Privacy Policy

Chavi (“we”, “us”, “our”) is operated by Ena Hotels LLC, a Maryland limited liability company. This Privacy Policy describes what information we collect when you use the Chavi platform at chavi.works, how we use it, and your rights.

Information we collect

When you create an account or use Chavi, we collect:

• Account information — name, business email, business details, role, and payment or billing-contact information when applicable.
• Operational data you upload or forward — reports, exports, and operational records you upload or forward to Chavi.
• Messaging preferences — mobile phone number (only if you enable SMS alerts), opt-in records, opt-out events.
• Usage data — pages visited, features used, alerts viewed, decisions logged within the platform.

How we use information

• To deliver and operate the Chavi platform and the specific features you subscribe to.
• To send the operational messages, alerts, digests, and reports you have opted into.
• To compute insights, comparisons, and recommendations across your data.
• To improve our service and develop new features.
• To maintain audit trails for compliance, accuracy, and your protection.
• To respond to your support requests.

How we do not use information

• We do not sell, rent, lease, or trade your information to any third party.
• Mobile phone numbers and SMS opt-in data are never shared with third parties or affiliates for marketing or promotional purposes.
• We do not use your operational data to train AI models accessible to other customers or third parties.
• We do not send marketing messages on behalf of unrelated parties.

SMS messaging program

Chavi operates an opt-in SMS messaging program for operational notifications to authorized users. Participation is voluntary and configured by the user within their Chavi account. To sign up for Chavi Alerts, visit our public opt-in page at chavi.works/alerts.

• Program name: Chavi Alerts
• Message types: Operational rate-intelligence alerts about hotel performance, specifically: (1) competitive comp-set rate snapshots, (2) pricing rule violation alerts, (3) demand-signal notifications (event overlap, compression class, occupancy bands), and (4) housekeeping schedule recommendations.
• Frequency: Variable based on user configuration; typically up to approximately 600 messages per month per user.
• Message and data rates may apply per your mobile carrier's terms.
• Opt-out: Reply STOP to any message at any time. You will receive a single confirmation message and no further alerts until you re-subscribe.
• Help: Reply HELP for help, or email support@chavi.works.
• Opt-in records and message delivery status are retained for compliance and audit purposes. Mobile phone numbers and opt-in data are never shared with third parties for marketing.

Third-party processors

We use the following third-party services to operate Chavi. Each is bound by their own privacy practices and processes data only to deliver the service:

• Supabase Inc. — database and application backend.
• Twilio Inc. — SMS message delivery.
• Vercel Inc. — application hosting.
• WorkOS Inc. — authentication.
• Resend — transactional and digest email delivery.

Data security

All data is encrypted in transit (TLS) and at rest. Each property's data is logically isolated. We use industry-standard security practices, including authenticated access, audit logging, and least-privilege data access controls.

Your rights

You may export your data, delete your account, request a copy of the information we hold about you, or contact us with any privacy concern at any time. Until self-service account settings are live, email support and we will process account deletion requests within 30 days.

Children's privacy

Chavi is intended for business use by adults. We do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the dashboard or by email. Continued use of Chavi after notice of changes constitutes acceptance.