Privacy Policy

Last updated: May 19, 2026

This Privacy Policy describes how Chimpipi, LLC ("Company," "we," "us," or "our") collects, uses, discloses, and sells your information when you use our mobile application and related services (collectively, the "Service"). This policy also explains your privacy rights under California law and other applicable state laws.

We use your personal data to provide and improve the Service. We also sell your personal data to third parties as described below. By using the Service, you acknowledge our data practices as described in this Privacy Policy.

Global Privacy Control

We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser or device, we automatically treat this as a valid request to opt out of the sale and sharing of your personal information. No additional action is required on your part. You can enable GPC in supported browsers or browser extensions.

Definitions

For the purposes of this Privacy Policy, the following terms have specific meanings:

• Personal Data: Any information that relates to an identified or identifiable individual, including but not limited to name, email address, phone number, device identifiers, IP address, and location data.
• Sensitive Personal Information: A subset of personal data that includes precise geolocation data (capable of identifying your location within 1,850 feet or less), and other categories identified under California law.
• Sale/Sell: Selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating personal information to a third party for monetary or other valuable consideration.
• Share/Sharing: Disclosing personal information to a third party for cross-context behavioral advertising purposes, whether or not for monetary consideration.
• Service Provider: A third party that processes personal data on our behalf pursuant to a written contract that prohibits the service provider from retaining, using, or disclosing the data except as necessary to perform the contracted services.
• Third Party: Any company, person, or entity other than the Company, a service provider, or you.

Information We Collect

Categories of Personal Information

We collect the following categories of personal information when you use our Service:

Business and Public-Figure Contact Information

Separately from the personal information we collect about our users (above), our Service displays business and professional contact information for comedy venues, comedy clubs, open-mic hosts, festival organizers, and comedians performing professionally. This information is operational/professional contact data — not personal residential contact information.

What we display includes:

• Booking and contact email addresses, contact phone numbers, room manager names, business addresses, official websites, and Instagram handles for comedy venues and clubs.
• Signup email addresses, signup phone numbers, host Instagram handles, and venue websites for open mics.
• Submission portals, ticket links, and official websites for festivals.
• Publicly listed professional social-media handles (Instagram, Twitter/X, TikTok, YouTube) for individual comedians on their profile pages.

Where this information comes from:

• The Google Places API and similar public business-directory sources.
• Public venue websites, published booking pages, and the publicly visible portions of official social-media bios.
• Our internal research and "club intelligence" dataset.
• Community-contributed corrections and additions submitted by signed-in users.

How we display it varies by surface:

• On /clubs and /open-mics, contact emails and phone numbers are gated behind sign-in and are masked by default (e.g., "••••@••••.com"), revealed only when the signed-in user clicks to view them.
• On /c/[comedian] profile pages, professional social-media handles are visible without sign-in (consistent with those handles being public on the underlying social platforms).
• On the /map venue drawer, venue addresses, phone numbers, websites, and Instagram handles are visible without sign-in.

For California consumers: publicly available information is generally exempted from the definition of "personal information"under Cal. Civ. Code § 1798.140(v)(2). We nonetheless honor reasonable removal and correction requests from business owners and listed individuals — see "Listing Removal and Correction Requests" below.

Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: When you create an account, update your profile, or contact us.
• Automatically: Through your use of the Service, including location data from your device (with permission), browsing activity, and usage data.
• Third-party sources: Event data from Ticketmaster and similar ticketing platforms.
• Public business and venue sources: Venue addresses, phone numbers, and websites from the Google Places API; public venue websites; published booking pages; and the publicly visible portions of official social media bios (e.g., Instagram handles).
• Internal research and curation: Our own research team maintains a "club intelligence" dataset of public booking and contact information for comedy venues and clubs.
• Community and user submissions: Corrections, additions, and intelligence contributed by signed-in users (for example, a comedian flagging that a club's booking email has changed).
• Public comedian profile data: Stage name, profile imagery, and publicly listed social media handles (Instagram, Twitter/X, TikTok, YouTube) for comedians as public figures performing professionally.

Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your interactions with our Service, to maintain the security and functionality of the Service, and to improve your experience.

Types of Cookies We Use

• Essential Cookies: Authentication session cookies (Clerk), bot detection token (chimpipi_bot). Required for the Service to function.
• Analytics Cookies: Google Analytics (_ga, _ga_* cookies) to understand how users interact with the Service, including page views, event tracking, and user engagement metrics.

Other Tracking Technologies

• Browser Fingerprinting: We collect device characteristics including canvas rendering, WebGL information, audio context data, and installed fonts to create a unique browser fingerprint for anti-scraping and bot protection purposes.
• Session Tracking: We use sessionStorage to maintain a session identifier for click analytics, tracking interactions such as card clicks, ticket clicks, and favorites.
• Pixel Tags and Web Beacons: We and our analytics providers use pixel tags to track email opens and page interactions.

Managing Cookies

You can control cookies through your browser settings, including blocking or deleting cookies. Please note that disabling essential cookies may affect the functionality of the Service. You can also:

• Opt out of Google Analytics using the Google Analytics Opt-Out Browser Add-on
• Enable Global Privacy Control (GPC) in your browser to automatically opt out of the sale and sharing of your personal information

Online Analytics

We use third-party analytics services, including Google Analytics, to help us understand how users interact with our Service and to improve the user experience.

Google Analytics collects information such as browser type, operating system, pages visited, time spent on pages, referring and exit pages, and IP address. This information helps us analyze trends, administer the Service, and gather demographic information about our user base.

You can opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.

Sensitive Personal Information: Precise Location Data

We collect precise geolocation data, which is classified as Sensitive Personal Information under California law. Precise geolocation means data capable of determining your location within a circle of 1,850 feet radius or less. We collect this data through your device's GPS when you grant location permission.

We use precise location data to show you nearby comedy shows and events. We may also sell this location data to third parties as described below. You have the right to limit our use of your sensitive personal information.

Sale of Your Personal Data

Categories of Data We Sell

In the preceding 12 months, we have sold the following categories of personal information:

• Identifiers: Email address, name, phone number, device identifiers, IP address
• Sensitive Personal Information (Precise Geolocation): GPS coordinates, location history, saved location preferences
• Internet/App Activity: Shows viewed, comedians followed, venues browsed, search history
• Usage Data: App usage patterns, session duration, feature engagement
• Inferences: Preferences and interests derived from your activity (comedy genres, price sensitivity)

Categories of Third Parties to Whom We Sell Data

We sell personal data to the following categories of third parties:

• Comedians and Performer Representatives: Information about users who have viewed their profiles, shows, or expressed interest in their events.
• Comedy Clubs and Venues: Information about users who have viewed their venue pages or shows, or are located near their establishments.
• Event Promoters: Information to help promote comedy events to interested audiences.
• Data Brokers: Aggregated and individual-level data for marketing and analytics purposes.
• Marketing Partners: Information to enable targeted advertising and promotional campaigns.

How Third Parties May Use Your Data

Third parties who purchase your data may use it for:

• Direct marketing (email, SMS, postal mail, phone calls)
• Targeted advertising across websites and apps
• Audience analytics and market research
• Event promotion and ticket sales
• Building consumer profiles for resale to other parties

Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information. We extend these rights to all users regardless of location.

Right to Know and Access

You have the right to request that we disclose: the categories and specific pieces of personal information we have collected about you; the categories of sources from which we collected your information; the business or commercial purposes for collecting, selling, or sharing your information; the categories of third parties to whom we disclose your information; and the categories of information we have sold or shared and to whom.

Right to Delete

You have the right to request that we delete personal information we have collected from you, subject to certain exceptions required by law (such as completing a transaction, detecting security incidents, or complying with legal obligations).

Right to Correct

You have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes for processing it.

Right to Opt Out of Sale/Sharing

You have the right to opt out of the sale and sharing of your personal information. To exercise this right:

• Click the "Do Not Sell or Share My Personal Information" link in our app settings
• Email us at: privacy@chimpipi.com with subject line "Do Not Sell"
• Use our online form at: chimpipi.com/privacy-request
• Enable Global Privacy Control (GPC) in your browser - we automatically honor GPC signals

We will process your opt-out request within 15 business days. We will not ask you to verify your identity to process an opt-out request. Once you opt out, we will not sell your personal information unless you later provide express authorization.

Right to Limit Use of Sensitive Personal Information

You have the right to limit our use of your sensitive personal information, including precise geolocation data. To exercise this right, click "Limit the Use of My Sensitive Personal Information" in our app settings, or contact us using the methods above. When you exercise this right, we will only use your sensitive personal information as necessary to provide the Service (such as showing you nearby events when you request them).

Right to Non-Discrimination

We will not discriminate against you for exercising any of your privacy rights. You will not receive different prices, quality of service, or be denied access to the Service for exercising these rights.

Right to Appeal

If we deny your privacy request, you have the right to appeal our decision. To appeal, email privacy@chimpipi.com with the subject line "Privacy Request Appeal" and include your original request and our response. We will respond to your appeal within 45 days.

How to Submit Privacy Requests

You may submit privacy requests through the following methods:

• Email: privacy@chimpipi.com
• Online Form: chimpipi.com/privacy-request
• In-App:Settings > Privacy > Submit Privacy Request

For requests to know or delete, we will verify your identity by matching information you provide with information we have on file. You may designate an authorized agent to make requests on your behalf by providing written authorization.

Response Timeline: We will respond to your request within 45 days. If we need additional time (up to 45 more days), we will notify you in writing.

Listing Removal and Correction Requests

This section applies to venue operators, club owners, festival organizers, open-mic hosts, and comedians (or their authorized representatives) who appear on our Service and want their contact information removed, corrected, or limited. It is independent of — and in addition to — the consumer-level rights described above.

How to request: Email privacy@chimpipi.com with the subject line "Listing Removal" or "Listing Correction". Please include the URL(s) of the listing(s) at issue and identify the specific information you want removed, corrected, or restricted.

What we offer:

• Full removal: Remove the listing entirely from the public Service.
• Field-level removal: Remove specific contact fields (for example, hide the booking email while keeping the venue name and address).
• Correction: Update inaccurate contact information (for example, a changed booking email or new phone number).
• Public-display opt-out: Keep the underlying record internally so we don't re-import the same data on the next refresh, while suppressing it from public surfaces.

Response Timeline: We will respond to listing requests within 45 days, consistent with the response timeline described above for consumer privacy requests. If we need additional time, we will notify the requester in writing.

Verification: For removal requests covering a venue, club, or festival, we may ask the requester to verify their relationship to the listee (for example, using an email address on the venue's official domain, an authorized representative letter, or a posted business contact). For individual comedians, we may ask the requester to verify identity via a signed-in account matching the listed handles or via direct message from the listed social profile.

Do Not Track Disclosure

Some web browsers transmit "Do Not Track" (DNT) signals. We do not currently respond to DNT signals, as there is no industry-standard technology for recognizing or honoring DNT signals. However, we do honor Global Privacy Control (GPC) signals as described above.

State-Specific Privacy Rights

California Residents (CCPA/CPRA)

California residents have all rights described above under the California Consumer Privacy Act as amended by the California Privacy Rights Act. This includes the right to know, delete, correct, opt out of sale/sharing, limit sensitive data use, and non-discrimination. California law requires us to disclose whether we sell personal information - as stated throughout this policy, we do sell personal information.

Shine the Light Law: California residents may also request information about personal information we have shared with third parties for their direct marketing purposes. To make this request, contact us at privacy@chimpipi.com.

Virginia, Colorado, Connecticut, and Other States

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, and other states with comprehensive privacy laws have similar rights including the right to access, delete, correct, and opt out of targeted advertising and sales. The opt-out and request mechanisms described above satisfy the requirements of these state laws.

Maryland and Oregon Residents - Location Data

Important Notice for Maryland Residents: Maryland law restricts the sale of sensitive personal data including precise geolocation. If you are a Maryland resident, we do not sell your precise location data. We will use geolocation only to provide you with location-based features you request.

Important Notice for Oregon Residents: Oregon law prohibits the sale of precise geolocation data. If you are an Oregon resident, we do not sell your precise location data.

Residents Under 18 (Teen Privacy)

Several states have specific protections for users under 18. If you are under 18 years of age, we do not sell your personal information without affirmative authorization. If you are a parent or guardian and believe your teen has provided us with personal information without your consent, please contact us.

Your Rights Under GDPR (For Users in the European Economic Area)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR) regarding your personal data. These rights include:

• Right of Access: Request access to personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to legal obligations.
• Right to Restriction of Processing: Request that we limit the use of your personal data.
• Right to Data Portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: Object to the processing of your personal data, including for direct marketing.
• Right to Withdraw Consent: Where we rely on consent, withdraw it at any time.

To exercise any of these rights, please contact us at privacy@chimpipi.com.

If you believe we have not adequately addressed your concerns, you have the right to file a complaint with your local data protection authority.

Legal Basis for Processing Your Information

Performance of Contract

Processing necessary to provide the Service to you, including creating and managing your account, showing you nearby events, and sending essential communications related to the Service.

Legitimate Interests

Processing based on our legitimate interests, including improving and personalizing the Service, analyzing usage patterns, preventing fraud and abuse, marketing our Service, and conducting analytics. We conduct balancing tests for all processing based on legitimate interests.

Legal Obligations

Processing necessary to comply with legal obligations, including tax reporting, financial record-keeping, and responding to legal requests.

Consent

Processing based on your consent, including marketing communications, optional features, collection of device fingerprint data, and use of precise location data. Where we rely on consent, you have the right to withdraw it at any time through your account settings or by contacting us.

International Data Transfers

We may store and process data in the United States and other countries. By using the Service, you consent to the transfer of your information to the United States and other countries, which may have data protection laws that differ from those in your country of residence. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.

SMS Communications and Consent

We use Twilio to provide SMS-based features including phone number verification and event notifications.

Types of SMS Messages

• Transactional Messages: Account verification codes, password resets, important account alerts. These are sent based on your use of the Service.
• Promotional Messages: Event announcements, show reminders, special offers. These require your express written consent.

SMS Consent Disclosure

By providing your phone number and opting in to receive promotional messages, you consent to receive text messages from Chimpipi, LLC at the number provided. Message frequency varies. Message and data rates may apply. Consent to receive promotional messages is not a condition of purchase or use of the Service.

How to Opt Out of SMS

You can opt out of SMS messages at any time by: replying STOP to any message; updating your preferences in app settings; or contacting us at privacy@chimpipi.com. For help, reply HELP to any message. We will process opt-out requests within 10 business days and send one confirmation message.

Third-Party Services and Data Sources

Service Providers

We share personal information with the following service providers who process data on our behalf:

• SMS Service Providers: SMS communications and phone verification
• Mapping and business-listing services: Venue location, address, phone, and website data sourced from the Google Places API and similar public business-directory providers.
• Event Data Providers: Event data and ticketing information
• Social Media Platforms (read-only): Read-only ingestion of publicly visible profile data and bios for comedians and venues (e.g., Instagram handles, profile imagery). We do not post on behalf of users or sync private account data.
• Cloud Infrastructure: Cloud hosting and data storage

These service providers are contractually prohibited from using your information except to perform services on our behalf.

Affiliate Relationships

Links marked with an asterisk (*) or labeled "Ad" or "Sponsored" are affiliate links. We may receive information about whether you completed a purchase through these links.

Data Security

We implement reasonable security measures to protect your personal information, including:

• Encryption of sensitive data in transit (TLS) and at rest
• Access controls limiting employee access to personal data
• Regular security assessments and monitoring
• Contractual security requirements for service providers
• Incident response procedures

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify you as required by applicable law.

Children's Privacy

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, do not use the Service or provide any information to us.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us immediately at privacy@chimpipi.com. If we become aware that we have collected personal information from a child under 13 without verification of parental consent, we will take steps to delete that information.

Age Verification: We collect date of birth during registration to verify users are 13 or older. Users who indicate they are under 13 are blocked from creating accounts.

Links to Other Websites

Our Service may contain links to other websites that are not operated by us, including links to ticket purchase pages, venue websites, and comedian social media profiles. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (if you have provided one) and/or by posting a prominent notice in the app at least 30 days before the changes take effect. We will update the "Last updated" date at the top of this policy.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

• Privacy Requests/Do Not Sell: privacy@chimpipi.com
• Listing Removal or Correction Requests: privacy@chimpipi.com (subject line "Listing Removal" or "Listing Correction")
• General Inquiries: info@chimpipi.com
• Online Form: chimpipi.com/privacy-request