
• Role-based access controls (only admins can access verification data)
• Secure payment processing through PCI-DSS-compliant Stripe

However, no security system is impenetrable. We cannot guarantee absolute security. You are responsible for keeping your password confidential.

We use cookies to:

• Remember login information
• Track user preferences
• Analyze Platform usage

You can control cookies through your browser settings. Disabling cookies may affect Platform functionality.

We do not use cookies for tracking across third-party websites or behavioral advertising.

We do not sell personal information or share it for cross-context behavioral advertising, so there is no sale or sharing to opt out of via "Do Not Track" or Global Privacy Control signals.

ChairUp is not directed to users under 18. We do not knowingly collect information from children under 18. If we learn we've collected information from a minor, we will delete it immediately. If you believe we have collected information from a child, contact contact@chairup.io.

The Platform may contain links to third-party websites (Instagram, Facebook, shop websites). We are not responsible for the privacy practices of external sites. Please review their privacy policies before sharing information.

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the following rights regarding your personal information:

• Right to Know and Access: you may request the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom it is shared.
• Right to Delete: you may request deletion of your personal information, subject to legal exceptions (such as records we must keep for tax, legal, or dispute-resolution purposes, as described in Section 7).
• Right to Correct: you may request correction of inaccurate personal information, or update most information directly in your account settings.
• Right to Opt Out of Sale or Sharing: we do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the preceding 12 months.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, email contact@chairup.io. We will verify your identity before responding and will respond within the timeframes required by law. You may designate an authorized agent to make a request on your behalf; we will require proof of authorization and verification of your identity.

If you access ChairUp from outside the United States, you acknowledge that your information will be transferred to and processed in the United States. US data protection laws may differ from your home country's laws.

We may update this Privacy Policy periodically. We will notify you of material changes by email or posting a prominent notice on the Platform. Your continued use after changes constitutes acceptance of the updated policy.

For privacy questions, data requests, or to exercise your rights:

ChairUp Privacy Team

• Email: contact@chairup.io
• Mailing Address: ChairUp LLC, 31 NE 17th Street, Miami, FL 33132

We will respond to inquiries within 30 days.