Privacy Policy

Your privacy matters to us. This Privacy Policy (the "Privacy Policy") explains how we collect, use, store, and protect your information when you use our website located at https://chimney.ai/, mobile applications, tools, and conversational AI features (collectively, the "Service").

This Privacy Policy applies to all users of our Service. If you are accessing and/or using our Service for an entity, such as the company you work for, you represent that you have authority to bind that entity to this Privacy Policy, and you agree that "you", and "your", and "yourself" as used in this Privacy Policy includes both you personally and the entity you represent. If you are accessing our Service on behalf of only yourself as an individual, then you agree that "you", and "your", and "yourself" as used in this Privacy Policy includes only you personally as an individual. Unless otherwise specifically stated in this Privacy Policy, this Privacy Policy applies to third-party businesses, individual consumers, and all others that access and/or use our Service.

This Privacy Policy constitutes a legally binding agreement made between you and us. By accessing or using our Service, you represent and agree that: (i) you have read and familiarized yourself with this Privacy Policy; (ii) you understand this Privacy Policy; (iii) you agree to the practices described in this Privacy Policy; and (iv) you are legally bound by this Privacy Policy. If you do not accept and agree to all of this Privacy Policy, then you MUST NOT access and/or use our Service.

1. Information We Collect

We may collect the following types of information:

1.1 Information You Provide Directly

This includes information you choose to share during conversations or interactions, such as:

• Housing preferences and search criteria
• Budget ranges or affordability-related inputs
• Lifestyle preferences (e.g., commute needs, family considerations)
• Questions, messages, and conversational inputs
• Any other information you voluntarily provide

You are not required to provide personal identifying information to use our Service unless you choose to do so.

1.2 Automatically Collected Information

When you use our Service, we may automatically collect:

• IP address and approximate location
• Browser type, version, settings, device type, and operating system
• Usage data, such as pages visited, time spent, features used, and interaction patterns
• Cookies or similar tracking technologies for basic functionality and analytics

2. Conversational Data and User Profiles

To provide a coherent and helpful experience, the Service may:

• Maintain a conversation history
• Build a user profile based on inferred preferences and needs
• Assign confidence levels to inferred information

This information is used solely to improve the quality, relevance, and continuity of information provided to you.

Profiles are created per user and are not shared between users. These profiles are used solely for personalization and continuity of informational responses and are not used for automated decision-making that produces professional, legal, financial, or similarly significant effects.

3. How We Use Your Information

We use the collected information to:

• Provide and improve conversational information
• Personalize information responses
• Understand user needs and refine system behavior
• Monitor system performance and reliability
• Detect misuse, abuse, or technical issues
• Improve data quality, models, and user experience

We do not use your data to make automated decisions that have professional, legal, or financial effects on you.

4. AI Models and Third-Party Services

Our Service uses third-party AI models and infrastructure providers to generate informational responses.

Important notes:

• User messages may be sent to AI service providers solely for the purpose of generating informational responses
• We do not allow third parties to use your data for advertising or profiling unrelated to the Service
• We do not sell or rent user data to third parties

We take reasonable steps to work only with third-party providers that follow industry-standard security and privacy practices.

5. Cookies and Tracking Technologies

We may use cookies or similar technologies to:

• Enable basic website functionality
• Understand usage patterns
• Improve performance and reliability

You may control or disable cookies through your browser settings, though some features may not function properly as a result.

For additional information about our Cookies and Tracking Technologies, please see our Cookies Policy located at: https://chimney.ai/cookies

6. Data Storage and Security

We implement reasonable administrative, technical and organizational measures to protect your data, including:

• Access controls and restricted permissions
• Secure hosting environments
• Separation of user data from public content

However, no system, method of transmission over the internet or electronic storage can guarantee absolute 100% security. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute 100% security. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat the security and improperly collect, access, steal, or modify your data. Although we will do our best to protect your data, transmission of data to and from our Service is solely at your own risk.

By using the Service, you acknowledge and accept this risk. You should only access our Service within a secure environment.

7. Data Retention

We retain user data only as long as necessary to:

• Provide the Service
• Improve system and/or Service quality
• Meet legal or operational requirements

Conversation histories and profiles may be retained unless:

• You request deletion, subject to applicable legal retention requirements and other exceptions as prescribed by applicable law
• We reset data for testing or maintenance purposes
• Retention is no longer necessary

In most cases, conversational data is retained for a limited period, subject to ongoing Service needs, legal obligations, and user requests.

When we have no ongoing legitimate business need to retain and/or process your data, we will either delete or anonymize such data, or, if this is not possible (for example, because your data has been stored in backup archives), then we will securely store your data and isolate it from any further processing until deletion is possible.

8. Your Rights and Choices

Depending on your location and applicable laws, you may have the right to:

• Request confirmation of whether we store, use or share any of your information
• Request access to the information we have about you
• Request information about with whom your information has been shared
• Request that access to your information in a structured, commonly used, machine-readable format
• Request an update or correction of inaccurate information
• Request the deletion of your data, subject to legal retention requirements and other exceptions as prescribed by applicable law
• Request a limitation on data use

Requests can be made contact us through the through the website at https://chimney.ai/contact or by emailing us at [email protected]. We will respond within 30 days (or sooner if required by applicable law).

We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. For example, we may retain information as permitted and/or required by applicable law, such as for tax or other record keeping purposes, to maintain an active account, and to process transactions and facilitate your requests.

We will take reasonable steps to verify your identity prior to responding to your requests. The verification steps will vary depending on the sensitivity of the information and whether you have an account with us.

You can also designate an authorized agent to make a request on your behalf. If you use an authorized agent, please include written permission that you have designated that agent to make the request, or proof of the agent’s power of attorney. We may follow up with you to verify your identity before processing your authorized agent’s request.

If you are a resident of certain jurisdictions, then please see your additional rights listed in the corresponding sections below:

8.1 Privacy Rights of Canada Residents

This section applies only to Canada residents. Individuals located in Canada have certain rights pursuant to Canadian Privacy Laws. By using our Service or otherwise submitting information to us in connection with the Service, we rely on your consent to collect, use and share your personal information as set out in this Privacy Policy, unless otherwise permitted under applicable laws. In some cases, your consent may be "implied", meaning that your agreement is assumed based on your action or inaction at the point of collection, use or sharing of your personal information. Where we rely on your consent to process your personal information, you have a right to withdraw your consent at any time by contacting us, except in limited circumstances, including but not limited to legal or regulatory requirements or as a result of our contractual obligations with you. If you choose not to provide us with certain personal information or if you withdraw your consent, where such withdrawal is available, we may not be able to provide you with the Service or the information that you requested.

Subject to certain exceptions and limitations, and depending upon the province and/or jurisdiction where you reside, such rights may include:

• The right to withdraw your consent to the collection, use or disclosure of your personal information.
• The right to be informed of the existence, use, and disclosure of your personal information, and to be provided with an account of the use that has been made or is being made of this information as well as the third parties to which it has been disclosed (including a list of organizations to which your information may have disclosed).
• The right to challenge the accuracy and completeness of your personal information, and have it amended, updated or rectified as appropriate.
• The right to acquire information about our policies and practices with respect to personal information, including: a description of the type of personal information held by us and a general account of its use; a copy of any brochures or other information that explain our policies, standards, or codes; and information about what personal information is shared with or accessible to our affiliates.
• The right to challenge our compliance with the applicable Canadian Privacy Laws.

If you believe that your personal information is inaccurate, incomplete or no longer up to date, or wish to access such information, you may send us a written request by contacting us through the through the website at https://chimney.ai/contact or by emailing us at [email protected]. We will respond to your request within a reasonable time, in compliance with applicable laws. To exercise your Canadian privacy rights noted in this section and/or to request to review, update, or delete your personal information, please contact us through the through the website at https://chimney.ai/contact or by emailing us at [email protected].

The Office of the Privacy Commissioner of Canada oversees the privacy laws and regulations for Canada advises individuals to file an objection or challenge with the relevant company before lodging a formal complaint with the Office of the Privacy Commissioner of Canada. If you are dissatisfied with our response to an objection or challenge filed, or you if wish to file a complaint with a regulatory authority first, you may file a complaint with the Office of the Privacy Commissioner of Canada. Depending upon the province where you live, you may also (or instead) have the right to file a complaint with the applicable provincial privacy commissioner/regulator.

8.2 Rights for Other Jurisdictions

If you are located in another jurisdiction that is not specifically discussed in this Privacy Policy, you may have rights, under applicable data privacy laws, to request information about or access to your personal information that we maintain, to require that inaccurate information be corrected or, in some circumstances, to object to our processing of your personal information.

To exercise any rights you may have in another jurisdiction, please contact us through the website at httpschimney.ai/contact or by emailing us at [email protected].

9. Information Sharing and Disclosure

We may share your information in the following circumstances:

9.1 With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

9.2 Service Providers: We share information with the third-party service providers who assist us in operating our Services. All third-party service providers are contractually obligated to protect your data.

9.3 Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal processes, such as subpoenas, court orders, or government investigations.

9.4 Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

10. Categories of Information Collected, Disclosed or Sold in the Past 12 Months

The table below provides disclosure of the categories of information we have collected in the past 12 months, starting from the Last Updated date of this Privacy Policy:

11. Children’s Privacy

You represent to us that you are over 18 years of age and are lawfully able to enter into contracts in the jurisdiction where you are a citizen. This Service is not intended for use by individuals under the age of 18 or who are not lawfully able to enter into contracts in the jurisdiction where you are a citizen. If you under 18 years of age and/or are not lawfully able to enter into contracts in the jurisdiction where you are a citizen are a minor according to applicable laws, then you must not use the Service.

We do not knowingly collect, solicit personal information from or market to minors according to applicable local laws. If we learn that personal information from a user who is a minor according to applicable local law has been collected, we will deactivate the account (if there is an account made) and we will take reasonable measures to promptly delete such personal information from our records. If you believe or become aware that we have collected personal information from or we have marketed to someone who is a minor according to applicable local laws, please contact us immediately through the website at https://chimney.ai/contact or by emailing us at [email protected].

12. International Users

Our infrastructure and/or third-party service providers may store, transfer and/or process data in Canada or other jurisdictions. As such, your information and data may be transferred to and processed in Canada and other countries where our infrastructure and/or third-party service providers operate.

When we transfer data internationally, we implement appropriate safeguards (when applicable) including but not limited to:

• Data Processing Agreements with all third-party service providers
• Encryption and security measures during transfer

By using the Service, you consent to the storing, transfer and/or processing of your information to these locations, which may have data protection laws that differ from those in your country of residence.

13. Links to Other Websites, Products, Services

This Privacy Policy applies only to our Service and not to any third-party products, services, sites, apps, applications, resources, advertisements, content or hosted services you may find or access through our Service ("Third Party Content"). If you submit any information or data or access any of the Third Party Content, your data and information will be governed by those third-party’s privacy policies and terms of use. We encourage you to carefully read the terms of service and privacy policy of any site and/or app you visit or hosted service you use.

We may use third-party advertising companies to serve ads when you visit our Service. These companies may use aggregated information about your visits to our Service and other websites to provide advertisements about goods and services of interest to you.

14. Social Media

Our Service may include social media features, such as an X button, and widgets, such as the "share this" button or interactive mini-programs. These features may collect your IP address, which page you are visiting on the Service, may set a cookie to enable the feature to function properly and/or other things. Social media features and widgets are either hosted by a third party or hosted directly on the Service. Your interactions with these features are governed by the privacy policy of the company providing it.

15. Do Not Track

Currently, various browsers offer a "do not track" or "DNT" option that relies on technology known as a DNT header which sends a signal to the websites or apps visited by the user about the user’s browsers DNT preference setting. We do not currently commit to responding to browser’s DNT preference across our Service because no common industry standard for DNT has been adopted by industry groups, technology companies or regulators, including no consistent standard of interpreting user intent. We take privacy and choices regarding privacy seriously and will make efforts to continue to monitor the development around DNT browser technology and the implementation of a standard for DNT. Please note that third-parties may not respond to a browser’s DNT preference as well. Please contact each individual third-party for more information on how they handle DNT.

16. Marketing Opt-Out Rights

You have the right to opt-out of receiving marketing communications from us at any time by following the unsubscribe link in our emails or by contacting us through the website at https://chimney.ai/contact or by emailing us at [email protected]. Depending on your jurisdiction, you may also have other rights regarding your personal information. Even if you opt-out of receiving marketing communications, we will still send you transactional messages which include but are not limited to responses to your questions or emails and those related to purchases you make regarding our Service.

17. Changes to This Privacy Policy

Please see the "Last Updated" date at the top of this Privacy Policy which shows the date this Privacy Policy was last updated. We reserve the right, at our sole discretion, to change, modify, update, add or remove all or portions of this Privacy Policy ("Changes") from time to time to reflect changes in our practices, technology, legal requirements, and/or other factors. When we make any Changes, we will update the "Last Updated" date at the top of this Privacy Policy.

All Changes will become effective upon posting the updated version on the website. We encourage you to review this Privacy Policy periodically. You acknowledge and agree that it is your responsibility to review this Privacy Policy periodically and become aware of any Changes. Your continued use of the Service following the posting of any Changes to our Privacy Policy constitutes your acceptance and agreement to the updated Privacy Policy.

18. Miscellaneous

This Privacy Policy, the Terms, and any and all other policies and/or operating rules posted by us on our Service or in respect to our Service or otherwise, and/or any contracts we enter into with you constitutes the complete and exclusive statement of the agreement between you and us concerning this subject matter of this Privacy Policy and supersede all proposals, oral or written, and all other communications between you and us relating to the subject matter of this Privacy Policy. Unless otherwise stated in this Privacy Policy, in the event any information posted in our Service from time to time conflicts with any provision of this Privacy Policy, the applicable provision of this Privacy Policy shall control. Any terms and conditions of any other instrument issued by you in connection with this Privacy Policy which are in addition to, inconsistent with or different from this Privacy Policy shall be of no force or effect. This Privacy Policy does not, and shall not be construed to, create any partnership, joint venture, employer-employee, agency or franchisor-franchisee relationship between you and us. You may not assign, transfer or sublicense all or any of your rights or obligations under this Privacy Policy without our express prior written consent. We may assign, transfer or sublicense all or any of our rights or obligations under this Privacy Policy without restriction. You agree that this Privacy Policy shall be construed as if drafted jointly by the parties hereto and in the event an ambiguity or question of intent or interpretation arises, no presumption or burden of proof shall arise favoring or disfavoring any party by virtue of the authorship of any provisions of this Privacy Policy. Our failure to exercise or enforce any condition, term or provision of this Privacy Policy will not operate as a waiver of such condition, term or provision. Any waiver by us of any condition, term or provision of this Privacy Policy shall not be construed as a waiver of any other condition, term or provision. If any provision of this Privacy Policy is held invalid or unenforceable, the offending language shall be limited, rewritten, modified or interpreted as will render it enforceable and the remainder of this Privacy Policy shall continue in full force and effect. You agree that a printed version of this Privacy Policy and of any notice given in electronic form shall be admissible in judicial or administrative proceedings based upon or relating to this Privacy Policy to the same extent and subject to the same conditions as other business documents and records originally generated and maintained in printed form. We will not be responsible for failures to fulfill any obligations due to causes beyond our sole control. If any non-English translations of this Privacy Policy are provided, it is for convenience only. In the event of any ambiguity or conflict between translations, the English version is authoritative and controls.

19. Contact Us

If you have questions or concerns about this Privacy Policy or how your data is handled, you may contact us through the website at https://chimney.ai/contact or by emailing us at [email protected].