PRIVACY POLICY
Effective August 4, 2026. This policy explains what ChamberPages Intelligence processes, why it is needed, how long it is retained, and the controls available to each organization.
Questions or requests? info@chamberpages.net
This policy covers ChamberPages Intelligence, its workspace administration portal, and its MC Trade tools for ChatGPT. Each customer controls its own workspace and decides which staff members, data permissions, and reviewed capabilities are enabled.
We process account identity data such as name, email address, authentication subject, workspace role, and invitation status; organization configuration and policy choices; MC Trade connection metadata; and the member, contact, relationship, affiliation, directory, event, registration, attendee, sponsorship, invoice, payment, recurring-billing, contact-activity, and lifecycle records needed to answer an authorized request. Reviewed actions also create compact preview, approval, idempotency, verification, and workflow records.
We use this data to authenticate users, isolate customer workspaces, connect to MC Trade, synchronize bounded indexes, answer requested questions, perform explicitly approved actions, prevent duplicate writes, monitor reliability and abuse, troubleshoot support requests, and maintain an auditable security record. We do not use one customer's data to answer another customer's question or train a shared ChamberPages model.
MC Trade credentials are verified through the secure connection workflow and stored in Azure Key Vault. Plaintext credentials are not placed in the product database, model context, audit records, or application logs. The service is not designed to collect payment-card data, health information, government identifiers, passwords, API keys, or authentication tokens through ChatGPT tool inputs.
The platform stores tenant configuration, access policy, normalized operational records and indexes, compact tool-call and usage metadata, reviewed-action state, and synchronization health. It does not store ChatGPT conversation bodies or complete raw MC Trade API responses in the product database. Tool responses return task-relevant fields and may include member or contact details when the authorized user asks for them.
Microsoft Azure provides application hosting, PostgreSQL, secrets management, backups, and operational monitoring. Auth0 provides authentication. Vercel hosts the public website and authenticated workspace portal. OpenAI provides the user-selected ChatGPT client and receives the tool inputs and responses needed for the user's request under the user's OpenAI account and applicable OpenAI terms. Authorized ChamberPages support personnel may access the minimum information necessary to resolve a verified support or security request.
Workspace identity, configuration, normalized MC Trade indexes, audit records, and reviewed-action records are retained while the workspace is active. Unused staff invitations expire after seven days. Azure operational logs are retained for 30 days. After a verified workspace-deletion request or termination, ChamberPages removes active workspace data, credentials, and access within 30 days unless a longer period is required by law or needed to resolve a security, fraud, or billing dispute. Deleted database content may remain in encrypted point-in-time backups until those backups expire; the current backup-retention window is seven days.
A workspace administrator controls staff membership, MC Trade connection rotation, data permissions, tool access, and the organization context supplied to the service. An administrator may request access, correction, export, suspension, credential revocation, or deletion by contacting support. We verify the requester and workspace authority before changing or releasing customer data.
Visit support for request details and response expectations.
The service derives tenant identity from authenticated installation and membership records rather than caller-provided tenant selectors. PostgreSQL row-level security, separate runtime identities, tenant-scoped policies, encrypted transport, managed secrets, and reviewed-write approvals protect customer boundaries. No system is perfectly secure; suspected unauthorized access should be reported immediately.
We may update this policy as the service evolves. Material changes are posted here with a new effective date and are reviewed before new data uses or subprocessors are enabled. Privacy and data requests may be sent to info@chamberpages.net.