PRIVACY POLICY
Effective Date: January 1, 2025
Journey One LLC dba CHRP together with its affiliates, agents, and licensees (collectively “we,” “us,” or “our”), is a cutting-edge data analytics company designed to support corporate wellness. CHRP is an AI-powered emotional intelligence platform that transforms music listening patterns into emotional insights. Our platform includes data analytics and web-based applications (“Applications”), and our website located at https://www.chrp.ai/, (the “Website”) comprise our “Services.”
This Privacy Policy explains what information may be collected when you access our Services, how we and others may use this information, under what circumstances we may disclose the information to third parties, and the instances in which we may allow third parties to collect information directly from you. Depending on your activities when using or accessing our Services, you may from time to time be required to agree to additional terms and conditions. This Privacy Policy applies regardless of whether you use our Services via a computer, mobile device, or other platform (collectively, your “Equipment”).
Note for Enterprise Users: If you access CHRP through your employer, health provider, or any other organization, please also review our B2B Privacy & Security Addendum for details on data processing in organizational deployments.
1.Information We May Collect About You
We collect, use, store, or transfer information we receive from you, about you, or about your Equipment when you use our Services, including:
Contact information such as your first and last name, email address, telephone number, birth date or similar contact information.
Financial information such as credit card, bank account, other payment-related information, or other financial information related to provision of our Services.
Profile information such as your username and password, purchases or orders made by you, your feedback, preferences, survey responses, and other similar information.
Music Streaming Information, such as the music streaming platform you subscribe to (your “Streaming Platform”); your recently played songs, top tracks and playlists; the specific song ISRC, streaming platform song id, song release date, song name, song genres, artist, album, and listened at, that you listen to and/or engage with (collectively your “Streaming Information”). We only collect as much information about your use of Streaming Platform(s) as is necessary to provide our Services.
Usage information including information about how you use our Services.
Marketing and communications information such as your preferences in receiving marketing from us and your communication preferences.
Some of the information we collect about you may be personal information that can be used to identify you including – for example, your name or email address. However, in no instance does personal information include data where your identity has been removed so that we can no longer identify you (de-identified data), which we may use for any purpose.
2. How We Collect Your Information
We collect information from you in different ways and from different places, including:
You provide it to us directly. You may give us information about you by filling in forms or by communicating with us by text, e-mail, or otherwise. This includes information you provide when you create an account, purchase, and use our products and services, complete a survey, provide feedback, report a problem, or otherwise contact us about our Services, or provide information to be published or displayed on public areas of our Services or transmitted to others.
From your Streaming Platform. We partner with your Streaming Platform to access your music streaming information and other information as specified above.
From other places. We may receive information about you from other companies and individuals including, for example, business partners (other than your Streaming Platform), subcontractors, employers, advertising networks, social network platforms, analytics providers, and service providers. We may also receive information about you from other users if, for example, another user provides us with your email address to receive a discount.
3. Cookies and Automatic Data Collection Technologies
We may use automatic data collection technologies when you view our advertisements or use our Services.
For example, we may use cookies to distinguish you from other users of the Services to help us deliver a better and more personalized service when you use our Services. Automatic data collection technologies also allow us to improve our Services by enabling us to:
Estimate our audience size and usage patterns.
Store your preferences so we may customize our Services according to your individual interests.
Speed up your searches.
Recognize you when you return to our Services.
We also may use these technologies to collect information about your online activities over time and across
third-party websites or other online services. For more information, see Internet Based Advertising.
The technologies we use for this automatic data collection may include:
Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. For information about managing browser settings to refuse cookies, see Your Rights and Choices.
Flash Cookies. Certain features of our Services may use Flash cookies (local stored objects) instead of browser cookies to collect and store information about your preferences and navigation to, from, and on the Services. For information about managing Flash cookies see Your Rights and Choices
Web Beacons. Our Services pages and e-mails may contain small transparent embedded images or objects known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count website page visitors or email readers, or to compile other similar statistics such as recording Services content popularity or verifying system and server integrity.
4. How We Use Your Information
We use your information to provide our Services, communicate with you, or to conduct other business operations, such as using information to improve and personalize your experiences and our Services. We do not use any Spotify data or other music streaming data to train artificial intelligence (AI) or large language models (LLMs). All music listening information is user-authorized and used solely to deliver real-time, anonymized insights through our platform. Examples of how we may use the information we collect include:
With regard to financial information:
If you are a client organization, we use your financial information to process payment for our Services, provide refunds, and other purposes you may agree to related to the provision of our Services.
If you are an individual within a client organization, we do not collect, process, control, view, or store your financial information in any capacity.
Provide you with Services that you have requested.
Manage our relationship with you, which may include notifying you about changes to our Services, Terms, or Privacy Policy, providing you notices about your account, asking you to provide feedback or take a survey, or addressing any questions you may have about our products or Services.
Deliver relevant content and messaging to you and to measure or understand the effectiveness of such content and messaging.
To respond to your requests from us or to fulfill any other purpose for which you provide it.
To improve our Services, marketing, customer relationships, and experiences.
Carry out our obligations and enforce our rights.
In any other way we may describe when you provide the information.
5. Disclosure of Your Information
We may share information that does not identify you without restriction. We may disclose personal information as follows:
To our contractors, service providers, agents, and other third parties we use to support our business and who are obligated to keep personal information confidential and use it only for the purpose for which we disclose it to them. We limit this based on the minimum information required for such vendors, third-party service providers, and agents to perform the required services; and we only provide de-identified and aggregated information. These parties may include:
Business partners;
hosting service providers;
email providers;
payment processors;
banking partners and payment networks;
analytics providers;
cloud communication service providers; and
contractors.
To the client organization with whom we have an agreement for Services (e.g., your employer). Your de-identified listening history will be translated into emotional information and that information will only be shared with your employer in the aggregate; no other client organization will receive information about you.
With your consent.
For any other purposes that we disclose when you provide the information.
To fulfill the purpose for which you provide it.
To an actual or prospective buyer or other successor in the event of merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, where one of the transferred assets is the personal information we hold.
We may also disclose personal information to others:
To comply with any court order, law, or legal process, including responding to any government or regulatory request.
To enforce or apply our Terms of Use or other agreements including for billing and collections purposes.
To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of cybersecurity, fraud protection, and credit risk reduction.
To investigate suspected violations of any law, rule or regulation, or the terms or policies for our Services.
6. Children’s Online Privacy
We do not direct our Services to minors, and we do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information through the Services. If we learn we have collected or received personal information from a child under 13 without appropriate consent, we will delete it. If you believe we might have any information from or about a child under 13 please contact us at: Privacy@CHRP.ai.
7. Internet-Based Advertising
Our Website may integrate technology of third-party advertising networks (“Ad Networks”) that allows for the recognition of your Equipment and the collection of information about the browsing, searching, and other activities of you or anyone else using your Equipment. This information is then used to send you advertisements for products and services that are more likely to be of interest to you. For more information on how this type of advertising works, go to www.aboutads.info.
To enable interest-based advertising across your Equipment and software, we may also share data, such as technical identifiers with these Ad Networks. This allows them to link your Equipment, browser, etc. and to better identify you across different environments.
If you do not wish to participate in interest-based advertising via Ad Networks, you may opt-out by visiting and following the instructions set forth at either: (1) the Digital Advertising Alliance’s website (www.aboutads.info); or (2) the Network Advertising Initiative’s website (www.networkadvertising.org/choices). Note that the opt-out tool may rely on cookies to ensure that a given advertising network does not collect information about you (“Opt-out Cookies”) – an explanation of how Opt-out Cookies work can be found on www.aboutads.info. Therefore, if you use different Equipment, change web browser, or delete these Opt-out Cookies, you will need to perform the opt-out task again.
Finally, please note that certain browsers may offer you the option of providing notice to websites that you do not wish for your online activities to be tracked for interest-based advertising purposes (“DNT Notice”). Some browsers are, by default, set to provide a DNT Notice, whether or not that reflects your preference. However, given how preference-based advertising works, DNT Notices may not be effective in communicating your preferences. For this and a variety of other reasons, with respect to our Services, we do not take any action based on browser based DNT Notices. Rather, if you do not wish to participate in interest-based advertising activities, you should access the opt-out process identified above.
8. Social Networks, Third-Party Links, Forums
Our Services may integrate social network plugins, include links to third-party websites or services, or provide you the opportunity to post content. Please keep the following in mind:
Social Networks. Our websites may make available the option for you to use “plugins” that are operated by social media companies. If you choose to use one of these plugins, then it may collect information about you and send it back to the social media company that owns it. This may happen even if you do not click on the plugin, if you are logged into the social media website that owns the plugin when you access our Services. Information collected by a plugin is subject to the privacy policy and terms of the social media company that owns it. If you do not want the applicable social media company to collect information about you when you use our Services, sign out of the social media network before visiting. By interacting with a plugin when you use our Services (for example, clicking the “Like” button), you are knowingly transferring information to that social media company. Further, if you are logged into a social media website when you visit our websites, then you are directing us to share your data with the social media company that owns the plugin.
Third-party links. Our Services may link to or contain links to third-party websites that we do not control or maintain, such as in connection with purchasing products we may reference via our Services and/or advertisements you may see while using our Services. We are not responsible for the privacy practices employed by any third-party website. We encourage you to read the privacy statements of all third-party websites before submitting any personally identifiable information through these websites.
Forums. We may offer chat rooms, blogs, message boards, or similar public forums where you and other users of our Services can share information and communicate – e.g., places where you can post your resume and/or profile. The protections described in this Privacy Policy do not apply when you post information (including personal information) to these forums. And we may use personal information to identify you with a post on any such forum. Any information you share with or on these forums is public information and may be seen or collected by anyone, including third parties that do not adhere to our Privacy Policy. We are not responsible for events arising from the distribution of any information you choose to publicly post or share through our Services.
9. Your Rights and Choices
Your rights may vary depending on where you are located. We have created mechanisms to provide you with the following control over your information:
Marketing. If you do not want us to use your email address or other contact information to promote or recommend our own products and services, or third parties’ products or services, you have the option to decline such use on the form where we collect your contact information. If you have an account with our Services, you may be able to log in and check or uncheck relevant boxes. If you do not have an account, you can adjust your preferences by contacting us as set forth below in the Contact Us section. You may also opt-out of further marketing communications that you have previously opted-in to by replying to any promotional email we have sent you or following the opt-out links on that message. This opt-out generally will not apply to information provided to us as a result of a product purchase, warranty registration, product service experience or other transactions.
Accessing, updating, and deleting your information. If you have an account with us, you may have the ability to access your information and make updates to or delete your data. You may also contact us as set forth in the Contact Us section below to request access to, correction of, or deletion of personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or negatively affect the information’s accuracy.
Streaming Information. If you inform us that you would like to discontinue use of our Services, we will suspend further collection of your information and, at your request, delete your information.
Cookies and automatic data collection technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Flash cookies are not managed by the same browser settings used for browser cookies. To learn how you can manage your Flash cookie settings, visit the Flash player settings page on Adobe’s website. However, if you disable or refuse cookies, please note that some parts of the Services may become inaccessible or not function properly.
Interest Based Advertising. Please see Interest-Based Advertising above for information on how to opt-out of interest-based advertising.
Depending on your jurisdiction, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR). These may include:
The right to access the personal data we hold about you
The right to correct inaccurate personal data
The right to request deletion of your personal data
The right to object to or restrict certain processing
The right to receive your data in a portable format
The right to opt out of personal data sales (note: CHRP does not sell personal data)
To exercise these rights, please email us at privacy@chrp.ai.
10. Data Security
The security of your information is very important to us. We use physical, electronic, encryption and administrative safeguards designed to protect your information from loss, misuse and unauthorized access, use, alteration, or disclosure. The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Services, you are responsible for keeping the password confidential. We retain personal data only as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Upon a user’s request or termination of use, we will delete or anonymize personal information unless retention is required to comply with legal obligations or regulatory requirements.
11. Changes to our Privacy Policy
We will post any changes we may make to our Privacy Policy on this page. If any change materially alters how we use or treat your personal information we will notify you by email to the primary email address specified in your account and/or through a notice posted on our Website or Application. The date the privacy policy was last revised is identified at the top of the page. Please check back frequently to see any updates or changes to our Privacy Policy.
12. Contact Us
If you have any questions about our privacy policy, or to exercise the specified rights above, you may contact us using the Contact Us page on the Website or at:
Address: 230 Franklin Rd. STE 12Q
Franklin, TN 37064
Phone: 615-241-0511
Email: privacy@chrp.ai
We will respond to your request and, if applicable and appropriate, make the requested change in our active databases as soon as reasonably practicable. Please note that we may not be able to fulfill certain requests while allowing you access to certain benefits and features of our Services.
13. Sole Statement
This Privacy Policy as posted on this Website or Application is the sole statement of our privacy practices with respect to this Website or Application. No summary, modification, restatement or other version of this Privacy Policy, or other privacy statement or policy, in any form, is valid unless we post a new or revised policy to this Website or Application.
14. Governing Law & International Users
This Privacy Policy is governed by the laws of the State of Tennessee, United States, without regard to its conflict of law principles. If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
0156094.0797871 4904-8410-5995v1