Privacy Policy

1. Account and profile data

When you create an account we store your email address, authentication identifiers and any profile details you choose to add, such as your name, photo, headline, location, bio and links. Profile details are optional beyond what is needed to sign in.

2. Organization and membership data

Membrly is multi-tenant. Each organization has its own members, roles and content. We store organization records, membership records, roles (owner, admin, member), membership status, invitations you send or accept, and the organization-specific profile you maintain inside each community you join.

Organization owners and administrators can see membership records, roles and member-submitted content within their own organization. They cannot see data belonging to other organizations.

3. Content you submit

Depending on which modules your community enables, we store:

• Business listings and directory entries you publish
• Job postings and job applications
• Events, event registrations and attendance records
• Mentorship profiles, mentorship requests, relationships and session reports
• Community posts, comments, announcements and reactions
• Notifications generated by activity inside your organization

Some of this content is visible to other members of the same organization by design. Directory visibility choices you make in your organization profile control what fellow members can see.

4. Authentication and session storage

Sign-in is handled by our authentication provider. Your browser stores a session token locally so you stay signed in; clearing site data signs you out. We use cookies and local storage for authentication and essential app function. We do not run advertising trackers.

5. How we use data

• To operate your account and the organizations you belong to
• To show members the directory, events, jobs, listings and discussions of their own organization
• To send authentication and service emails such as sign-in links, confirmations and password resets
• To keep the service secure, prevent abuse and diagnose faults
• To improve the product based on aggregate usage patterns

We do not sell your personal data.

6. Service providers and infrastructure

Membrly runs on third-party infrastructure. Database, authentication and storage are provided by Supabase; hosting, build and delivery are provided through Lovable and its hosting partners; transactional and authentication emails are sent through our email delivery provider. These providers process data on our behalf so that the service can function.

7. Payments

No live payment processing is currently enabled. Membrly does not collect or store card details. Subscription records that exist today are internal plan/trial markers only. If paid plans launch, we will update this policy before charging anyone.

8. Security

Data is stored in managed cloud infrastructure and access is restricted by per-organization access rules enforced at the database level, so members of one organization cannot read another organization's data. We use encrypted connections. No system can be guaranteed completely secure, and we make no certification claims: Membrly has not been independently audited or certified against any specific security or privacy standard.

9. Retention

We keep account, organization and content data for as long as the account or organization is active. If you delete content it is removed from the app; backups and operational logs may retain copies for a limited period. You can ask us to delete your account and associated personal data, subject to records we must keep for security or dispute-resolution purposes.

10. Your choices and requests

• Update or correct your profile at any time from your account and organization profile pages
• Adjust directory visibility settings inside each organization
• Leave an organization, which removes your membership from that community
• Request a copy of your data, or request deletion, by contacting us

Depending on where you live you may have additional statutory rights. We handle requests on a good-faith basis; we do not claim compliance with any specific jurisdictional framework that has not been formally assessed.

11. Children

Membrly is intended for adults and for members admitted by their community. It is not designed for children.

12. Changes to this policy

We may update this policy as Membrly evolves. Material changes will be reflected by a new last-updated date on this page.

13. Contact

For privacy questions or data requests, email our current beta support address at support@membrly.ca.