Legal

Privacy Policy

Effective Date: June 1, 2025  ·  Last Updated: June 1, 2025

Contents

  1. Introduction
  2. Information We Collect
  3. How We Use Your Information
  4. Sharing of Information
  5. Data Retention
  6. Security
  7. Your Rights & Choices
  8. Cookies & Tracking Technologies
  9. Children's Privacy
  10. Changes to This Policy
  11. Contact Us

1. Introduction

Membrzs ("we," "us," or "our") operates the Membrzs platform, including the Membrzs Identity service and the Membrzs Market application, accessible at membrzs.com and through our mobile applications (collectively, the "Services").

This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using our Services, you agree to the practices described in this policy.

We believe your data belongs to you. We collect only what we need to operate our Services and never sell personal information to third parties.

2. Information We Collect

Information You Provide

Information Collected Automatically

Payment Information

Payment card transactions are processed by Stripe, Inc. We do not store full payment card numbers. We receive and store transaction identifiers, amounts, and payment status. Please review Stripe's privacy policy at stripe.com/privacy.

3. How We Use Your Information

We use the information we collect to:

We do not use your information to serve third-party advertising or build advertising profiles.

4. Sharing of Information

We share personal information only in the following circumstances:

Service Providers

We engage trusted third-party companies that help us deliver our Services, including cloud hosting, payment processing (Stripe), and error monitoring. These providers access data only as needed to perform services on our behalf and are bound by confidentiality obligations.

Legal Requirements

We may disclose information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights or safety of Membrzs, our users, or the public.

Business Transfers

If Membrzs is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share information for any other purpose with your explicit consent.

SMS Messaging

Membrzs sends SMS messages exclusively for two transactional purposes: (1) one-time security verification codes (OTP) sent to internal staff members during application login, and (2) digital transaction receipts sent to retail customers who verbally request one at the point of sale. We do not send marketing or promotional SMS messages.

Staff OTP consent: Staff members are prompted to enter their mobile number and check a consent box in the application before any verification codes are sent. The opt-in disclosure reads: "By entering your phone number and checking this box, you consent to receive one-time security verification codes via SMS from Membrzs. Message and data rates may apply. Reply STOP to opt out."

Customer receipt consent: At the point of sale, the customer verbally consents to receive a text receipt, the staff member enters the customer's phone number, and an on-screen disclosure is presented before the message is sent. One message per transaction is sent; customers are not added to any ongoing list.

Opt-out: Reply STOP to any message to immediately unsubscribe. Reply HELP for assistance. Message and data rates may apply.

No sharing: No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All text messaging originator opt-in data and consent information will not be shared with any third parties.

For full details on our SMS program, including message frequency and sample messages, see our SMS Program Disclosure.

We never sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide Services. If you close your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

Transaction records may be retained for up to 7 years to comply with financial recordkeeping requirements.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage of sensitive credentials, and access controls limiting who can view personal data. However, no system is completely secure, and we cannot guarantee the absolute security of your information.

If you believe your account has been compromised, please contact us immediately.

7. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal information:

To exercise the access, correction, or portability rights above, contact us. We will respond within 30 days.

Want to delete your account or data? You don't need to log in or install the app — use one of these links, and we'll verify your request before making any changes:

Request my account and data be deleted

Request my data be deleted

8. Cookies & Tracking Technologies

Our marketing website (membrzs.com) uses a small number of cookies:

We ask for your consent before any non-essential cookie is set, via the cookie banner shown on your first visit. You can change your choice at any time using the Cookie Preferences link in the footer of any page.

Our mobile app and management portal do not use the cookie consent tool described here; their data practices are covered elsewhere in this policy.

9. Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by prominently posting a notice in the app at least 14 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out:

We're here to help

Questions about your privacy or data? We'll respond within 2 business days.

Contact us →