1. Who we are
MyMembers.io is operated by MyMembers AS, a company registered in Norway with organization number 936993826 ("we", "us"). This policy explains what personal data we handle, why, and what rights you have. You can reach us at support@mymembers.io.
2. Our two roles
MyMembers.io is software that creators use to sell subscriptions.
- If you are a creator, or you visit our website or log in to it, we are the data controller for your data.
- If you are a subscriber, you buy from the creator. The creator is the data controller for your subscription, and we handle your data on the creator's behalf as a data processor. For questions about your subscription, contact the creator first; you can also contact us.
- If you join a waitlist on a creator's page, the creator is the data controller for your place on that list, and we handle your email address on the creator's behalf as a data processor.
3. Data we handle
- Account data: name, email address, username and login details. Passwords are handled by our authentication provider; we do not see them.
- Creator business data: seller name, contact email, country, invoicing details, and the identifier and API key of the creator's own Stripe account. The key is stored encrypted.
- Subscription data: which page a subscriber has joined, the plan, start and end dates, payment status, amounts and currency, and cancellations.
- Waitlist data: if you join the waitlist for a page that is full, your email address, which page it is for, when you joined, and which waitlist emails we sent you.
- Channel access data: the Telegram or Discord user ID and username needed to grant and remove access to a creator's channel.
- Communications: messages and support requests you send us.
- Usage data: pages visited and technical information such as IP address and browser type.
- Smart Recovery data: for creators who use Smart Recovery, subscription history, cancellation reasons and responses to offers.
4. Payments
- Subscribers pay the creator directly, on the creator's own Stripe account. Payments do not pass through MyMembers.io.
- We never receive or store full card numbers. Card details are handled by Stripe under Stripe's privacy policy.
- We read transaction details from the creator's Stripe account to manage access for the creator and to calculate the fee the creator owes us.
5. Why we use the data, and on what basis
- Providing the service: creating accounts, running sales pages, managing access and showing creators their members and revenue. Basis: our contract with the creator, and for subscribers the creator's contract with them.
- Billing creators: calculating and invoicing our fees. Basis: contract and our legal bookkeeping obligations.
- Service messages: confirmations, access links, receipts and important notices. Basis: contract.
- Smart Recovery: win-back messages and offers sent on a creator's behalf to that creator's own current and former subscribers. Basis: the creator's legitimate interest in keeping its subscribers, within the marketing rules that apply to existing customers, or consent where the law requires it. Every message has an unsubscribe link, and we stop when you opt out.
- Waitlist messages: if you ask to hear when a spot opens on a creator's page, we email you to confirm your address, and again when a spot opens. Basis: your consent, which you give by confirming your email address. Every message has a link to leave the list, and we stop when you leave or unsubscribe.
- Product updates and marketing to creators: basis: our legitimate interest, or consent where the law requires it. You can opt out at any time.
- Security and improvement: preventing fraud and abuse, and understanding how the site is used. Basis: our legitimate interest.
- Legal obligations: for example accounting and tax rules.
6. Automated processing
- Smart Recovery uses automated analysis, including machine learning, to decide when a lapsed subscriber is contacted and which offer is made, within limits set by the creator.
- These decisions only determine whether you receive an offer. They do not have legal or similarly significant effects on you.
- Data used to improve the system is aggregated or anonymised where possible.
- Creators can turn Smart Recovery off in their page settings. Subscribers can opt out through the unsubscribe link in any recovery message, and can ask us for a human review.
7. Who we share data with
We do not sell personal data. We share it only with the following, and only as needed:
- The creator whose page you subscribe to, who sees your membership, payment status and contact email. If you join a waitlist for a creator's page, that creator sees the email address you joined with.
- Stripe, as the creator's payment provider.
- Telegram and Discord, to grant and remove channel access.
- Clerk, for login and authentication. See Clerk's privacy policy.
- Email providers (SendGrid and Loops), to send service and recovery messages.
- Revolut, to collect the fees creators pay us.
- Hosting and infrastructure (Vercel, DigitalOcean and Cloudinary), to run the site, database and images.
- Plausible and Vercel Analytics, for website statistics without cookies or personal profiles.
- Chatling, for the support chat on our website and in the creator dashboard, if you open it.
- Authorities and advisers, where the law requires it or to establish or defend legal claims.
8. Transfers outside the EEA
Some of these providers are located in, or have staff in, countries outside the EEA, such as the United States. Where data is transferred there, we rely on an adequacy decision by the European Commission or on the Commission's standard contractual clauses.
9. Cookies
- We use cookies that are necessary to log you in and keep you signed in.
- Our website statistics do not use cookies.
- The support chat stores nothing until you open it. Once you do, it stores a small identifier so a conversation can continue across pages.
- You can block cookies in your browser; login will then not work.
10. How long we keep data
- Account data: for as long as you have an account, and then deleted or anonymised unless the law requires us to keep it.
- Subscription data: for the duration of the subscription and 12 months after it ends, then deleted or anonymised.
- Waitlist data: for as long as you are on the list, and 12 months after you leave it, become a member or the list closes, then deleted.
- Data used to improve Smart Recovery: up to 24 months, aggregated or anonymised where possible.
- Invoices and accounting records: five years after the end of the financial year, as Norwegian bookkeeping law requires.
11. Security
We protect personal data with access controls, encryption in transit, and encryption of creators' payment provider keys. No system is completely secure, and we cannot guarantee absolute security. We will notify you and the authorities of a breach where the law requires it.
12. Your rights
You have the right to:
- ask what data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data deleted, where we have no legal reason to keep it;
- restrict or object to processing based on legitimate interest;
- object to marketing at any time;
- receive data you gave us in a structured, machine-readable format;
- withdraw a consent you have given;
- ask for a human review of an automated decision.
To use these rights, write to support@mymembers.io. We answer within one month. If you are a subscriber, we may pass your request to the creator you bought from, who is responsible for your subscription data.
You can also complain to a data protection authority. Ours is the Norwegian Data Protection Authority (Datatilsynet); you may also use the authority in the country where you live.
13. Children
MyMembers.io is not intended for anyone under 16, and pages marked as age-restricted are for adults only. We do not knowingly collect personal data from children.
14. Changes to this policy
We may update this policy. We will tell you about significant changes by email or with a notice on the website. The date at the top shows when it was last changed.
15. Contact
MyMembers AS, organization number 936993826, Norway. support@mymembers.io
See also our Terms of Service.