Privacy Policy

Last updated: February 22, 2026

Membership values privacy and data protection. This Privacy Policy describes what information we collect, how we use it, and what rights users have when using the Membership web application and related services.

1. Information We Collect

We may collect and process the following categories of data:

  • Account details, such as email, display name, and authentication data
  • Organization and membership records, including roles, status, and applications
  • Operational metadata, such as login events, timestamps, and audit actions
  • Communication data submitted through support or administrative workflows
  • Technical data including IP address, browser, and device information

2. How We Use Information

We use personal data to operate and improve Membership, including to:

  • Authenticate users and secure accounts
  • Provide organization management features and membership processing
  • Enforce role-based access and platform security controls
  • Maintain auditability for administrative actions
  • Provide support and respond to service issues
  • Comply with legal obligations

3. Information Sharing

We share data only when needed for service operation or legal compliance:

  • With authorized organization administrators and staff based on access rights
  • With trusted infrastructure and service providers acting on our behalf
  • When required by applicable law, regulation, or valid legal process
  • As part of business continuity, security, and fraud-prevention processes

4. Data Retention

We retain data for as long as needed to deliver the service, maintain required audit trails, and meet legal obligations. Retention periods may differ by data type and contractual requirements with organizations.

5. Security

We use technical and organizational measures to protect data, including access controls, secure transport, and monitoring. No system is fully risk-free, but we continuously improve security practices.

6. Your Rights

Depending on applicable law, users may have rights to:

  • Access the personal data held about them
  • Request correction of inaccurate or incomplete data
  • Request deletion where legally applicable
  • Object to or restrict certain processing
  • Receive a portable copy of eligible data
  • Withdraw consent where processing is consent-based

7. International Transfers

If data is processed outside the user's country, we apply reasonable safeguards and contractual controls to protect personal information.

8. Children

Membership is not intended for children under the age required by applicable law. We do not knowingly process children's personal data without a lawful basis.

9. Policy Updates

We may update this policy from time to time. Material updates will be reflected on this page together with an updated effective date.

10. Contact

Questions about privacy can be sent to legal@membership.app.