Privacy Policy

Effective May 2, 2026

Who this covers

Chairfiller is a multi-tenant booking platform with two surfaces: a public booking website where clients book appointments, and an iOS app for the business owner managing those bookings. This policy covers both. Capitalized terms not defined here have the meaning given in the Terms of Service.

What we collect

From a business owner using the iOS app:

Email address and password to sign in.
Business profile fields you enter: business name, address, phone number, services offered, prices, photos, ad spend.
A sign-in session stored on your device so you stay signed in.

From a customer booking through the public website:

Name, phone number, and email address you provide at checkout.
The service, stylist, date, and time you choose.
How you found the business (a single referral question, e.g. Instagram).
Phone number and message contents for any text conversation you have with the business after booking.

We do not collect device identifiers for advertising, location data, contacts, photos, microphone recordings, health data, financial account information, government IDs, biometrics, or web browsing history outside the Chairfiller booking flow.

How we use it

To create and confirm bookings.
To send appointment reminders and let owners reply by text.
To show owners their schedule, revenue, and ad attribution.
To keep owners signed in.
To diagnose technical errors and security issues.

We do not sell your data, and we do not use it to target advertising on third-party platforms.

Where it is stored

Customer and owner data is stored on servers in the United States. Server logs are retained by our infrastructure providers for a limited period.

Who can see it

Business owners and staff on a business account can see that account's customers, bookings, services, and message history. Other businesses on Chairfiller cannot.
Chairfiller staff may access data when needed for support or incident response.
Trusted infrastructure providers who host, store, and deliver our service on our behalf, under data-processing agreements.

Text messages

When a customer books, the business may send a confirmation or reminder text from its own phone number. By booking, the customer consents to receive these messages. Reply STOP at any time to opt out. Standard message and data rates may apply.

Children

Chairfiller is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Your rights

You can:

Delete your account from inside the iOS app (Settings → Delete Account). If you are the only owner of your business on Chairfiller, this also deletes the business and all of its bookings, clients, services, and messages. This is irreversible.
Export or correct data: email support@chairfiller.io.
Request deletion of customer data on behalf of a customer: same email.

Residents of California, the EU/EEA, and the UK have additional rights under the CCPA, GDPR, and UK GDPR respectively, including the right to access, correct, delete, and port your personal data, and the right to lodge a complaint with a supervisory authority. We honor these requests at the email above.

Security

Data is encrypted in transit and at rest. Passwords are hashed; we never see them in plain text. We follow the principle of least privilege for staff access to production data.

Retention

We retain account and booking data for as long as your account is active. When you delete your account through the app, your authentication record and (if you are the only owner) your tenant data are deleted within 7 days. Server access logs are retained for up to 30 days for security investigations.

Changes

If we change this policy materially, we will update the effective date above and, for breaking changes, notify owners by email or in-app notice before the change takes effect.

Contact

Questions or requests: support@chairfiller.io.