Privacy Policy

Effective Date: 19 May 2026

Welcome to ChamberedIn! Your privacy is critically important to us. This Privacy Policy is designed to inform you about our practices regarding the collection, use, and sharing of your information when you use our services and website.

Scope of This Privacy Policy

This policy applies to information we collect through your use of ChamberedIn’s services, website, features, and any related information available through ChamberedIn (collectively referred to as the "Service"). It does not apply to information collected by third-party websites linked through the Service.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with our policies and practices, your choice is not to use our Service.

Information We Collect

We collect several types of information from and about users of our Service, including information:

  • Personally Identifiable Information (PII): This may include your name, address, email address, telephone number, and any other identifier by which you may be contacted online or offline. We collect this information directly from you when you provide it to us and automatically as you navigate through the site.
  • Non-Personally Identifiable Information: We collect non-personal identification information about Users whenever they interact with our Service. Non-personal identification information may include the browser name, the type of computer, and technical information about Users' means of connection to our Site, such as the operating system and the Internet service providers utilized, and other similar information.

How We Use Your Information

We use information collected about you or that you provide to us, including any personal information:

We may also use your information to contact you about our own and third-party goods and services that may be of interest to you.

Disclosure of Your Information

We may disclose aggregated information about our users and information that does not identify any individual without restriction.

We may disclose personal information that we collect, or you provide:

Cookies and Tracking Technologies

ChamberedIn and certain third parties use cookies, web beacons, and similar tracking technologies to operate, secure, and analyze the Service. For a complete description of the cookies we use and how to control them, see our Cookie Policy. Where required by applicable law, we obtain your consent before setting non-essential cookies. ChamberedIn does not currently respond to browser "Do Not Track" signals; you may control tracking through your browser settings and our cookie consent controls.

Third-Party Service Providers

We engage trusted third-party service providers ("Sub-Processors") to help operate the Service. These providers process personal data only under our instructions and subject to written confidentiality and security obligations. Current Sub-Processors include:

  • Amazon Web Services (AWS) — cloud hosting and infrastructure.
  • Twilio, Inc. — delivery of automated SMS messages and prerecorded voice calls.
  • Twilio SendGrid — delivery of transactional and chamber-initiated emails.
  • Stripe, Inc. — payment processing for ChamberedIn subscriptions and chamber-side member payments via Stripe Connect.
  • Google and Microsoft — authentication and infrastructure access platforms.
  • Hygraph GmbH — content management for the marketing site only (does not process customer personal data).

A complete and current list, including locations of processing and links to each provider’s privacy policy, is maintained at Sub-Processors.

Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account, we delete or de-identify personal data within ninety (90) days, except where retention is required by applicable law (e.g., tax, accounting, anti-fraud, or litigation-hold obligations), in which case we retain only the minimum data necessary for the minimum period required. Anonymized and aggregated data, which cannot reasonably be associated with you, may be retained indefinitely for analytics and product improvement.

Data Breach Notification

In the event of a confirmed personal-data breach affecting your information, we will notify you and the appropriate regulators in accordance with applicable law (including, where applicable, Utah Code § 13-44, GDPR Articles 33–34, and U.S. state breach notification statutes). Notification will be provided without undue delay and, where the breach is likely to result in a high risk to your rights and freedoms, in a manner reasonably designed to inform you of the nature of the breach, the categories of data involved, and the steps we are taking in response.

Your Rights and Choices

You have rights under data protection laws in relation to your personal data, including the right to access, correct, or delete your personal data, object to, or restrict processing of your data, and the right to data portability. The specific rights available to you, and how to exercise them, depend on where you live and the law that applies to your data.

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) provides you with the following rights:

  • Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete. You may request that we delete personal information we have collected from you, subject to legal exceptions.
  • Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
  • Right to Opt Out of Sale or Sharing. ChamberedIn does not sell your personal information and does not "share" it for cross-context behavioral advertising as those terms are defined under California law. If our practices change, we will update this Policy and provide an opt-out mechanism ("Do Not Sell or Share My Personal Information").
  • Right to Limit Use of Sensitive Personal Information. We use sensitive personal information (such as account credentials and payment data) only for the purposes permitted under CCPA without further consent.
  • Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights.

To exercise these rights, email privacy@chamberedin.com from the email address associated with your account. We will verify your identity and respond within 45 days (subject to a 45-day extension where reasonably necessary, with notice). You may designate an authorized agent to make a request on your behalf; we may require proof of authorization.

European Privacy Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation and equivalent laws: access, rectification, erasure, restriction of processing, objection to processing (including direct marketing), data portability, and withdrawal of consent at any time. You also have the right to lodge a complaint with your local supervisory authority. The legal bases on which we process personal data include performance of a contract (providing the Service), legitimate interests (security, fraud prevention, product improvement), consent (where required, such as marketing communications and SMS/voice messaging), and compliance with legal obligations. To exercise these rights, contact privacy@chamberedin.com. Customers entering into our Data Protection Addendum may exercise rights through the procedures set out in that Addendum.

How to Exercise Your Rights

To exercise any of the rights above, email privacy@chamberedin.com with: (a) the email address associated with your ChamberedIn account, (b) a description of the right you wish to exercise, and (c) any additional information reasonably necessary to verify your identity. We will respond within the timeframes required by applicable law (45 days for CCPA; one month for GDPR, subject to a two-month extension where the request is complex).

Children’s Privacy

The Service is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected personal information from a person under 18 without verifiable parental consent (where applicable), we will delete that information promptly. If you believe a minor has provided personal information to us, please contact privacy@chamberedin.com.

International Users and Data Transfers

ChamberedIn is based in the United States and processes personal data primarily in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our Sub-Processors operate. By using the Service, you consent to such transfers. Where we transfer personal data from the European Economic Area, United Kingdom, or Switzerland to a country that has not been deemed to provide an adequate level of data protection, we implement appropriate safeguards (such as Standard Contractual Clauses) consistent with applicable law.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. However, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Service.

SMS, Voice, and Text Message Communications

If you provide your mobile phone number and opt in to receive text or voice messages, ChamberedIn and the chambers of commerce you belong to may send you automated SMS messages and prerecorded voice calls related to event reminders, RSVP requests, chamber invitations, onboarding nudges, account and payment notifications, and other communications described in our SMS Messaging Program (see our Terms of Service).

Mobile phone numbers and consent data are not shared. We do not sell, rent, lease, or share your mobile phone number or your SMS/voice consent data with third parties for their own marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We may share your mobile phone number with service providers (such as Twilio, our SMS and voice delivery partner) solely to deliver the messages you have consented to receive on our behalf.

Message frequency. Message frequency varies and depends on which chambers you are a member of, the events those chambers host, and the automations each chamber has configured. Typical members receive between one and five messages per month per chamber.

Message and data rates. Message and data rates may apply. Standard carrier rates for SMS, MMS, and voice calls apply based on your wireless plan; ChamberedIn is not responsible for these charges.

How to opt out. You may opt out of SMS messages from any chamber at any time by replying STOP to any SMS you receive from that chamber. You may also revoke SMS and voice consent globally at any time by editing your communication preferences in your account settings. Replying HELP to any SMS will return assistance information. Opting out of SMS does not affect your account, your chamber membership, or your eligibility to receive non-SMS communications such as email or in-app notifications.

Changes to Our Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.

Related Policies

This Privacy Policy should be read alongside our other policies:

  • Terms of Service — the master agreement governing your use of the Service.
  • Cookie Policy — detailed information about cookies and tracking technologies.
  • Sub-Processors — the current list of third-party service providers we engage.
  • Data Protection Addendum — applicable to business customers processing personal data subject to GDPR, UK GDPR, or similar laws.

Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, contact us at: contact.us@chamberedin.com. To exercise any privacy right described above (access, deletion, correction, portability, etc.), email privacy@chamberedin.com with a description of your request and the email address associated with your ChamberedIn account. We respond to verifiable requests within 45 days (subject to a 45-day extension where reasonably necessary, as permitted by law).