Approved business details can become public, but saved businesses, review notes, verification records, and account activity remain inside the Gallery's protected application. Only approved, purpose-limited information may be synchronized to connected CHIMA™ services.
Privacy Policy
Last updated: September 8, 2026.
This Privacy Policy explains what The Enterprise Gallery may collect, how that information is used, what may become public, what stays private, and how approved information may be synchronized with optional connected CHIMA™ services.
1. Scope and connected systems
Legal terms
This Policy applies to The Enterprise Gallery website, independent accounts, business registration and claim flows, saved-business features, public profiles, and other Gallery services described when they are offered. Optional Spotlight, Showcase, SnapShots, or CHIMA™ service integrations are covered when Gallery information is purposefully synchronized to them.
Authenticated Gallery records are processed by the Gallery's protected application and API services rather than the public presentation layer. Optional CHIMA™ Systems synchronization is separately controlled and is not required for Gallery sign-in.
What this means
The Gallery directly operates its login, private accounts, review records, saved businesses, credits, and business-management data. CHIMA™ Systems may receive approved synchronized information, but it is not required for Gallery sign-in or normal Gallery use.
2. Information we collect
Legal terms
CHIMA™ may collect account information, contact details, business registration details, claim verification information, submitted profile content, public business information, media assets, hire request details, saved businesses, credit/boost activity, portal action activity, communications, device and usage information, analytics events, and security logs.
CHIMA™ may also receive information from public sources, business owners, authorized representatives, customers, service providers, CHIMA™ Systems records, and marketplace review processes.
If you request CHIMA™ AI Business Systems launch updates, CHIMA™ records the email address, the privacy-notice version, the signup source, and the time of the request. The address remains pending until it is separately confirmed. An unsubscribed address is never reactivated by submitting the form again. This record does not create a Gallery account or authorize unrelated marketing.
What this means
We may collect the information needed to run the marketplace: who you are, what business you manage, what you submit, what you save, what requests you send, and basic site/security activity. If you request a place on a launch list, the request stays pending until the address is confirmed and may be used only for the updates described with the form.
3. How information is used
Legal terms
CHIMA™ may use information to create and manage accounts, verify business authority, review registrations and claims, publish safe business profiles, process hire requests, operate saved business lists, manage Marketplace/Spotlight/Showcase/SnapShots workflows, provide credits or boosts, moderate content, prevent misuse, communicate with users, improve services, and comply with legal obligations.
What this means
We use data to make the marketplace work: find businesses, review submissions, help customers request services, help owners manage their profiles, and keep unsafe or fake activity out.
4. Public versus private information
Legal terms
Approved business profile information may be displayed publicly, including business name, category, service area, public website, social links, public contact methods, descriptions, photos, work previews, trust labels, availability signals, Spotlight/Showcase/SnapShots references, and other approved listing details.
Saved business lists, private account settings, internal review notes, verification documents, non-public contact details, request drafts, customer identity for saved-only activity, and CHIMA™ administrative notes should not be public. Gallery verification exposes only its status, public label, verification date, validity boundary, and explanation link. Private evidence, reviewer notes, risk scores, and security signals are not published through profile or agent interfaces.
What this means
A public listing can show business details that help people decide who to hire. Your private shortlist, account details, verification records, and internal CHIMA™ notes should stay private.
5. Saved businesses and hire requests
Legal terms
Saving a business is intended to be private account activity. Businesses may receive aggregate or anonymized interest metrics where appropriate, but they should not receive your name, contact details, or request details unless you submit a hire request, introduction request, quote request, or other explicit communication.
Hire requests may be reviewed, routed, priced, moderated, or clarified by CHIMA™ before a business receives actionable customer details.
What this means
Saving a business is like bookmarking it. The business should not know it was you unless you choose to contact them or send a request.
6. How information may be shared
Legal terms
CHIMA™ may share information with service providers, hosting providers, analytics providers, payment processors, security vendors, professional advisors, CHIMA™ affiliates, marketplace businesses when users initiate requests, distribution channels approved for publication, and authorities or third parties when required by law or needed to protect rights, safety, or security.
CHIMA™ should not sell personal information in the ordinary meaning of exchanging it for money. If advertising or data-sharing practices trigger state privacy opt-out rights, the required notices and controls would apply before those practices are used.
What this means
We share data when needed to run the service, process requests, host the site, protect the system, or comply with law. If advertising or data-sharing rules require opt-outs, those controls would apply before the affected practices are used.
7. Cookies, analytics, and security logs
Legal terms
The marketplace may use cookies, local storage, analytics, server logs, bot protection, rate-limiting, and similar technologies to remember preferences, maintain sessions, measure usage, improve performance, detect abuse, and secure marketplace services.
Specific tools, cookie categories, retention periods, and any legally required consent or opt-out mechanisms may be described through additional notices or settings.
What this means
The site may use normal web tools to keep you logged in, understand what works, and block abuse. Additional notices or settings may explain the tools and choices that apply.
8. Security and retention
Legal terms
CHIMA™ uses reasonable administrative, technical, and organizational safeguards designed to protect information. No system can be guaranteed perfectly secure. CHIMA™ should retain information only as long as needed for marketplace operations, account management, legal compliance, dispute handling, security, auditing, and legitimate business needs.
CHIMA™ should maintain incident response, access control, logging, least-privilege permissions, and data minimization practices for the Gallery, its APIs, and any connected systems.
What this means
Security matters. CHIMA™ should collect what it needs, protect it carefully, limit who can see it, and delete or archive records when they are no longer needed.
9. Privacy choices and rights
Legal terms
Depending on location and applicable law, users may have rights to request access, correction, deletion, portability, restriction, objection, opt-out of certain sharing, or withdrawal of consent. CHIMA™ should verify requests before acting and may retain information where legally permitted or required.
Business profile corrections may be handled through claim, verification, portal, or support workflows so CHIMA™ can protect against unauthorized changes.
What this means
You may be able to ask CHIMA™ to show, correct, delete, or limit certain data. Business listing changes may need verification so someone else cannot hijack a profile.
10. Children, changes, and contact
Legal terms
The marketplace is intended for business users and general customers, not children under 13. CHIMA™ does not knowingly collect personal information from children under 13 through The Enterprise Gallery.
CHIMA™ may update this Policy as services, integrations, legal requirements, or data practices change. Material changes should receive reasonable notice where appropriate.
What this means
This is a business marketplace, not a child-focused service. This Policy may be updated as the platform grows and new services become available.