Privacy Policy

Club Simply is operated by NM3 Labs, a sole proprietorship registered in British Columbia, Canada (nm3labs.com).

1. Information We Collect

We collect only what the Service needs:

• Account details. An email address for sign-in, plus any name and contact details you give us.
• Club details. The club name, description, contact email, and settings an administrator enters.
• Membership records. Membership types, billing cycles, renewal dates, and each member’s status in a club.
• Payment records. Amounts, currency, status, payment method, who recorded it, and payment identifiers. We never store full card numbers or bank details.

A club administrator can enter or upload member details, including by CSV roster import. The club is responsible for having the right to provide them.

2. Clubs and Club Simply

For the details a club holds about its members, the club is the organization responsible for that information and Club Simply processes it as the club’s service provider. Ask your club to correct its records about you; we will help it respond. NM3 Labs is responsible for the account details you give Club Simply directly.

3. Service Providers

Companies that help us run the Service hold only what they need, including:

• Stripe processes card payments. Card numbers, bank details, and identity documents go straight to Stripe and never reach Club Simply servers. We keep only Stripe’s identifiers and basic payment details so members can see their history.
• Resend delivers our email.
• Vercel hosts the application, and Neon hosts the database.
• Vercel Web Analytics counts page views and records the referring page, approximate location, and device type. It sets no cookies.
• Inngest runs scheduled jobs such as renewal reminders.
• Sentry receives error reports, which can include personal data that was part of the error.
• Cloudflare routes email sent to our clubsimply.com addresses, such as support@clubsimply.com and hello@clubsimply.com, and Google (Gmail) stores it. Cloudflare also checks that a new sign-up comes from a person and not an automated script, and for that it receives your IP address and details about your browser when you open the sign-up page.

We send transactional email only: sign-in links, receipts, payment notices, and renewal reminders. We never send marketing email, and we do not sell your data.

Club Simply is offered in the United States and Canada, and your information is stored in the United States. If you are in Canada, that means it is handled under United States law and may be accessible to United States authorities.

4. Signing In and Cookies

You can sign in with a link emailed to you, or with a password. Passwords are stored only as a one-way hash, never in a form we can read. When you sign in we set an encrypted, httpOnly, Secure, SameSite session cookie so you stay signed in.

A renewal reminder can include a link that lets you pay without signing in. That link covers one billing cycle and expires. We use no advertising cookies and do not track you across other websites. The one other cookie we set only makes the app work: it remembers which part of the app you came to your account settings from. On pages where you enter a card, Stripe’s own code sets its own cookies and collects device and activity information to prevent fraud, as described in Stripe’s privacy and cookie policies. Vercel Web Analytics counts visits without cookies.

5. Data Retention

We keep account and membership data while your account exists and delete it when you ask us to. Payment records are kept for six years after the end of the tax year they relate to, as Canadian tax law requires, and cannot be deleted on request during that time.

6. Your Rights

You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete data we are not required to keep. You can also withdraw consent to our use of your data, which may mean we can no longer provide the Service to you. We answer access requests within 30 days. For records a club holds about you as its member, ask the club; we will help it respond. Club Simply serves only the United States and Canada, so this policy does not address rights under other laws, such as the EU GDPR.

7. Children

Club Simply is not directed at children. If a club member is a child, a parent or guardian should be the account holder and receive the emails.

8. Contact

Privacy questions and requests about your own data go to our privacy officer at support@clubsimply.com.