Legal

Privacy Policy

This policy explains what data ClubPay processes and why.

Last updated: 12 June 2026

1. What we collect

We collect account details such as name, email, password hash, profile image, creator profile data, subscription status, payment metadata from Stripe, newsletter engagement, and basic usage events needed to operate the service.

2. How we use data

We use personal data to authenticate users, deliver memberships, process payments, send transactional email, provide creator analytics, prevent abuse, and improve product reliability. Marketing email is sent only according to your subscription preferences.

3. Payment processing

Stripe processes card payments and creator payouts. ClubPay stores Stripe customer IDs, subscription IDs, and payment records needed for billing support and reconciliation. Full card numbers are not stored on ClubPay servers.

4. Media and creator content

Creator uploads are stored in Cloudflare R2 or equivalent object storage and served to authorized viewers. Creators control visibility settings for public, member-only, and tier-specific posts.

5. Analytics and monitoring

We may use privacy-conscious analytics and error monitoring tools such as PostHog, Vercel Analytics, and Sentry to understand product usage and diagnose failures. Sensitive post content is not intentionally sent to analytics providers.

6. Retention and deletion

We retain account, billing, and audit records as needed for legal, tax, fraud-prevention, and support obligations. You may request account deletion or marketing unsubscribe through in-product controls where available.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal data. Contact us through your account settings or support channels and we will respond within a reasonable period.

8. International transfers

ClubPay may process data in Hong Kong and through infrastructure providers located in other countries. We use contractual and technical safeguards appropriate to the services we operate.

9. Security

We apply rate limiting, verified webhooks, role-based access, and industry-standard transport security. No online service can guarantee absolute security, so please use a unique password and keep your email secure.

10. Updates

This Privacy Policy may change as the product evolves. We will update the date at the top of this page when material changes are made.