Privacy policy

What we collect

• When you join: your first name, last name, email address, WhatsApp number (with its country) and, if you joined from a course link, which course.
• Your profile: your username and anything you choose to add: photo, bio, business name, location, website and social links.
• Your settings: your time zone and your email and notification choices.
• Account records: when you joined, confirmed your email, finished setting up and were last active; records of emails we sent you; and records of actions taken on your account.

Bot protection

Sign-up, sign-in and some account forms use Cloudflare Turnstile to tell people from automated bots. Turnstile processes your IP address and signals from your browser to do this. We also use your IP address to limit repeated attempts; those counters are stored in a scrambled (hashed) form.

Who can see your information

• Other members can see your name, username, photo, bio, business, location, website and social links.
• Other members can never see your email address, WhatsApp number, learning progress or messages to support.
• The club team can see your account details, including your email and WhatsApp number, to run and support the club.
• There is no searchable member directory, and we don't sell your information.

How we use your WhatsApp number

To contact you about your membership and club activity. It is never shown to other members and is not used for automated WhatsApp campaigns.

Emails

Account and security emails (confirming your email, sign-in links, password resets and similar) are always sent. Optional emails such as announcements and offers can be turned off in Settings › Email.

Cookies

We only use cookies needed to sign you in and keep your account secure, plus short-lived helper cookies for email links, password resets and a course you chose when joining. We don't use advertising or analytics cookies.

Services we use

• Supabase, for our database and sign-in (data stored in London, UK).
• Cloudflare, for private storage of profile photos and for Turnstile.
• Resend, to deliver our emails.
• Our website hosting provider (to be confirmed).

Deleting your account

You can delete your account in Settings › Delete account. Access ends immediately and your name, photo, profile details and WhatsApp number are removed. A scrambled sign-in record, our providers' own security and email logs, records of emails sent (without your address) and records of account actions are kept. How long these are kept is still being decided.

Contact

Questions or requests about your data: support@internetbusiness.school.