Privacy policy for the Chamberflow Staff app

Chamberflow Staff is the app for the people who run a chamber of commerce on Chamberflow: its executive director and office staff. Your chamber is your employer or the organisation you work for; VentureLK LLC operates the software on its behalf. Chamber members use a different app, Chamberflow.

What the app uses

Your work email address, to sign you in: with the password your chamber gave you for its back office, or, if you tap Email me a code, with a six-digit code we email to that address. The app keeps a sign-in token, never your password, in your device’s secure storage (the Keychain on iPhone, the Keystore on Android). If your chamber turns on two-factor sign-in, the app then asks for a code from your authenticator app, a code we email you, or one of your recovery codes. The app keeps none of these codes; Chamberflow stores your authenticator key encrypted and your recovery codes only as fingerprints that cannot be turned back into codes.

Your chamber’s records that you work with: members and their contacts, events and attendees, invoices, payments received, renewal drafts and budget requests. They are shown to you, with one exception kept on your phone: so that the door keeps working when the venue’s connection drops, the app saves the list of each event you open at the door (each attendee’s name, email address, company and ticket status), and any check-ins waiting to be sent. They stay in the app’s private storage on your phone until you delete the app. On Android they are left out of the phone’s backup; on iPhone the phone’s own backup includes them, as it does other app data.

The camera, only when you open the ticket scanner at an event door. The picture is read on your device to find the ticket’s code; no image is stored or sent. Only the code’s text goes to Chamberflow, to check the ticket.

What it does not do

It does not track you across other apps or websites, does not use advertising identifiers, does not read your contacts, photos or location, and does not store any image.

Who sees your data

Your chamber, which already holds its records and records who checked in whom and who decided what. The application and its database run on Amazon Web Services in Singapore. Supporting service providers deliver the sign-in code email and your notifications to members, and keep the service backed up and running; Chamberflow’s privacy policy has more. Beyond these, nobody receives your data unless the law requires it. We do not sell data.

Your rights

To correct your name or email, ask your chamber’s administrator. When your chamber disables your sign-in, the app stops working for you within fifteen minutes. You can also write to hello@chamberflow.ai and we will act within ten working days.

Security

Data travels encrypted. Wrong passwords are throttled. Session tokens last fifteen minutes and are renewed only while your sign-in is still valid; signing out revokes them.