1. Scope
This Privacy Policy explains how Chirofinder LLC ("ChiroFinder," "we," "us") collects, uses, discloses, and protects information in connection with chirofinder.co and related services (the "Service"). It applies to visitors, registered users, and Practice Owners who claim or manage a listing. It does not apply to information a chiropractic practice collects about its own patients independently of the Service — that is governed by the practice's own privacy practices (and, where applicable, HIPAA), not by ChiroFinder.
2. Information We Collect
2.1 Information You Provide Directly
- Account information: name, email address, password (stored hashed), and account role.
- Practice listing/claim information (Practice Owners): business name, address, phone, website, hours, license number, specialties, insurance accepted, photos, and identity/authorization documents submitted during claim verification.
- Reviews and other User Content: ratings, written reviews, photos, and responses you submit.
- Billing information (Practice Owners on paid Plans): billing name and address; card and payment details are collected and stored directly by our payment processor, Stripe, Inc. — ChiroFinder does not store full payment card numbers.
- Communications: anything you send us via a contact form, email, or support request.
2.2 Information Collected Automatically
- Device and usage data: IP address, browser type, device identifiers, referring URL, pages viewed, and timestamps, collected via server logs and analytics tools.
- Approximate location: derived from IP address or a location you provide, used to power "near me" search and to default the map view.
- Cookies and similar technologies: see Section 4.
2.3 Information From Third Parties
- Google Places API: for practices we've matched to a Google Business Profile, we retrieve and display publicly available rating and review data (reviewer name, profile photo, rating, review text, and relative post date) directly from Google's Places API. This data comes from Google, not from the reviewer directly to us, and is refreshed periodically per Google's terms. We do not use this integration to access any practice's private Google Business Profile account.
- Public sources: for unclaimed listings, we may compile publicly available business information (name, address, phone, licensing-board records) from public directories and state licensing board websites.
2.4 Sensitive Information. We do not intentionally collect government ID numbers, financial account numbers, or health/medical information about visitors through the Service. If you include health details about yourself in a review (e.g., describing a condition you sought treatment for), that is your choice — we ask reviewers not to include third-party health information belonging to anyone else (see Review & Content Guidelines §3), and this Policy does not treat self-disclosed review content as data we solicited or targeted for collection.
3. How We Use Information
We use the information above to:
- operate, maintain, and personalize the Service (e.g., showing nearby practices, remembering your account);
- process practice claims and verify authorization;
- process subscription payments and manage billing (via Stripe);
- moderate and publish reviews and other User Content;
- send transactional communications (claim confirmations, billing receipts, security alerts, moderation notices);
- with your consent or as permitted by law, send marketing communications to Practice Owners about new features or Plans (you may opt out at any time — see Section 7);
- monitor, secure, and improve the Service, including detecting fraud, fake reviews, and abuse (including through Google Analytics — see Section 4); and
- comply with legal obligations and enforce our Terms of Service.
We do not use information to make automated decisions that produce legal or similarly significant effects about you.
4. Cookies and Tracking Technologies
We use cookies and similar technologies for:
- Essential functions — authentication, session management, security (cannot be disabled without breaking core functionality);
- Analytics — we use Google Analytics to understand traffic and site performance (e.g., which pages/listings are viewed, how visitors find the site). Google Analytics uses cookies and similar identifiers and may process data consistent with Google's own privacy policy;
- Advertising — once sponsored-placement or display-advertising features are live, cookies or similar identifiers may be used to measure ad performance; any such use will be disclosed here and, where required, subject to a consent banner.
Where required by law, we will present a cookie-consent banner allowing you to accept or decline non-essential cookies (including Google Analytics) before they are set. You can also control cookies through your browser settings, or opt out of Google Analytics specifically via Google's opt-out tools; blocking essential cookies may affect Service functionality.
5. How We Share Information
We do not sell your personal information for money. We share information only as follows:
- Service providers, under contract and only to the extent needed to perform services for us: payment processing (Stripe), hosting/infrastructure, email delivery, analytics (Google Analytics), and customer support tooling.
- Google, in the ordinary operation of the Places API integration described in Section 2.3 (queries sent to Google to retrieve public review/rating data for a matched practice) and through Google Analytics as described in Section 4.
- Other users, to the extent your review, response, or public profile information is inherently public-facing on the Service.
- Legal and safety reasons, where we believe disclosure is necessary to comply with law, respond to legal process, protect our rights, or protect the safety of users or the public.
- Business transfers, such as a merger, acquisition, or sale of assets, subject to standard confidentiality protections and, where required by law, notice to affected users.
6. Data Retention
We retain account information for as long as the account is active, and practice claim/verification records for as long as the listing remains claimed plus a reasonable period after (for recordkeeping and dispute resolution). We retain reviews and other public User Content in accordance with the license described in our Terms of Service §5.2, even after account deletion, except where you request removal and we are not otherwise required or permitted to retain it. Billing records are retained as required by tax and accounting law.
7. Your Choices and Rights
7.1 Account and Marketing. You can review and update your account information through your dashboard, and opt out of marketing email using the unsubscribe link in any such email (this does not affect transactional messages).
7.2 Access, Correction, and Deletion. Regardless of where you live, you may request access to, correction of, or deletion of your personal information by emailing privacy@chirofinder.co. We will respond within a reasonable time and verify your identity before acting on the request. We may decline requests where retention is required by law or necessary for legitimate business purposes (e.g., fraud prevention, dispute resolution, or the User Content license described above).
7.3 California Residents (CCPA/CPRA). If you are a California resident, and if ChiroFinder meets the CCPA's applicability threshold (currently: (a) global annual gross revenue over $26,625,000, or (b) buying, selling, or sharing the personal information of 100,000 or more CA consumers/households/devices annually, or (c) deriving 50%+ of annual revenue from selling/sharing personal information), you have the right to know what personal information we collect, request its deletion or correction, opt out of "sale" or "sharing" (including for cross-context behavioral advertising), and not be discriminated against for exercising these rights. We do not sell personal information for money and, unless and until advertising cookies are enabled per Section 4, do not "share" personal information for cross-context behavioral advertising as CPRA defines it. To exercise these rights, email privacy@chirofinder.co.
7.4 Other State Privacy Laws. As our user base grows, other states (e.g., Virginia, Colorado, Connecticut) may extend similar rights to their residents. We will honor requests submitted to privacy@chirofinder.co consistent with applicable law, regardless of which state's specific statute technically applies.
7.5 North Carolina. North Carolina does not currently have a standalone comprehensive privacy statute giving residents CCPA-style rights, but we extend the same access/correction/deletion process in Section 7.2 to all users regardless of state as a matter of policy.
8. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Parents who believe their child has provided information to us should contact privacy@chirofinder.co.
9. Security
We use reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, use, or disclosure (e.g., encryption in transit, access controls, hashed passwords). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Breach notification. In the event of a security breach involving unencrypted personal information, we will notify affected North Carolina residents without unreasonable delay and notify the North Carolina Attorney General's Consumer Protection Division as required under the NC Identity Theft Protection Act, and will follow the applicable notification laws of any other state where affected users reside.
10. Third-Party Links
The Service links to practice websites, social media, and Google Maps. This Policy does not apply to those third-party sites; review their own privacy policies before providing information to them.
11. International Users
The Service is intended for users in the United States and hosted in the United States. If you access it from outside the U.S., you understand your information will be transferred to and processed in the U.S.
12. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice (e.g., email to registered users or a homepage banner).
13. Contact Us
Questions or requests regarding this Policy: privacy@chirofinder.co / Chirofinder LLC, 4030 Wake Forest Rd Suite 349, Raleigh, NC 27609.