Skip to content

Privacy Policy

Last updated: August 4, 2026

1. Introduction

This Privacy Policy explains how COIN GROUP LLC ("Company," "we," "us," or "our") collects, uses, shares, and protects information through the Chamberline platform ("Service") at getchamberline.com.

Chamberline is a WhatsApp-based AI business assistant platform that serves service business vendors and their customers. This policy applies to all users of the Service, including Vendors (business owners) and Customers (end users who interact with Vendors via WhatsApp).

2. Information We Collect

Vendor Information

When a Vendor signs up for Chamberline, we collect:

  • Business name and contact information
  • Phone number
  • Facebook/Meta Business identity (via Meta Embedded Signup)
  • Stripe Connect account information
  • Service packages, pricing, and business hours
  • Instagram account information (if comment automation is enabled)

Customer Information

When a Customer interacts with a Vendor's WhatsApp Business number, we process:

  • WhatsApp phone number and display name
  • Conversation messages exchanged with the Vendor's AI assistant
  • Booking details (service type, date, time, preferences)
  • Payment information (processed by Stripe — we do not store payment card data)

Instagram Data

If a Vendor enables comment automation, we process comments on the Vendor's Instagram posts to deliver automated direct-message responses. We do not store Instagram comments beyond what is needed to trigger and deliver the response.

Analytics and Usage Data

We collect aggregated analytics including:

  • Message counts and response times
  • Booking counts and completion rates
  • Conversion metrics
  • Platform usage patterns

3. How We Use Information

We use the information we collect to:

  • Operate and deliver the Chamberline platform
  • Process customer bookings and facilitate deposit payments on behalf of Vendors
  • Generate and send AI-powered responses to customer messages
  • Send transactional WhatsApp messages (booking confirmations, reminders, expiry notices) on behalf of Vendors
  • Provide analytics and reporting to Vendors
  • Improve and develop our platform and AI capabilities
  • Communicate with Vendors about their accounts, billing, and service updates
  • Comply with legal obligations

4. How We Share Information

We do not sell personal information. We share information only as described below:

With Vendors

Customer interaction data (messages, bookings, contact info) is shared with the Vendor whose WhatsApp number the Customer contacted. Vendors may use this data in accordance with their own privacy practices.

Third-Party Service Providers

We share data with the following third-party services as necessary to operate the platform:

  • Meta Platforms, Inc. — WhatsApp Business API for message delivery, Instagram API for comment automation, and Facebook Login for Vendor authentication. Subject to WhatsApp Business Terms and Meta Privacy Policy.
  • Stripe, Inc. — Payment processing via Stripe Connect. Stripe receives payment information directly from customers. Subject to Stripe's Privacy Policy.
  • Telnyx LLC — Phone number provisioning and SMS delivery.
  • Supabase, Inc. — Cloud database hosting for platform data.
  • ManyChat — Optional TikTok comment automation (if enabled by Vendor).

Legal Requirements

We may disclose information if required by law, court order, subpoena, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Payment Information

Chamberline does not store, process, or have access to customer payment card numbers, CVVs, or full card details. All payment processing is handled by Stripe, which is PCI DSS Level 1 certified — the highest level of payment security certification.

Vendors receive payments through their Stripe Connect accounts. Chamberline facilitates the connection but does not act as a payment processor.

6. Data Retention

We retain data according to the following schedule:

  • Conversation data (WhatsApp messages) — retained for 90 days, then automatically deleted
  • Booking and transaction data — retained for 7 years for tax, legal, and compliance purposes
  • Vendor account data — retained for the duration of the Vendor's subscription and for a reasonable period afterward for legal compliance
  • Analytics data — retained in aggregated, de-identified form

When data reaches the end of its retention period, it is securely deleted or anonymized.

7. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, and secure cloud infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

All Users

You have the right to:

  • Request access to the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information, subject to legal retention requirements

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know — You may request details about the categories and specific pieces of personal information we have collected about you
  • Right to Delete — You may request that we delete personal information we have collected from you, subject to certain exceptions
  • Right to Opt-Out of Sale — We do not sell personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link
  • Right to Non-Discrimination — We will not discriminate against you for exercising your privacy rights

EEA, UK and Swiss Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation and the UK GDPR:

  • Access — Obtain confirmation of whether we process your personal data and receive a copy of it
  • Rectification — Have inaccurate or incomplete personal data corrected
  • Erasure — Request deletion of your personal data where we have no overriding lawful ground to keep it (the "right to be forgotten")
  • Restriction — Ask us to limit how we process your data while a dispute about it is resolved
  • Portability — Receive the data you provided to us in a structured, machine-readable format, or have it sent to another controller
  • Objection — Object to processing carried out on the basis of our legitimate interests
  • Withdraw consent — Withdraw consent at any time where processing is based on it, without affecting processing already carried out
  • Complain — Lodge a complaint with your national supervisory authority (in the UK, the Information Commissioner's Office)

Our legal bases. We process Vendor account and billing data to perform our contract with you; customer conversation data on behalf of the Vendor, who is the controller of that data and for whom we act as processor; and a limited set of security and service-integrity data on the basis of our legitimate interests.

International transfers. We are established in the United States and our infrastructure providers process data there. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses together with the UK International Data Transfer Addendum.

How to Exercise Your Rights

Contact us at [email protected], or follow the step-by-step instructions on our Data Deletion page if you specifically want your data erased. We may need to verify your identity before acting on a request. We respond to GDPR requests within 30 days and to CCPA requests within 45 days.

9. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at [email protected].

10. Third-Party Links and Services

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you interact with.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Vendors via email or through the platform and update the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

COIN GROUP LLC
Email: [email protected]
Website: getchamberline.com