Privacy

Whose data this is

A club's records belong to the club. We hold them so the software can do its job, and for no other purpose. We do not sell them, we do not rent them, and we do not use one club's data to advertise to another.

We do not train AI models on your members. Where AI is used at all it is a single request that drafts text a person then edits — nothing is retained for training by us, and the provider is instructed accordingly. There is a separate page on exactly how AI is used.

Who can see a club's roster

This is the question boards actually ask, so it gets a direct answer.

• Members of that club, according to the office they hold. A member sees the directory; a membership chair sees the pipeline; a treasurer sees dues.
• A district governor sees club-level rollups — health scores, membership counts and trends — not individual member records.
• An assistant governor sees detail only for the clubs they are assigned to.
• Nobody at another club, ever. Cross-club sharing strips names, addresses, phone numbers and amounts before anything leaves, buckets dates to the week, and refuses to share at all into a group too small to be anonymous.
• Us, only when a club asks for help with a specific problem, and access is logged.

What the public page shows

A club's public page shows meetings, public service projects, the officers who hold a listed office, and a join form. It never shows the roster, member contact details, attendance, dues or notes. That is a property of the code, not a setting somebody might get wrong.

What we collect beyond what you enter

Very little, and deliberately.

• Sign-in sessions, so you stay logged in. Deleted when they expire.
• IP addresses for rate limiting and security, stored as a salted hash rather than the address itself.
• Records of email we sent on the club's behalf, so a member's history is complete.
• Aggregate error and performance data. No club data, no member data.
• No third-party analytics. No advertising trackers. No cookies beyond the one that signs you in.

Getting it out, and getting it deleted

You can export your club's data as CSV at any time, from inside the product, without asking us. The export excludes password and token material — that is not yours to hold either.

Deleting a club deletes its records. Ask and we will confirm when it is done. Backups age out on their own schedule and are not searched to reconstruct a deleted club.

Where it is stored

On Cloudflare's network. Data is stored in Cloudflare D1, R2 and KV, and processed in Cloudflare Workers. Payments go through Stripe, on the club's own connected account — card numbers never reach us and never touch our systems.

Asking us about any of this

Use the contact form. A person reads it. If you need something in a particular form for your board, say so and we'll write it.