Privacy Policy
Last updated: 3 September 2026 · Effective: 3 September 2026
An rezime an Kreyòl
Kisa nou kolekte. Non ou, nimewo telefòn ou, adrès ou, sa ou di nou nan mesaj yo, repons ou nan Tès Powozite Dijital Chevu a, ak kòmand ou pase yo.
Poukisa. Pou nou reponn ou, pou nou konprann cheve ou, pou nou livre kòmand ou, epi pou nou amelyore sèvis nou.
Ak ki moun nou pataje l. Sèlman ak konpayi ki ede nou fè travay la — pa egzanp WhatsApp pou voye mesaj, oswa yon sèvis livrezon. Nou pa vann done ou. Janmen.
Dwa ou. Ou gen dwa mande nou kopi done ou, korije yo, oswa efase yo. Ekri nou nan privacy@chevuproducts.com oswa nan WhatsApp nou an.
Rezime sa a la pou ede ou konprann. Tèks konplè an Anglè anba a se li ki gen valè legal.
1. Who we are
Chevu is a hair-care company built on the belief that hair grows on a system, not a shelf. We were founded in 2016. Since then more than 4,500 clients have worked through our system with us, and more than 15,000 people have taken the Tès Powozite Dijital Chevu.
Cheve n An Sante is Chevu's first Haitian community, and chevenansante.com is its website. This policy covers Chevu and every community and service we operate.
In this policy, “we”, “us” and “Chevu” mean Chevu and its operating entities. “You” means anyone who talks to us, buys from us, takes our porosity test, or visits our sites.
2. What this policy covers
This policy applies to:
- our websites, including chevenansante.com and chevuproducts.com;
- conversations you have with us on WhatsApp, Facebook Messenger and Instagram Direct;
- the Tès Powozite Dijital Chevu and our hair-analysis tools;
- orders, deliveries and payments;
- our courses (Fòmasyon) and email we send you.
It does not cover what Meta, Google or any other company does with your data under their own policies. When you message us on WhatsApp, Messenger or Instagram, Meta also processes that message as the platform operator, under Meta's Privacy Policy.
3. Information we collect
3.1 Information you give us
- Contact details — your name or the name on your messaging profile, phone number, email address, and the delivery address you give us.
- What you tell us in conversation — the content of your messages to us on WhatsApp, Messenger, Instagram or our site, including photos, voice notes and documents you choose to send.
- Hair and scalp information — your answers to the Tès Powozite Dijital Chevu, the hair concerns you select (for example dandruff, dry hair, hair loss), and any photographs of your hair or scalp you send us for analysis.
- Order information — the products you ask for, the price agreed, the delivery date and city, and how you intend to pay.
- Course activity — the lessons you complete and your quiz results, if you enrol in Fòmasyon.
About hair and scalp photographs. Some laws treat health-related information as a special category. We ask for hair and scalp photographs only to give you a hair assessment you asked for. We do not use them to identify you, we do not use them for advertising, and we do not sell them. If you would rather not send a photograph, tell your agent — the consultation still works without one.
3.2 Information we collect automatically
- Device and usage data — IP address, browser and device type, pages viewed, and the actions you take on our sites.
- Cookies and similar technologies — including the Meta Pixel and Google Analytics. See section 9.
- Delivery location — when a delivery is in progress, our field agents' devices record location so we know a delivery was made and so we can keep our agents safe on the road. This is about the delivery, not about tracking you.
3.3 Information from other sources
- Messaging platforms. When you message us, Meta gives us your platform-scoped identifier (a WhatsApp number, a Messenger PSID or an Instagram IGSID), your public profile name and profile picture, and the message itself.
- Advertising. If you reach us by clicking an ad, we receive a referral identifier telling us which ad brought you, so we can measure whether our advertising works.
- Lead forms. If you fill in a Meta lead form, we receive the answers you submitted.
4. Meta Platform Data — how we use it, specifically
We are naming this separately because it matters and because people ask.
When you send us a message on WhatsApp, Facebook Messenger or Instagram Direct, we receive that message and your platform identifier. We use it for exactly one purpose: so a member of our team, or our assistant, can answer you.
Concretely, that means we:
- show your conversation to our own staff in our internal dashboard, so whoever answers can see what you already told us and does not make you repeat it;
- keep your message history so the next agent has context;
- attach your order and delivery details to the conversation, so we can tell you where your delivery is.
We do not:
- message you first unless you messaged us, or you asked us to;
- send bulk or unsolicited marketing on Instagram Direct or Messenger;
- sell, rent or trade Meta Platform Data;
- export your Instagram or Messenger messages to any third party, or use them to build advertising audiences;
- use Platform Data to make decisions about credit, insurance, housing, employment or any similar eligibility.
We handle Meta Platform Data in line with the Meta Platform Terms and Developer Policies. If you tell us to stop messaging you, we stop.
5. How we use your information
| What we do | Why |
|---|---|
| Answer your messages and consult on your hair | To provide the service you asked for |
| Produce your porosity result and hair routine | To provide the service you asked for |
| Take, confirm, dispatch and deliver your order | To perform our agreement with you |
| Contact you about a delivery or an order | To perform our agreement with you |
| Take payment and keep financial records | Legal obligation and our legitimate interest |
| Send educational content and offers, where you have agreed | Your consent — withdrawable at any time |
| Measure whether our advertising and content work | Our legitimate interest in running a viable business |
| Detect fraud, abuse and keep our field agents safe | Our legitimate interest in safety and security |
| Improve our products, our system and our service | Our legitimate interest in improving what we sell |
Where the law requires consent — for marketing messages, and for non-essential cookies — we ask for it, and you can withdraw it at any time without affecting the service you have already received.
6. Automated assistance and AI
Some of our first replies are written by an assistant rather than a person. It reads your message and the context of your conversation so it can answer common questions immediately, at any hour. To do that, message content may be processed by our AI providers (OpenAI, Anthropic and Google) under contracts that forbid them using your data to train their general models.
Two things we want to be plain about:
- A person is always reachable. Ask for a human and you will get one.
- No automated decision has a legal or similarly significant effect on you. Prices, hair advice and delivery decisions are reviewed by our team. Nothing about your money or your access to our service is decided by a machine alone.
7. Who we share it with
We do not sell your personal information, and we never have.
We share it only with companies that do a specific job for us, under contracts that require them to protect it and forbid them using it for their own purposes:
| Who | What for |
|---|---|
| Meta Platforms | Delivering messages on WhatsApp, Messenger and Instagram; advertising measurement |
| Google Cloud & Firebase | Hosting, databases and file storage — where your data actually lives |
| Google (Vertex AI / Gemini) | Hair-photo analysis and assistant replies |
| OpenAI, Anthropic | Assistant replies |
| Twilio | Legacy messaging delivery |
| Stripe | Card payments — card numbers go to Stripe, never to us |
| SendGrid | Sending email and telling us whether it arrived |
| Mixpanel, Google Analytics, Customer.io | Understanding how our service is used, and lifecycle messaging |
| Pinecone | Search over our own product and education content |
| Delivery agents | Your name, address and phone number — only for the delivery in hand |
We may also disclose information where the law requires it, to enforce our terms, to protect someone's safety, or as part of a merger or sale of the business — in which case we would tell you first.
7.1 Government and law enforcement requests
We review every request from a public authority for legal validity before responding, and we refuse or challenge requests that are unlawful or overbroad. Where we must respond, we disclose the minimum information necessary to satisfy the request, and we record what was requested and what we provided.
8. Where your information is stored
Chevu operates from Haiti and serves Haiti and the Haitian diaspora. Our systems run on Google Cloud infrastructure located in the United States, and the providers listed above may process data in the United States and the European Union.
Where personal information leaves your country, we rely on the transfer safeguards our providers offer, including the European Commission's Standard Contractual Clauses where they apply.
9. Cookies and tracking
Our websites use:
- Essential cookies — to keep you signed in and keep your cart. These cannot be switched off without breaking the site.
- Analytics — Google Analytics and Mixpanel, to see which pages help people and which do not.
- The Meta Pixel and Conversions API — to measure whether our advertising leads to real orders. This may involve sharing a hashed identifier with Meta.
You can clear or block cookies in your browser. Blocking essential cookies will stop parts of the site working.
10. How long we keep it
| What | How long |
|---|---|
| Conversations and message history | While you are a customer and for up to 3 years after your last contact, so an agent can pick up where you left off |
| Orders, invoices and payment records | Up to 10 years, because tax and accounting law requires it |
| Porosity results and hair routines | While your account is active, so you can look them up again |
| Hair and scalp photographs | Deleted on request; otherwise kept with your consultation record |
| Delivery location records | Retained as a safety and dispute record for our field agents |
| Marketing preferences and opt-outs | Indefinitely — we must remember that you said no |
When a retention period ends we delete the information or anonymise it so it can no longer be linked to you.
11. Your rights
Wherever you live, you can ask us to:
- Access — give you a copy of what we hold about you;
- Correct — fix anything that is wrong;
- Delete — erase your information, except what we must keep by law;
- Object or restrict — stop or limit a particular use;
- Port — receive your data in a machine-readable file;
- Withdraw consent — for marketing, or for anything else you agreed to;
- Complain — to your local data protection authority.
We do not charge for this, we do not discriminate against you for asking, and we will answer within 30 days.
11.1 How to delete your data
Two ways, both free:
- Message us on WhatsApp, Messenger or Instagram and say “delete my data”. The agent will confirm your identity and pass the request on.
- Email privacy@chevuproducts.com from the address you gave us, or include the phone number you message us from.
We will confirm within 30 days. Information we are legally required to keep — invoices, for example — stays until its retention period ends, and we will tell you exactly what that is.
12. Marketing, and how to stop it
We send educational content and offers only to people who agreed to receive them. Every email has an unsubscribe link. On WhatsApp, reply STOP and we stop. On Messenger and Instagram we do not send marketing messages at all.
Stopping marketing does not stop service messages — a delivery confirmation, or an answer to your question.
13. Children
Our service is for adults. We do not knowingly collect information from children under 13, or under 16 where local law sets that age. If you believe a child has given us information, write to privacy@chevuproducts.com and we will delete it.
14. Security
We protect your information with encryption in transit and at rest, access controls that limit staff to what their role requires, credentials held in a managed secret store, and audit logs of who changed what. Our field agents see only the deliveries assigned to them, and customer contact details are masked for roles that do not need them.
No system is perfectly secure. If a breach ever affects your personal information, we will tell you and the relevant authority as the law requires.
15. Changes to this policy
We will update this page when our practices change, and change the date at the top. If a change materially affects your rights, we will tell you directly — by email or in the channel you talk to us on — before it takes effect.
16. Contact us
Questions about this policy, or about your data:
- Email: privacy@chevuproducts.com
- WhatsApp: +1 908 540 7766
- Web: chevenansante.com
We answer in Kreyòl, French or English.