Privacy Policy

This Privacy Policy explains what information The Commoners Club ("we", "us") collects when you use the platform, how it's used, and who can see it. It's written to reflect exactly what the platform actually does, not generic boilerplate.

1. What we collect

Account information: name, email, password (stored securely by our authentication provider, never in plain text), and optionally phone number, city, country, birthday, gender, and a short bio.

Photos: a profile picture and any personal photos you choose to upload.

Business information (optional): business/company/institution name, whether you're the owner or work/study there, industry, profession, designation, description, address, business phone/email/website, and business photos or videos.

Content you create: posts, comments, reactions, shares, tags, business messages, event RSVPs and payment status, business queries and replies, and your favourite news industries.

Network data: who invited you and who you've invited — this invite tree is the basis for the whole platform's visibility model.

A private list only you can see: people you've marked as "interested in knowing" on your network page — this is never shown to anyone, including the person you picked, unless they pick you back too.

2. How we use it

• To operate your account and show you the right content based on the network-visibility rules below;
• To send you notifications about activity relevant to you (tags, comments, messages, mutual interest matches);
• To send a one-time welcome email when your account is set up;
• To prevent abuse and enforce our Terms.

We do not sell your data, and we do not use it for third-party advertising — there are no ad trackers on the platform.

3. Who can see your data

• Personal posts and photos: visible only to your network — your invite subtree, your chain of inviters, and each inviter's other direct invitees.
• Business profiles, business posts, and queries: visible to everyone on the platform, since they're meant to be discoverable. Your personal identity behind a business is only revealed to people outside your network via a connection path, never directly.
• Messages: only visible to you and the business owner you're messaging.
• Admins: platform administrators can see full account and content details for support, moderation, and abuse investigation.

4. Third-party services we use

We rely on a small number of specialist providers to run the platform:

• Supabase — our database, authentication, and file storage provider. All uploaded photos/videos are stored privately and only ever accessed through short-lived, expiring links.
• Resend — sends the one-time welcome email when your account is approved.
• GNews.io — supplies third-party news articles shown in the News section. No personal data is shared with this provider; it's a one-way content feed.

Once online event payments are enabled, a payment processor will be added to this list and this policy will be updated accordingly — see our Refund & Cancellation Policy.

5. Data security

Access to your data is enforced at the database level (row-level security), meaning the visibility rules above are enforced by the database itself, not just the app's interface. Photos and videos are kept in private storage and served through signed links that expire after a short time.

6. Data retention and account deletion

If you ask us to delete your account, we deactivate it and hide all your content from other members. We keep the underlying record rather than permanently erasing it immediately, so that other members' place in the invite tree isn't broken — but your content is no longer visible to anyone once this happens.

7. Your rights

You can review and correct most of your information yourself from your profile page at any time. To request a copy of your data, ask a correction we can't make ourselves, or request deletion, email [email protected].

8. Children's privacy

The Commoners Club is intended for people 18 and older. We don't knowingly collect data from anyone younger.

9. Cookies

We use a single essential cookie to keep you signed in. We don't use advertising or analytics cookies.

10. Changes to this policy

We'll update the date below whenever this policy changes materially.

11. Contact

Questions about this policy? See Contact us.