Privacy policy
Last updated: [DATE]
Draft for review. Plain-language starting point, not legal advice. Have a solicitor complete the square-bracket details before you rely on it.
1. Who we are
[COMPANY NAME], [ADDRESS] is the controller of your personal data. Contact: [EMAIL].
2. What we collect
- Account: your email address, used to send your sign-in link.
- Use of the service: deck time used, purchases, Pro status, chat messages and rooms you join.
- Payments: handled by Stripe. We never see or store your card details.
- Technical: basic logs such as IP address and browser type, for security and to keep the service running.
3. Why we use it
To provide the service and your account, take payments, keep the club safe, and meet legal obligations. Our legal bases are contract, legitimate interests and, where needed, consent.
4. Who we share it with
Service providers who run the service for us: hosting (Vercel), database and sign-in (Supabase), payments (Stripe). We do not sell your data.
5. How long we keep it
While your account is open, then only as long as the law or a dispute requires. [Retention periods to be added.]
6. Your rights
You can ask to see, correct, export or delete your data, object to how we use it, or complain to the Information Commissioner's Office (ico.org.uk). Email [EMAIL].
7. Children
Club Cloud is for people aged [18] and over.
8. Cookies
See our cookie policy.