Privacy Policy

Introduction

Tribe Platform Inc. (doing business as "Tribe" and "Tribe Social Club"; "Tribe," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how and why we use it, who we share it with, how long we keep it, and the rights and choices you have. It applies to our websites, our mobile and web applications, our community group chats, our events, and our physical spaces (collectively, the "Services"). By using the Services, you acknowledge this Privacy Policy. Where we rely on your consent, we ask for it separately.

Notice at Collection (Summary)

At or before the point we collect your information, this is what we collect and why. The full detail is in the sections below.

• Categories we collect: identifiers and contact details; account and membership details; payment information; government-ID and identity-verification data (including biometric facial-match data) where identity verification is required; demographic and sensitive-category information (e.g. date of birth, gender); content you create (chat messages, event photos, profile details); communications and consent records; device, usage, and approximate-location data; and inferences drawn from the above.
• Why we collect it: to provide and operate memberships, events, chat, and spaces; to process payments; to verify identity and eligibility; to communicate with you; to keep the community safe; to measure and improve the Services and our advertising; and to comply with law.
• Sensitive personal information: we collect certain sensitive information (e.g. government ID, biometric identity-verification data, precise category data) only for the limited purposes described below, and we do not use or disclose it to infer characteristics about you.
• Session recordings: across our website and app we record how you interact with the page (pointer and scroll movement, taps and clicks, and which pages and fields you moved through) so we can find and fix what is broken or confusing. The recording masks what you type: form fields, including your name, contact details, and date of birth, are never captured as text, and payment fields are excluded from recording entirely.
• Retention: we keep information for as long as your account is active and thereafter as needed for our business and legal purposes — see "Data Retention."
• Sale/Sharing: we do not sell your personal information for money. We do "share" certain identifiers and online activity for cross-context behavioral advertising, and you can opt out — see "Your Choices: Do Not Sell or Share."

Information We Collect

Information you provide

• Identity & contact: name, email address, phone number, mailing/residence address.
• Demographic & sensitive: date of birth, gender, and other details you choose to share (e.g. interests, relationship or life-stage details on your profile).
• Membership & payment: plan, billing history, and payment details (processed by our payment provider — see "Who We Share With").
• Identity verification: where verification is required, government-issued ID and a selfie/biometric facial-match, processed by our identity-verification provider. This information is used to confirm your identity; see "Data Retention" for how long we keep it.
• Content you create: community and direct chat messages and attachments, event photos and media you upload, profile content, survey and application responses, and support requests.
• Communications & consent: your contact preferences and records of the consents you give (for example, your agreement to receive text messages).

Information we collect automatically

• Device & technical: IP address, browser type and version, operating system, and device identifiers.
• Usage: pages and screens viewed, features used, referring URLs, and dates/times of access.
• Approximate location: derived from your IP address or the region associated with your club.
• Push tokens: if you enable notifications, a device push token so we can deliver them.
• Diagnostics: crash, error, and performance data.
• Cookies & similar technologies, and advertising/analytics pixels — see "Cookies, Analytics & Advertising."

Session replay

Across our website and app we use our own session-replay technology to record a reconstruction of your visit: the structure of the page, pointer and scroll movement, clicks and taps, and the timing between them. This lets us see where the experience breaks or confuses people, and fix it. This covers the member app as well, including the chat and messaging areas; message content is already stored in your Tribe account, and the recording masks anything you type into a message box.

What the recording does not capture: anything you type into a form. All form inputs — including message boxes — are masked on your device before the recording is sent, and payment fields, which are hosted by our payment provider in a separate secure frame, are excluded from recording entirely. The recording does capture the page as it appeared on your screen, including text displayed on it; email addresses and phone numbers are automatically starred out wherever they appear.

Session recordings are stored on our own infrastructure. They are not sent to an outside analytics or advertising company. Only authorized Tribe staff can view them, and every viewing is logged with a reason. We delete the recordings themselves automatically within 90 days — unless we must preserve one for a legal claim. A limited record about the session (for example, which pages it covered and how long it lasted, linked to your visitor record) is kept indefinitely. Aggregate statistics we derive from recordings, which do not identify you, may also be kept indefinitely.

We do not record sessions for visitors in the European Union, the European Economic Area, the United Kingdom, or Switzerland.

Your control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as your request to opt out of the sale and sharing of your personal information, including for advertising, and we honor it. We do not sell or share session recordings, and we never send them to an advertising or analytics company, so a GPC signal does not by itself stop us from recording your visit for the first-party purposes described above — fixing what is broken and keeping the community safe. You can also ask us to delete your recordings at any time — see "Your Privacy Rights." A deletion request covers any session recordings associated with you.

Cookies, Analytics & Advertising

We and our partners use cookies, SDKs, and pixels to run the Services, understand usage, and measure and deliver advertising. Our analytics and advertising partners currently include Google (Google Analytics and Google Ads), Meta (Facebook/Instagram), and TikTok. Some of these technologies receive identifiers and, for advertising measurement, hashed contact information (such as a hashed email or phone number) so that ad performance can be attributed. You can control cookies through your browser or device settings, and you can opt out of advertising "sharing" as described in "Your Choices."

Email & Text-Message Communications

We send transactional messages (for example, account, payment, and event confirmations) and, with your permission, marketing messages. For email, we use Brevo to deliver and measure messages, including opens, clicks, deliveries, and bounces; you can unsubscribe from marketing email at any time using the link in any message or by contacting us. For text messages (SMS), we use a messaging provider (currently TextMagic) to deliver one-time passcodes and, where you have opted in, event and community notifications and marketing texts. Message and data rates may apply; message frequency varies. Reply STOP to opt out of texts and HELP for help. Consent to marketing texts is not a condition of membership.

How We Use Your Information

• Provide and operate memberships, events, chat, and spaces, and process payments and refunds.
• Verify your identity and eligibility.
• Communicate with you, including service messages and (with consent) marketing.
• Personalize, measure, and improve the Services, including our advertising.
• Keep the community safe — prevent fraud and abuse and enforce our Terms and Code of Conduct.
• Comply with legal obligations and establish, exercise, or defend legal claims.

AI-Assisted Features

Some features use third-party artificial-intelligence services. For example, our community assistant may process your profile details and your conversation with the assistant using a third-party AI provider (currently OpenAI) to generate responses. We do not permit these providers to use your information to train their general models, and you can ask us to delete your assistant conversation history. We also use AI tools internally (for example, to help draft and organize communications).

Who We Share Your Information With

We do not sell your personal information for money. We share it only as described here, and we require our service providers to protect it and use it only to provide services to us. Our current service providers ("subprocessors") include:

• Supabase — application database, authentication, and file storage.
• Stripe — payment processing, subscriptions, and (where required) identity verification.
• Brevo — transactional and marketing email delivery and analytics.
• TextMagic — SMS delivery (one-time passcodes and notifications).
• Stream (GetStream, Inc.) — community and direct chat messaging infrastructure.
• OpenAI — the community AI assistant; Anthropic — internal AI tooling.
• Google, Meta, and TikTok — analytics and advertising measurement.
• Firebase/Google — push-notification delivery.
• Sentry — error and performance diagnostics.
• Vercel — website and application hosting.
• Calendly and Zoom — scheduling and video for interviews and calls, where applicable.

We keep an up-to-date list of subprocessors and will provide it on request. We also share information: (a) with event hosts, who may receive limited attendee information to run an event and who are bound by an agreement restricting their use of it; (b) for legal reasons, when required by law or valid legal process, or to protect rights, safety, and the community; (c) in a business transfer, such as a merger, acquisition, or asset sale, with notice; and (d) with your consent or at your direction.

Categories of personal information we disclosed for a business purpose in the past 12 months include identifiers, contact details, commercial (payment) information, internet/usage activity, and content you create. Categories we "shared" for cross-context behavioral advertising include identifiers and internet/usage activity.

Your Choices: Do Not Sell or Share

We do not sell your personal information for money. We do "share" certain identifiers and online activity with advertising partners for cross-context behavioral advertising. You can opt out at any time by emailing privacy@tribesocialclub.com, and by using the "Your Privacy Choices" control at the end of this page. Where your browser or device sends an opt-out preference signal (such as Global Privacy Control), we treat it as a valid opt-out for that browser or device.

Referrals & Rewards

If you take part in our referral program, we collect the name and contact details you give us for the person you refer, and we may reward you with account credits for a successful referral. Because this program offers something of value in connection with personal information, it is a "financial incentive" under California law: taking part is entirely optional, you can withdraw at any time, and the value of the reward is reasonably related to the value of the information to us. Please only share another person's contact information if you have their permission to do so.

Your Privacy Rights

Depending on where you live, you may have some or all of the following rights: to know or access the personal information we hold about you; to correct it; to delete it; to obtain a portable copy; to opt out of "sale," "sharing," or targeted advertising; to limit the use of sensitive personal information; and to not be discriminated against for exercising your rights.

To exercise any right above, email privacy@tribesocialclub.com. We will verify your request and respond within the time the law requires (generally 45 days). You can appeal a denial by replying to our response, or have someone else submit the request on your behalf.

Data Retention

We retain personal information for as long as your account is active and thereafter for as long as necessary for our legitimate business purposes — including operating, securing, and improving the Services, maintaining records, preventing fraud and abuse, and keeping the community safe — and to comply with our legal obligations, resolve disputes, and enforce our agreements. Financial and transaction records are kept as required by tax and accounting law. For identity-verification data (including any biometric facial-match data), we keep it for identity, safety, and record-keeping purposes; for residents of states that limit how long biometric information may be retained (such as Illinois), we delete it no later than three years after your last interaction with us. Content you post may remain visible to others until you or we remove it. You can request deletion of your personal information as described in "Your Privacy Rights," subject to limited exceptions permitted by law. Information may persist briefly in backups after it is removed from active systems. Session recordings are kept for up to 90 days, unless a recording is subject to a legal hold or an open safety investigation.

How We Protect Your Information

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encryption in transit, and least-privilege data access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Where We Operate

We are a US company and store and process information in the United States. If a law outside the US gives you additional rights over your information, contact us at privacy@tribesocialclub.com and we will address your request under that law.

Children

The Services are intended for adults. You must be at least 18 years old to create an account or use the Services, and older where a specific club or event requires it. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us and we will delete it.

Third-Party Links

Our Services may link to third-party sites or services we do not control. Their privacy practices are their own; please review their policies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Effective date" above and, for material changes, provide additional notice (for example, by email or in-app) and, where required, obtain your consent.

Contact Us

Questions about this Privacy Policy or your personal information? Contact Tribe Platform Inc. at privacy@tribesocialclub.com or support@tribesocialclub.com. Website: tribesocialclub.com. A postal address for privacy requests will be provided in this section.

Your privacy choices

You can opt out of the sale or sharing of your personal information for advertising at any time. We also automatically honor your browser’s Global Privacy Control signal.