Privacy Policy
Effective date: May 25, 2026 · Last updated: September 4, 2026
ClubCabinet (“we,” “our,” or “us”) provides an operating workspace for member-led organizations. This Privacy Policy describes how we collect, use, store, and share information when you use ClubCabinet.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and a password hash. We never store plaintext passwords.
Club and Membership Data
Information you add to your club workspace — including member directories, roles, event details, RSVP responses, meeting notes, recruiting pipeline entries, treasury records, and paper trading activity — is stored on your behalf and is accessible to other members of your club according to the permissions you and your club administrators configure.
Usage Information
We collect error and performance data through Sentry to help us diagnose bugs and improve reliability. This data includes browser type, page URLs, and stack traces for errors you encounter. We configure monitoring to minimize and scrub sensitive request data, and we do not intentionally send your club’s private content to Sentry.
Communications
If you contact us by email, we retain your message and contact details to respond and follow up.
2. How We Use Your Information
- To create and maintain your account
- To provide the ClubCabinet workspace features to you and your club
- To send transactional emails (event reminders, invitations, password resets) that you or your club administrators have triggered
- To diagnose errors and improve platform stability
- To respond to your support inquiries
- To comply with legal obligations
We do not sell your personal information and do not use your data to serve third-party advertising.
3. Who Can See Your Information
Within a club workspace, visibility is role-based and controlled by your club’s administrators. Generally:
- Club administrators can see all member data, roles, and activity within their club.
- Officers and members can see information appropriate to their role (e.g., all-member events, shared resources).
- Other clubs cannot see your club’s data. Each club’s data is isolated.
- ClubCabinet staff may access data to provide support or investigate abuse, under strict internal confidentiality practices.
4. Third-Party Services
We rely on the following sub-processors to operate ClubCabinet:
- Supabase — database, authentication, and file storage (hosted on AWS)
- Resend — transactional email delivery
- Sentry — error monitoring and performance tracing
- Vercel — application hosting and edge delivery
Each sub-processor has its own privacy and security practices. We choose sub-processors that maintain appropriate data protection standards.
5. Data Retention
We retain your account and club data for as long as your account or club is active. If you request deletion of your account, we will remove your personal information within 30 days, subject to any legal holds or legitimate business needs (e.g., financial records required by law). Anonymized or aggregated data may be retained indefinitely.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Data portability
To exercise any of these rights, email us at clubcabinetsupport@gmail.com. We will respond within 30 days.
7. Security
We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, row-level security policies, and role-based access controls. No system is completely secure; if you believe you have found a security vulnerability, please report it responsibly to clubcabinetsupport@gmail.com.
8. Children
ClubCabinet is not directed at children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice in the application at least 14 days before they take effect. Continued use after the effective date constitutes acceptance of the updated policy.
10. Contact
For privacy questions or requests, contact us at clubcabinetsupport@gmail.com.