Privacy Policy

Effective Date: January 15, 2026
Last Updated: February 28, 2026

======== --- layout: layouts/legal.njk pageTitle: Privacy Policy description: "ChairSense Privacy Policy. Learn how we collect, use, and protect your personal information including phone numbers, appointment data, and SMS consent records." effectiveDate: January 15, 2026 lastUpdated: March 19, 2026 permalink: /legal/privacy-policy/ --- >>>>>>>> dd35543 (Rebuild site with Eleventy + Tailwind, add compliance gap fixes and signup CTAs):src/legal/privacy-policy.njk

ChairSense is a product of Alloy Digital Systems LLC, a Rhode Island limited liability company ("we", "us", or "our"). ChairSense operates a scheduling and communication platform that helps salons and barbershops manage appointments and send transactional SMS messages and, where separately consented to, promotional messages to their clients. This Privacy Policy explains how we collect, use, and protect your personal information.

Information We Collect

We may collect the following types of personal information:

Contact information: Name, phone number (stored in E.164 format), and email address provided when you book an appointment or create an account.
Appointment data: Appointment dates, times, services requested, provider preferences, and scheduling history.
SMS consent records: Whether you have opted in or out of receiving SMS messages, the method and timestamp of your consent (booking form, client portal, or inbound keyword), opt-out events, and the associated salon.
SMS message logs: A record of SMS messages sent to and received from your phone number, including message direction, timestamps, and delivery status. This is maintained for compliance and audit purposes.
Device and usage data: Browser type, IP address, and pages visited when you use our client portal, collected automatically for security and service improvement.
Instagram account data: When you connect an Instagram Business account, ChairSense accesses and stores the authorization token required to publish content on your behalf. We may also access basic profile information (account name and ID) required by the Instagram API. Authorization tokens are refreshed automatically before their 60-day expiry and are permanently deleted when you disconnect your Instagram account. Instagram data is used solely for the purpose of publishing content on your behalf — it is not used for advertising, sold to third parties, or used to train AI or machine learning models. This access is governed by Meta’s Platform Terms.

How We Use Your Information

We use the information we collect to:

Send appointment confirmations, reminders, and schedule updates via SMS.
Respond to customer care inquiries.
Authenticate your access to the client portal (e.g., via one-time password).
Maintain and improve our services.
Comply with legal obligations.
Publish content (posts, captions, images) to connected Instagram accounts on behalf of salon operators who have enabled the Instagram integration.

We do not send unsolicited communications. SMS messages are limited to transactional, customer care, and marketing purposes (for clients who have separately opted in to marketing messages) as described in our SMS Compliance Policy.

SMS Service Provider

We use Sinch as our SMS service provider to deliver text messages on our behalf. When we send you an SMS message, your phone number and message content are transmitted through Sinch's platform. Sinch processes this data in accordance with their own privacy policy. We share only the minimum information necessary to deliver your messages.

All inbound SMS requests are validated using cryptographic request signature verification to prevent unauthorized or spoofed messages from being processed.

Data Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

Service providers: With trusted third-party providers who assist us in operating our platform, subject to confidentiality obligations. Named sub-processors include:
- Sinch — SMS message delivery (see SMS Service Provider section above).
- Stripe — Payment processing for salon subscriptions and client deposits. Billing information necessary to process payments is transmitted to Stripe. ChairSense does not store payment card numbers; all card data is processed directly by Stripe under PCI-compliant handling. Stripe’s use of your data is governed by Stripe’s Privacy Policy.
Salon or barbershop: With the business where you booked your appointment, as necessary to fulfill the appointment and provide customer care.
Legal requirements: When required by law, court order, or governmental regulation.
Meta (Instagram): When you use the Instagram integration, content and authorization tokens are transmitted through Meta’s Instagram API. This data is governed by Meta’s Privacy Policy and Platform Terms. We do not use Instagram data for advertising targeting or to train AI models, and we do not sell or transfer Instagram data to third parties except as required to operate the integration.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, or as required by law. SMS consent records and message logs are retained for compliance and audit purposes for the duration of your relationship with the salon, plus any legally required retention period. When your data is no longer needed, we will securely delete or anonymize it.

Your Rights

You have the right to:

Request access to the personal information we hold about you.
Request correction of inaccurate information.
Request deletion of your personal information, subject to legal retention requirements.
Opt out of SMS messages at any time by replying STOP or contacting us.

To exercise any of these rights, please contact us at support@chairsense.online.

Data Breach Notification

In the event of a data breach that compromises your personal information, we will notify affected individuals and relevant authorities in accordance with applicable state and federal laws. We will provide notification as promptly as practicable, including a description of the incident, the types of information involved, and steps you can take to protect yourself.

State Privacy Rights

Depending on your state of residence, you may have additional privacy rights under state law, including but not limited to:

California (CCPA/CPRA): California residents may have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), and other states: Residents of states with comprehensive privacy laws may have rights to access, correct, delete, and port their personal data, as well as the right to opt out of certain processing activities.

To exercise any state-specific privacy rights, please contact us at support@chairsense.online. We will respond to verified requests within the timeframe required by applicable law.

Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

<<<<<<<< HEAD:htdocs/privacy/index.html

Instagram and Meta Platform Data

ChairSense integrates with the Instagram Graph API (provided by Meta Platforms, Inc.) to enable salon and barbershop owners to publish content, manage comments, and access account insights for their Instagram Business profiles. This section explains how we handle data obtained through this integration.

Data We Access via Instagram

When you connect your Instagram Business account to ChairSense, we may access:

Basic profile information: Instagram username, account ID, profile picture, and biography.
Content data: Posts, stories, and media you publish or schedule through ChairSense.
Comments and messages:strong> Comments on your posts and direct messages, solely to enable management and response features.
Insights and analytics: Engagement metrics (likes, reach, impressions) for content published through ChairSense.

How We Use Instagram Data

We use data accessed via the Instagram Graph API solely to provide ChairSense features, including:

Scheduling and publishing Instagram posts and stories on your behalf.
Displaying engagement analytics within your ChairSense dashboard.
Enabling you to view and respond to comments.

We do not sell Instagram data. We do not use Instagram data for advertising, profiling, or any purpose unrelated to the ChairSense service you have requested.

Data Retention — Instagram

Instagram data is retained only as long as your account is connected and active. When you disconnect your Instagram account from ChairSense or delete your account, we will delete all associated Instagram data within 30 days.

Deauthorization and Data Deletion

You may revoke ChairSense’s access to your Instagram account at any time through your Instagram account settings (Settings → Apps and Websites). Upon deauthorization, we will cease accessing your Instagram data and delete it within 30 days.

You may also submit a data deletion request at any time by contacting us at support@chairsense.onlinea>. We will confirm receipt and complete deletion within 30 days.

Meta Platform Terms

Our use of the Instagram Graph API is governed by the Meta Platform Termsa> and Meta Developer Policiesa>. We comply with all applicable Meta data use policies.

========

Cookies and Tracking Technologies

Our marketing website (www.chairsense.online) does not use third-party analytics tools, advertising pixels, or tracking technologies. No data is shared with advertising networks based on your visit to our marketing pages.

The ChairSense client portal may use session cookies strictly for authentication purposes (e.g., to maintain your login session). These cookies are not used for tracking or advertising.

>>>>>>>> dd35543 (Rebuild site with Eleventy + Tailwind, add compliance gap fixes and signup CTAs):src/legal/privacy-policy.njk

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date below. We encourage you to review this page periodically.

Contact Us

If you have questions about this Privacy Policy, please contact us at support@chairsense.online.