Privacy Policy

1. Introduction

This Privacy Policy explains how Chofami LLC (“Chofami”, “we”, “us”) handles personal information when you visit chofami.com, create a Chofami account, submit a listing, or use a Chofami product such as Lead Recovery. It should be read together with our Terms of Service.

Chofami is a business service. Most information we handle is business contact information, account information, and the lead information a business chooses to send us for processing.

2. Information we collect

Account information

• Your email address and, if you provide one, your name.
• A password, which is stored only as a cryptographic hash — we do not store your password itself and cannot read it.
• Your organization name and your membership and role within it.
• Whether your email address has been verified, your account status, and the times your account was created and updated.
• Email-verification and password-reset tokens, which are stored only as hashes, are single use, and expire.

Business and worker configuration

If you set up Lead Recovery, we store the configuration you provide so the worker can do its job — for example your business name, industry, website, time zone, business description, services, service area, business hours, a booking link if you supply one, the email address you want notifications sent to, and preferences such as tone, language and notification thresholds. The credential used to send leads to your workspace is stored only as a hash.

Marketplace, creator and claim information

If you submit a worker for listing, we collect what the submission form asks for: your name, email address, company and website, the worker's details and description, its category and deployment information, relevant product, documentation, repository and demo links, permissions and data-handling descriptions you provide, and your rights and licence attestations with the time you made them. If you claim an existing listing, we collect your name, email address, company, role, your message and any proof you supply. Some of this information — the listing content itself — is intended to be published publicly in the marketplace.

Usage information

We record first-party marketplace signals to understand what people are looking for: an anonymous session identifier, search terms entered in the marketplace, the filters and listings interacted with, result counts, the page path and the referring page. The session identifier is a random value stored in your browser's session storage and is cleared when you close the tab; it is not linked to your account. If you ask us to notify you about a worker that does not exist yet, we also store the request text and any email address you give us for that purpose.

Technical and security information

Our servers process the IP address of requests to apply rate limits and to protect the service against abuse, and they generate operational logs. IP addresses are used for these purposes in transient server memory and short-lived security counters rather than being stored as part of your account record.

3. Information businesses provide through Lead Recovery

Lead Recovery processes information that you, our business customer, send to it about your own leads. Depending on what your form or system sends, that can include the lead's name, email address, phone number, the message or enquiry they wrote, and where the lead came from.

To do the work you asked for, the service also generates and stores information about each lead — for example an assessment of intent, the service being requested, urgency, a quality classification and score, a short summary, a recommended next action, and spam indicators — along with the email conversation exchanged with that lead and its timestamps.

This information belongs to your business. We process it to provide the service to you. You are responsible for having the right to send it to us and for meeting the obligations that apply to you as the business that collected it.

4. How we use information

• To provide, operate and maintain the Chofami service.
• To create and authenticate accounts and manage organizations.
• To run Lead Recovery — assessing inbound leads, sending the replies and follow-ups you configured, and notifying you.
• To provide customer support and respond to your messages.
• To process subscriptions and maintain your entitlement and usage records.
• To operate marketplace listing, claim and verification features.
• To prevent fraud and abuse and to keep the service secure.
• To diagnose problems and improve reliability.
• To meet legal obligations.

We do not use your account information or your lead data to train our own AI models.

5. AI processing

Lead Recovery uses an AI service to read an inbound lead, classify it, draft a reply and analyse responses. To do this, the content of the lead and the related conversation is sent to that AI provider as necessary to produce the result you asked for. We use a third-party AI provider for this and may change providers over time.

AI providers operate under their own terms and privacy practices, which govern how they handle content sent to them. We do not control those practices, and this policy does not make promises on their behalf.

6. Payments

Subscription payments are processed by Stripe. Checkout and billing management happen on Stripe's own hosted pages, so your card number and related payment details are provided directly to Stripe. Chofami does not receive or store your card number.

What we do store is the information needed to run your subscription: the identifiers Stripe assigns to your customer and subscription records, the price identifier, the subscription status Stripe reports, your current billing period dates, and your usage against the plan allowance. Stripe processes your payment information under its own privacy policy.

7. Service providers and integrations

We rely on a small number of providers to operate the service, and they receive only what they need to perform their function:

• Payments — Stripe processes subscription payments and billing.
• Email delivery — Resend sends the emails the service produces, including Lead Recovery replies and follow-ups sent on your behalf, and receives replies sent back to them.
• AI processing — an AI provider processes lead and conversation content to produce the results described above.
• Hosting and infrastructure — our servers, database and supporting infrastructure are operated on third-party hosting.

Workers in the marketplace are not all operated by Chofami. Some are run by Chofami, some by their creator, some are installed into your own account, and some run on an external platform. When you choose to use or connect one of those, information may be sent to that provider as necessary, and that provider's own privacy practices apply.

8. How information may be shared

We do not sell personal information. We share it only in these situations:

• With service providers — as described above, so they can perform their function for us.
• At your direction — including the emails Lead Recovery sends to your leads on your behalf, and any external service you connect.
• Published marketplace content — listing information intended for public display, which may include the creator or company name associated with a listing.
• Legal and safety — where reasonably necessary to comply with law or legal process, to enforce our Terms, or to investigate fraud, abuse or security issues.
• Business transfers — if Chofami is involved in a merger, acquisition, financing or sale of assets, information may transfer as part of that transaction, subject to applicable law.

9. Cookies and session technologies

Chofami uses cookies that are necessary to run the service. When you sign in, we set a session cookie so we can keep you signed in and protect your account. That cookie is HttpOnly, restricted to our own site, and sent only over HTTPS in production.

The marketplace also stores a random, anonymous session identifier in your browser's session storage for the usage signals described above. It is cleared when you close the tab.

We do not use advertising cookies, behavioural advertising networks, cross-site tracking pixels or device fingerprinting, and we do not use third-party analytics products.

10. Data retention

Marketplace usage events are deleted automatically after 90 days.

For other information — your account, your organization, your worker configuration, your leads and conversations, and your billing records — we keep it for as long as reasonably necessary to provide the service to you, to maintain legitimate business and security records, to comply with our legal obligations and to resolve disputes, subject to applicable law. Usage and billing records are kept as an accurate historical record and are not rewritten after the fact.

If you would like information deleted, contact us at support@chofami.com and we will tell you what we can delete and what we need to retain.

11. Security

We use reasonable technical and organisational measures to protect information, including encrypted connections, hashed passwords and credentials, separated authentication systems for different types of user, and access controls that keep each customer's data scoped to their own organization.

No service can promise perfect security, and we do not claim to. If you believe your account has been compromised, contact us at support@chofami.com. We will never ask you to send us a password, API key or other secret by email.

12. Your privacy choices and rights

You can review and update much of your account and worker configuration directly in the Chofami app, and you can stop automated processing at any time by pausing your worker.

Depending on where you live, applicable law may give you rights over your personal information — such as requesting access, correction or deletion, or objecting to certain processing. To make a request, email support@chofami.com. We handle requests manually; we may need to verify your identity, and we may need to retain certain information where the law allows or requires it.

If you are a lead who was contacted by a business using Lead Recovery, that business decides how your information is used. You can reply “STOP” to opt out of further automated messages, and you can contact that business directly. You may also contact us at support@chofami.com and we will help route your request.

13. Third-party services

The marketplace links to products and websites operated by other companies, and some workers run outside Chofami entirely. This policy does not cover those services. Their own privacy policies and terms apply, and we encourage you to read them before connecting or using them.

14. International processing

Chofami is a United States business. Our service providers may process and store information in the United States and in other locations where they operate. If you use the service from outside the United States, you understand that information will be processed in the United States and elsewhere, where privacy laws may differ from those in your country.

15. Children's privacy

Chofami is a business service and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact support@chofami.com and we will take appropriate steps.

16. Changes to this Privacy Policy

We may update this policy as the service changes. When we do, we will update the effective date above, and where a change is material we will give reasonable notice. Continuing to use Chofami after a change takes effect means you accept the updated policy.

17. Contact

Chofami LLC

Privacy and support: support@chofami.com
Support page: chofami.com/support
Terms: chofami.com/terms