Last Updated: October 15, 2026
Information We Collect
We collect information you provide directly (name, email, phone, location, photos) and automatically (usage data, device information, cookies). We also collect SMS consent status, consent timestamps, and phone numbers for users who opt in to receive text message notifications. Appointment booking data including service history, scheduling preferences, and rebooking intervals is collected to improve our services.
If you allow usage analytics, we also record an approximate location for your visit: city, state and country only, never a precise point.
- It is derived from your IP address by our own server, which sends that address to a lookup service (ipapi.co).
- Your browser does not contact that service.
- We do not store your IP address.
Usage Analytics and Your Consent
ChairLook's analytics are first-party: they are stored in our own database, in Google Cloud Firestore. We do not use Google Analytics or any other third-party analytics or advertising tracker.
We record usage only if you choose Accept on the cookie banner, or turn on Usage analytics in your account settings.
- If you choose Decline, or have not chosen yet, nothing is recorded: no page visits, no profile views, no searches.
- You can change your choice at any time, in account settings or through the Cookie preferences link at the bottom of every page.
- The same choice applies in the ChairLook iOS and Android apps.
When analytics are on, we record:
- the pages you visit;
- the professionals' profiles you view and contact;
- the profiles you see in search results, with the service or category you searched for (not what you typed);
- your approximate location (city and state) and basic device information.
What Professionals Can See
Professionals on ChairLook can see aggregate information about their own profile: how many views, contacts and search appearances it had, and the cities and states those visits came from.
- They cannot see who you are.
- Where you were signed in, they see only a pseudonymous code that is different for every professional. It cannot be traced back to you or matched between professionals.
If you joined ChairLook through a partner's referral link, the partner does not see your details, such as your email, device or location. ChairLook records your city, state and country with the referral to check its eligibility, and never a precise location.
How We Use Your Information
- To provide and improve our services
- To facilitate connections between service providers and clients
- To process payments and subscriptions
- To send service-related communications including SMS notifications
- To analyze platform usage and trends, when you have allowed usage analytics
- To send appointment confirmations, reminders, and status updates
Data Sharing
We do not sell your personal information. We share data only as necessary to provide services (the processors listed below), comply with law, or with your consent. Professionals see only the aggregate, pseudonymous information described above.
Your Rights
You have rights to access, correct, delete, and export your data. You may withdraw SMS consent at any time by replying STOP to any message, updating your notification preferences, or contacting support. Contact us to exercise these rights.
Security
We use industry-standard security measures to protect your data, though no method is 100% secure.
Third-Party Services
We use the following third-party services, which may process your data:
- Google Cloud / Firebase: authentication, database, file storage, hosting, and server functions. Firebase Hosting is delivered through a content delivery network operated by Fastly, which handles every page request. Our analytics are first-party, stored in this database.
- Google reCAPTCHA (via Firebase App Check): confirms that requests come from our real app or site, on every page.
- Google Maps Platform: maps, location search and address autocomplete. Maps load on profile pages that show the business's location, and when you search by location or enter an address.
- Google Fonts: the site's typeface, on every page.
- Google Cloud Vision: automated content moderation of uploaded photos.
- Stripe: payment processing and subscription management, and payouts to professionals and partners. Stripe's script, and the Stripe services it contacts to prevent fraud, load only when you start a payment.
- SendGrid: email notifications.
- Twilio: SMS notifications, including appointment confirmations, reminders and booking status updates. Phone numbers are shared with Twilio solely for message delivery.
- ipapi.co: turns an IP address into an approximate city, state and country. Our server calls it only for visitors who have allowed analytics, or who arrive through a partner referral. Your browser never contacts it.
- jsDelivr and cdnjs (Cloudflare): deliver open-source software libraries (charts, QR codes, photo cropping) when you use the features that need them.
- Firebase Cloud Messaging (Google): push notifications, only if you turn them on. Your browser's own push service (run by Google for Chrome, Apple for Safari, or Mozilla for Firefox) delivers them to your device.
SMS Communications & TCPA Compliance
ChairLook sends transactional SMS messages to users who have explicitly opted in. Consent is collected through a separate, unchecked checkbox during account registration and appointment booking, or when you turn on the Enable SMS Notifications switch in your account settings. Consent records including timestamp, phone number, and opt-in method are stored for compliance purposes.
You may opt out of SMS communications by:
- Replying STOP to any message
- Disabling SMS in your notification preferences
- Contacting support at support@ChairLook.com
We honor all opt-out requests immediately. We do not send SMS marketing messages without separate explicit consent. Standard message and data rates from your carrier may apply.
Your Rights (GDPR Compliance)
You have the right to:
- Access: Request a copy of your data using the "Export Your Data" button in account settings
- Rectification: Update or correct your information through your profile settings
- Erasure: Request deletion of your account and all associated data. This includes the record of your own activity: your visits and your views, contacts and search appearances at every professional's profile.
- Data Portability: Export your data in machine-readable JSON format. Your export includes your own activity on ChairLook: the professionals whose profiles you viewed or contacted, and when, and your visits.
- Object: Opt-out of certain data processing activities
- Withdraw Consent: Revoke cookie consent or SMS consent at any time: for analytics, in account settings or through the Cookie preferences link on every page.
Data Retention
- Account data: Retained while your account is active
- Messages: Retained for 2 years from last activity
- Analytics about a professional's profile (views, contacts and search appearances): deleted after 18 months
- Site usage analytics (page visits and sign-up steps): deleted after 13 months
- Notifications: deleted after 90 days
- Deleted accounts: Permanently removed within 30 days
- Backup data: May persist in backups for up to 90 days
- SMS consent records: Retained for the lifetime of your account plus 4 years after deletion for TCPA compliance purposes
Cookies & Tracking
We use cookies and similar browser storage for:
- Essential: Authentication and security (required)
- Preference: Remember your settings (optional), including your analytics choice
- Analytics: Understand platform usage (optional, requires consent). Without your consent, no analytics are recorded at all.
You can manage your choice through the banner that appears on your first visit, the Cookie preferences link at the bottom of every page, or the Usage analytics setting in your account.
International Data Transfers
Your data may be transferred to and processed in countries outside your own. We ensure appropriate safeguards are in place to protect your data in accordance with GDPR and other applicable regulations.
Children's Privacy
ChairLook is not for anyone under 16. If you are 16 or 17, you may use ChairLook only with a parent's or guardian's consent. When you sign up, you confirm that you are 18 or older, or 16–17 with that consent. We do not ask for or store your date of birth or age; we store only that you confirmed this, and when.
We do not knowingly collect personal information from anyone under 16. If we learn that an account belongs to someone under 16, we delete the account and its data. If you believe a child under 16 has an account, please contact us at privacy@ChairLook.com.
Contact & Data Protection Officer
For privacy questions, data requests, or to exercise your rights:
Email: privacy@ChairLook.com
We will respond to all requests within 30 days.
Social Media
Add your social media links to help clients find and connect with you online. These links can be displayed on your public profile.