Privacy Policy

1. Introduction

Chow Chaser, operated by Concierge Labs LLC ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our restaurant search and discovery service.

2. Information We Collect

Information You Provide

• Search queries and restaurant preferences
• Location information (addresses you search for)
• Feedback or communications you send to us

Information We Automatically Collect

• Usage Data: Pages visited, search queries, click patterns, time spent on pages
• Device Information: Device type (mobile, tablet, desktop), browser type, operating system
• Location Data: Approximate location based on IP address for localized search results
• Network Information: IP address, referring website, session identifiers
• Analytics Data: User interactions, search result clicks, reservation link clicks

Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to enhance your experience, remember your preferences, and analyze usage patterns.

3. How We Use Your Information

• Provide Services: Process search requests, display restaurant results, facilitate reservations
• Improve Services: Analyze usage patterns, optimize search algorithms, enhance user experience
• Personalization: Provide location-relevant results and recommendations
• Analytics: Understand user behavior, measure service performance, identify trends
• Security: Monitor for fraudulent activity and protect against abuse
• Legal Compliance: Comply with applicable laws and regulations

4. Information Sharing and Disclosure

Third-Party Service Providers

We may share information with:

• Google Maps: Location data for geocoding and map services
• SerpApi: Search queries for restaurant data retrieval
• Reservation Platforms: OpenTable, Resy, Tock, etc. when you make reservations
• Analytics Providers: Aggregated usage data for service improvement
• Cloud Infrastructure: Vercel, Supabase for hosting and data storage

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5. Data Retention

• Search Logs: Retained for up to 2 years for service improvement
• Analytics Data: Aggregated data retained indefinitely
• Session Data: Temporary session identifiers expire after 24 hours
• Cache Data: Search results cached for up to 1 hour

6. Your Rights and Choices

General Rights

• Access: Request information about data we collect about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information
• Opt-Out: Opt out of certain data collection practices
• Portability: Request your data in a machine-readable format
• Restriction: Request we limit processing of your data

Cookie Management

• Manage cookies via our cookie consent banner
• Disable cookies through your browser settings
• Use private/incognito browsing mode
• Clear local storage and cookies

GDPR Rights (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right to withdraw consent at any time
• Right to object to processing based on legitimate interests
• Right to lodge a complaint with your local data protection authority
• Right to not be subject to automated decision-making

Legal Basis: We process your data based on consent (cookies), legitimate interests (service improvement), or legal obligations.

California Privacy Rights (CCPA/CPRA)

California residents have rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the sale/sharing of personal information (we do not sell your data)
• Right to Non-Discrimination: Equal service regardless of privacy choices
• Right to Correct: Request correction of inaccurate information
• Right to Limit Use: Limit use of sensitive personal information

Connecticut Privacy Rights (CTDPA)

Connecticut residents have rights under the Connecticut Data Privacy Act, including rights to access, correct, delete, and obtain a copy of personal data, as well as to opt out of targeted advertising and sales.

How to Exercise Your Rights

Or email us directly at hello@conciergelabs.ai with:

• Your specific request (access, deletion, correction, etc.)
• Information to help identify your data (approximate dates of use, location)
• Proof of identity (we may request verification for security)

We will respond within 30 days (45 days for complex requests) or as required by applicable law.

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Secure cloud infrastructure

8. International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

9. Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Third-Party Links

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date and, where appropriate, providing additional notice.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

For GDPR inquiries: EU residents may also contact our Data Protection Officer at the above email.