1. Who we are
Clubl (“Clubl”, “we”, “us”, “our”) provides membership management software for clubs and associations. This policy applies to the Clubl website and application at clubl.app and its subdomains. We are based in Australia and handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. The roles: club and member data
Clubl serves two kinds of people, and our role differs for each:
- Clubs (our customers). When a club signs up, we collect and control the account information needed to provide the service and bill for it.
- Members of those clubs. When a club adds its members to Clubl, the club decides what member information to store and why. For that data, the club is the controller and Clubl is a processor acting on the club’s behalf and instructions. Members should direct requests about their data to their club in the first instance.
3. Information we collect
Information you give us
- Account details — name, email address and password (stored hashed).
- Club details — club name, address, time zone, and settings.
- Member records a club chooses to store — which may include names, contact details, addresses, dates of birth, membership status and notes.
- Messages you send us, such as demo requests and support enquiries.
Information collected automatically
- Basic technical and usage data — IP address, browser type, and pages visited — used to keep the service secure and reliable.
- Essential cookies required to sign you in and keep you signed in. We do not use advertising cookies.
Payment information
Payments are processed by Stripe. Card numbers are entered directly with Stripe and are never stored on Clubl’s servers. When a club takes card payments from its own members, those payments flow directly to the club’s connected Stripe account — the club is the merchant of record, not Clubl.
4. How we use information
- To provide, maintain and improve the Clubl service.
- To process subscriptions and send billing-related communications.
- To send transactional emails on a club’s behalf — such as renewal reminders, invoices and event notices.
- To respond to enquiries and provide support.
- To keep the service secure and prevent misuse.
- To comply with our legal obligations.
We do not sell personal information, and we do not use member data for our own marketing.
5. Sharing and disclosure
We share information only where necessary to run the service:
- Service providers who help us operate — including Supabase (database and authentication hosting), Stripe (payments), Resend (transactional email) and Vercel (application hosting). Each processes data on our behalf under their own security obligations.
- A club’s own staff, who can access that club’s member records as part of running the club.
- Legal and safety — where required by law, or to protect the rights, property or safety of Clubl, our customers, or the public.
6. Data storage and security
Data is protected by strict tenant isolation (row-level security), so one club can never see another’s data. Passwords are hashed, connections are encrypted in transit, and access is limited to what each role needs. Members are read-only by default and can only propose changes for staff to approve. No system is perfectly secure, but we take reasonable steps to protect the information we hold.
7. Data retention
We keep account and member data for as long as a club maintains its account, and for a reasonable period afterwards to meet legal, accounting and dispute-resolution needs. A club can delete member records at any time, and can ask us to delete its account data when it stops using Clubl.
8. Your rights and choices
Subject to law, you may request access to the personal information we hold about you, ask us to correct it, or ask us to delete it. If you are a member of a club, please contact your club first, as they control your member record. For account-level requests, contact us at admin@clubl.app. We will respond within a reasonable time.
9. Overseas transfers
Some of our service providers may store or process data outside Australia. Where that happens, we take reasonable steps to ensure the information is handled consistently with the Australian Privacy Principles.
10. Children
Clubs may store records for junior members with appropriate consent from a parent or guardian. Clubl’s administrative accounts are intended for adults responsible for running a club.
11. Changes to this policy
We may update this policy from time to time. When we make material changes, we’ll update the “Last updated” date above and, where appropriate, notify account holders.
12. Contact and complaints
For any privacy question or complaint, email admin@clubl.app. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.