6,047 words, 150 clausesupdated 15 February 2026read 13/10/2026source
·Effective Date: 15 February 2026 For prior version, please click here
·CHARGEBEE INC. ("Chargebee", "We", "Us" or "Our") respects Your privacy and is committed to protecting the personal information that We process. This Privacy Notice describes how Chargebee collects, uses, shares and otherwise processes the personal information of individuals, including choices and rights that may be available to such individuals with respect to their personal information.
·This Privacy Notice applies to all customers and end customers of Our products, visitors of the websites www.chargebee.com, www.brightback.com, www.rev-lock.com, www.numberz.co and https://inai.io/ ("Website") and individuals who interact with Us or with whom We engage, where We control or determine the means and purposes of processing their personal information ("You" or "Your"). Such interactions include, but are not limited to, recruitment activities, participation in events or webinars We host, outreach to potential customers, and collaborations with Our partners and service providers. It applies to personal information that We collect directly from You, that We automatically collect when You use Our products and Websites, as well as personal information that We collect about You from third party sources.
·We encourage You to read this Privacy Notice in conjunction with any additional information that We may provide to You at the time of collection or processing of Your personal information, including any notices specific to such engagement.
·The nature of Our business may require Us to process personal information on behalf of and at the direction of Our customers. This Privacy Notice does not apply to such activities or personal information. If We process Your personal information on behalf of one of Our customers and You would like to make a related inquiry or exercise choices that Our customers may provide, please contact the customer that You interact with directly.
·If You are a California resident, the "Additional information for California residents" section below contains information that We provide pursuant to the California Consumer Privacy Act ("CCPA"). That section includes information regarding categories of information We collect, the purposes for which We collect those categories of information, whether the information is sold or shared and how to opt out, and how long the information is retained. You can find those details by clicking on the above links.
·Information We collect directly from You:
·The information that We collect from You depends on how You are engaging with Us and what information You choose to provide Us. We have listed below certain scenarios and the personal information that We may collect in such scenarios.
·We may also collect certain information automatically when You use Our Websites and products such as:
·Our Websites and products may use technologies like cookies (which are small files placed on the hard drive of Your device to store data that can be recalled by Our Websites and products), session replay, pixels, web beacons, and other online tracking technologies to automatically collect information about You. Those cookies, session replay, pixels, web beacons, and other online tracking technologies may be provided by third parties. Those third parties may collect, receive, and record this information, and collect, receive, and record other information about Your online activities over time and across third-party websites and online services.
·For example, We may use analytics technologies like Google Analytics to learn more about how You use Our Websites and products. Google Analytics uses cookies to help Us analyze how visitors use Our Websites and products. For more information on Google Analytics, including how Google Analytics collects, uses, and discloses information, refer to the following page: www.google.com/policies/privacy/partners/. We may also use other technologies to automatically collect information and monitor Your activities on Our Websites and products.
·We may collect personal information about You from various sources, including the following sources:
·We may combine this with the information that We collect directly or automatically from You.
·The legal bases that We rely on to process Your personal information depends on the context and the purpose for which We collect the personal information. The legal bases that We typically rely on for collection and processing of Your personal information are:
·The legitimate interests that We pursue include providing, improving, and developing Our products, services and Websites, processing registrations and completing transactions, managing and administering Our organization, for corporate transactions, to comply with legal requirements, for security and protecting ours and others' rights, for sales, advertising, and marketing activities, for business and research purposes, for recruitment activities, and for other company initiatives.
·The specific purposes for which We process Your personal information depends on the context and purpose for which Your personal information was obtained as well as relevant business and legal requirements. We may process Your personal information for one or more of the following purposes:
·We may use artificial intelligence and machine learning capabilities offered by third parties as well as those built by Us in order to process Your personal information for the purposes set out above. Such processing shall be in line with this Privacy Notice and commitments made herein. In certain cases, Your information may also be used to help improve the accuracy, efficiency, and overall performance of such capabilities.
·We implement commercially reasonable security measures designed to ensure a level of security appropriate to the risks to Your personal data.
·We retain Your personal information for as long as required to satisfy the purpose of collection and processing, as required to fulfill Our legal obligations as well as for enforcing Our agreements. We determine the appropriate retention period for personal information on the basis of the amount, nature, and sensitivity of the personal information being processed, the potential risk of harm from unauthorized use or disclosure of the personal information, whether We can achieve the purposes of the processing through other means, and any applicable legal requirements. For example, We will retain certain identifiers for as long as it is necessary to continue maintaining Your account and providing You our products and services, to comply with applicable tax, accounting, and record-keeping obligations, to administer certain warranties, and for research, development, and safety purposes, as well as an additional period as necessary to protect, defend, or establish Our rights, defend against potential claims, and to comply with Our legal obligations.
·Typically after expiry of the applicable retention periods, Your personal information will be deleted, unless such deletion is rendered impractical or unreasonably burdensome due technical or other reasons, including where it becomes technically impossible, data retained as part of automatic archiving and back-up procedures, In such cases where any information is retained, We will implement appropriate measures designed to prevent misuse of such information. In certain circumstances, We may anonymize Your personal information so that it can no longer be associated with You, in which case We may use such information without further notice to You.
·Yes, We may disclose Your information with third parties listed below for the purposes set forth in this Privacy Notice.
·We may process Your personal information outside the jurisdiction in which You are located, including in the United States, European Union, India, Australia. The data protection laws may differ from those in Your jurisdiction and may not provide the same level of data protection compared to the laws in the jurisdiction in which You are located.
·However, when We transfer Your personal information internationally, We will rely on frameworks or measures designed to provide appropriate safeguards in compliance with applicable laws, such as execution of Standard Contractual Clauses, binding corporate rules, or another framework deemed adequate by relevant regulators for transfers of personal information originating from the European Economic Area ("EEA") and United Kingdom ("UK").
·Certification under EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Data Privacy Framework
·Chargebee participates in and complies with the EU-U.S. Data Privacy Framework ("EU-U.S. DPF"), the UK Extension to the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework ("Swiss-U.S. DPF") as set forth by the U.S. Department of Commerce. Chargebee has certified to the U.S. Department of Commerce that it adheres to (a) the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles), with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar if applicable) in reliance on the UK Extension to the EU-U.S. DPF; and (b) Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Notice and the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view Our certification, please visit https://www.dataprivacyframework.gov/.
·When Chargebee transfers personal data as a data controller to a third party acting as an agent on Our behalf, We shall remain liable under the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, as applicable, if any third party that We share Your information with processes Your information in a manner inconsistent with the EU-U.S. DPF Principles, UK extension to the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF EU-U.S. DPF Principles, unless We prove that We are not responsible for the event giving rise to the damage.
·In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Chargebee commits to
·The Federal Trade Commission has jurisdiction over Chargebee's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain circumstances, We may be required to disclose personal data in response to the lawful requests by public authorities, including to meet national security or law enforcement requirements.
·An EU, UK or Swiss individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding DPF compliance not resolved by any of the other DPF mechanisms (additional information can be found in Annex I to the DPF).
·We have described below certain privacy rights We may offer to You depending on the data protection law that applies. There may be limitations or exceptions that apply to Your request in accordance with applicable data protection law. We have described these rights generally, without noting all applicable or potentially applicable limitations or exceptions. When You make a request, We may provide more information regarding any legal requirements applicable to Your request and whether any exception or limitation applies.
·If You are a California resident, please see the Additional information for California residents section below.
·In order to exercise Your rights, You may contact Us at the email address set forth in the 'Contact Us' section below with details of the right You intend to exercise, the details or nature of personal information with respect to which You intend to exercise the right, Your location, and where known, the law under which You are exercising this right. Alternatively, You may submit a request here. In certain cases, We might require additional information from You in order to address Your request or to verify Your identity.
·Where We have made available specific ways to opt-out of certain communications and processing, We encourage You to exercise Your rights using such specified ways, such as,
·Kindly note, some web browsers and mobile operating systems offer a "Do Not Track" setting that You can activate to signal Your preference not to have information about Your online browsing activities monitored and collected. Currently, Our Website, products and services do not recognize "Do Not Track" signals.
·Third Party links: In certain cases, We may include links to third party websites and products. These third party websites and products have separate and independent terms and privacy policies. Since We neither own nor control such websites and products, We are not responsible or liable for the content and activities of these websites or products. We encourage You to review those third parties' terms and privacy policies to understand their privacy practices.
·Blogs: Our Websites may include references to publicly accessible blogs. The comments on Our blog may be managed by a third party application that may require You to register to post a comment. We do not have access or control of the information posted to the blog comments. You will need to contact or login into the third party application if You want Your personal information that was posted to the comments section removed. To learn how the third party application uses Your information, please review their privacy policy.
·Our Website is not intended for use by individuals under the age of 18 years or who are otherwise considered as minors under the law they are subject to, and consequently, such individuals are prohibited from using Our Website or engaging with Us. We do not knowingly collect any personal information from such individuals and You are also prohibited from sharing personal information pertaining to such individuals to Us. If You are a parent or legal guardian and believe Your child has given Us information and You did not provide consent, please contact Us at the email and address provided below under "Contact Us".
·This section provides additional details about the personal information We collect about California residents as required by the CCPA. For avoidance of doubt, this section applies only to California residents and their personal information We collect as a Business (as defined in the CCPA). This section does not address or apply to Our handling of personal information or deidentified information that is exempt under the CCPA or the personal information that We handle in our capacity as a Service Provider (as defined in the CCPA) on behalf of Our customers.
11. Collection and Sources of Personal Information. The categories of personal information We have collected in the last twelve (12) months and that We may collect include :
·We may obtain these categories of personal information from the sources discussed in the "What personal information do We collect about You?" section above.
22. Purposes of Collection. We collect this personal information for the business purposes described in the "What do We use Your personal information for?" section above. Notwithstanding the foregoing, we do not use, disclose, or otherwise process personal information defined as sensitive personal information under the CCPA for purpose inconsistent with those in California Code of Regulations tit. 11, § 7027(m).
33. Disclosure of Personal Information. We have disclosed the categories of personal information listed in clause 1 above for a business purpose in the twelve (12) months and may disclose such personal information to service providers, contractors or other third parties who support Our business and as otherwise described in the "Do We disclose Your information to Third Parties?" section above.
44. Sale and Sharing of Personal Information.
·While We do not "sell" personal information in the traditional sense (i.e., for money), CCPA defines "sale" very broadly and We may be considered as "selling" personal information as that term is defined in the CCPA through Our use of third-party analytics and advertising cookies. We may also "share" personal information, as defined in the CCPA, for cross-context behavioral advertising purposes with unaffiliated third parties. Cross-context behavioral advertising means displaying advertising to You based on personal information obtained or inferred from Your activities over time across different websites, applications, or other online services We do not operate. In the twelve (12) months prior to the effective date of this Privacy Notice, We may have sold/shared (as defined under the CCPA) the following categories of personal information to facilitate Our advertising efforts:
·We may "sell" or "share" these categories of information with advertising partners and ad networks that enable or participate in cross-context behavioral advertising, social media platforms, analytics partners, and providers of technologies like cookies, session replay, pixels, web beacons, and other online tracking technologies We may use to automatically collect information about You. We may engage in sales and sharing of personal information for cross-context behavioral advertising for purposes of delivering or facilitating cross-context behavioral advertising, marketing and performing analytics.
·Additionally, We do not and will not sell personal information or share personal information for cross-context behavioral advertising if We have actual knowledge that a consumer is less than 16 years of age. We do not have actual knowledge that We "sell" or "share" personal information from individuals under 16 years of age. To exercise Your right to opt-out of sale/sharing, please see below.
·Rights of the residents of the State of California : You have certain rights, subject to certain limitations under applicable law, with respect to Your personal information, including:
·a. With respect to personal information collected about You in the twelve (12) months prior to the effective date of this Privacy Notice, right to request for:
·b. The right to request the correction of inaccurate personal information collected. We will take in account the nature of the personal information and the purposes of Our processing when We address Your request.
·c. Subject to certain exceptions, the right to request deletion of Your personal information.
·d. The right to "opt out" of any sale of personal information or sharing of personal information if such sale or sharing occurs. You may exercise this right by clicking the "Do not sell or share my personal information" link in the website footer.
·We have configured Our websites to process opt-out preference signals (i.e., Global Privacy Control) that may allow You to inform Us of Your desire to opt out of sales or sharing as described in the above paragraph. In order to recognize the signal, the browser must send the following HTTP header: Sec-GPC: 1. If We detect an opt-out preference signal from you, non-essential cookies will be disabled, and it cannot be re-activated. You may not be shown the cookie consent banner since all non-essential cookies are disabled.
·e. The right to request to receive a copy of Your personal information in a readily-usable format to the extent feasible.
·f. The right to limit use and disclosure of sensitive personal information in specific instances as set forth in CCPA.
·g. The right not to be discriminated against for exercising Your rights under CCPA.
·California residents who have an established business relationship with Us may request information about disclosures of certain personal information (as defined in California's "Shine the Light" law) during the preceding year, if any, to third parties for those parties' own direct marketing use. If You are a California resident with an established business relationship with Us and wish to exercise rights under the "Shine the Light" law, please send Your written request by mail to Chargebee Inc. ATTN: "Shine the Light" Privacy Request 909 Rose Avenue, Suite 950, North Bethesda, MD 20852. Please include in Your request your California address of residency.
·Exercising California Access, Data Portability, Deletion, or Correction Privacy Rights
·California consumers or an authorized agent that You authorize to act on behalf may make a request to exercise rights under the CCPA by contacting Us at privacy@chargebee.com or via mail to Our postal address set forth above. Your request must provide information sufficient to permit Us to reasonably verify that You are the person about whom We collected personal information or an authorized agent (except for requests submitted via opt-out preference signal). In order to verify Your request, We may ask You to provide information such as Your first and last name, email address, mailing address, and any other information necessary to verify Your identity or that You are an authorized agent of the requestor. Your request must also include sufficient detail for Us to properly understand, evaluate, and respond to it.
·If We are unable to verify Your identity after a good faith attempt, We may deny the request and, if so, We will explain the basis for the denial.
·We may change or update this Privacy Notice from time to time. If We change or update this Privacy Notice, We will update the Effective and Last Updated date at the top of the page. If We make any material changes adversely affecting Your rights, We may notify You (for example, by means of a notice or banner on this website, or where You are a customer of Chargebee, by sending a notice to an email address associated with Your account, or through an in-product banner or notification). We encourage You to periodically review this page for the latest information on Our privacy practices.
·If You have there are any questions regarding this Privacy Notice, or Chargebee's privacy practices, You may contact Us at: