Privacy Policy

Effective date: July 13, 2026

This Privacy Policy explains how Member-Bridge, operated by Crushlinx Media Ltd. ("Member-Bridge", "we", "us"), collects, uses, and shares personal data when you use our websites at https://member-bridge.com and memberbridge.io and the services available through them (the "Service").

Member-Bridge is a platform where content creators ("Publishers") sell paid membership access to their own private communities on Discord, Telegram, or Instagram (Close Friends). Buyers ("Members") create an account on a club page, provide the social handle that should receive access, and pay. Understanding this flow will help you understand why we collect the data described below.

1. Data Controller

The data controller responsible for personal data processed through the Service is Crushlinx Media Ltd. You can contact us about privacy matters at [email protected].

2. What We Collect

• Account data. Your email address and the account credentials you create.
• Social handles. The Discord username, Telegram handle, or Instagram handle you provide so that a Publisher can grant you access to their community. Providing this handle is required to receive access.
• Club and transaction records. Which clubs you have joined, membership status, plan type (subscription or one-time), purchase dates, cancellation and refund history.
• Payment metadata. Payments are processed by Stripe. We receive and store payment metadata such as amounts, currency, payment status, and partial card information (for example, card brand and last four digits) as provided by Stripe. We never store full card numbers — card details never touch Member-Bridge servers.
• Log and usage data. IP address, browser and device information, pages visited, and timestamps, collected automatically when you use the Service.
• Cookies. Session cookies needed for the Service to work, and analytics cookies as described in Section 9.
• Support communications. Messages you send to us, for example at [email protected].

For Publishers, we also process the information needed to onboard them, manage the revenue-share arrangement, and pay them out.

3. Why We Process Your Data

• To deliver the Service. Creating and managing your account, recording club memberships, and operating the member panel (including subscription cancellation).
• To share your handle with the Publisher. When you join a club, we share your social handle and membership status with the Publisher of that club so they can add you to their Discord server, Telegram channel or group, or Instagram Close Friends list. This sharing is the core function of the Service — without it, you cannot receive access. Access is granted manually by the Publisher within the fulfillment window displayed on the club page.
• To process payments and payouts. Working with Stripe to charge Members, process refunds, and pay out Publishers.
• To prevent fraud and abuse. Detecting fraudulent payments, chargebacks, and misuse of the Service.
• To provide support. Responding to your questions and resolving issues, including refund requests where a Publisher fails to grant access within a reasonable time.
• To meet legal obligations. Tax, accounting, and other requirements that apply to us as merchant of record.
• To improve the Service. Using log and analytics data to understand how the Service is used and to keep it secure.

Where GDPR-style laws apply, our legal bases are: performance of a contract (delivering the Service, including sharing your handle with the Publisher), legitimate interests (fraud prevention, security, service improvement), legal obligation (tax and accounting), and consent (marketing emails and non-essential cookies).

4. What Publishers See

Publishers can see, for their own clubs only:

• their members' social handles;
• each member's membership status (active, canceled, expired, refunded); and
• the amounts those members have paid.

Publishers do not see your password, full card details, or any payment credentials. When your membership ends — a subscription is canceled or lapses, a one-time period expires, or a payment is refunded — the Publisher removes you from the community. Publishers act as independent parties in how they run their communities on Discord, Telegram, or Instagram; those platforms' own privacy policies apply to your activity there. Member-Bridge does not host, store, or moderate the content inside Publishers' communities.

5. Processors and Sub-Processors

We use a small number of service providers who process data on our behalf:

• Stripe — payment processing. Stripe collects your card details directly and processes them under its own privacy policy; we receive only payment metadata.
• Cloud hosting providers — hosting our application and databases.
• Email provider — sending transactional emails (receipts, membership notices) and, with your consent, marketing emails.

These providers are bound by contracts limiting their use of your data to providing services to us. We do not sell your personal data.

6. Data Retention

We keep personal data only as long as needed for the purposes above:

• Account and membership data — for as long as your account is active, and for a reasonable period afterwards to handle disputes and refunds.
• Transaction and payment records — for the period required by tax, accounting, and anti-fraud laws applicable to Crushlinx Media Ltd.
• Log data — for a limited period for security and troubleshooting, then deleted or anonymized.

When data is no longer needed, we delete it or anonymize it.

7. Your Rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data (you can update your email and handle from your account);
• Delete your data, subject to records we must keep by law (for example, transaction records);
• Export your data in a portable format;
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, email [email protected]. We will respond within the timeframe required by applicable law. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

California residents: under the CCPA/CPRA you have rights to know, delete, correct, and port your personal information, and to opt out of the sale or sharing of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights.

8. Marketing Emails

We may send you marketing emails only where permitted by law. Every marketing email includes an unsubscribe link, and you can opt out at any time without affecting transactional emails (such as receipts and membership notices), which we send as part of the Service.

9. Cookies

We use:

• Essential cookies — required for sign-in, sessions, and security. These cannot be switched off.
• Analytics cookies — help us understand how the Service is used so we can improve it. Where required by law, we ask for your consent before setting these, and you can withdraw consent at any time through your browser settings or our cookie controls.

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has created an account, contact us at [email protected] and we will delete the account and associated data.

11. International Transfers

Your data may be processed in countries other than your own, including where our hosting and service providers operate. Where data is transferred out of the EU/EEA, UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

12. Security

We take reasonable technical and organizational measures to protect your data, including encryption in transit, access controls limiting who at Member-Bridge can view personal data, and reliance on Stripe's certified infrastructure for card data (which never touches our servers). No system is perfectly secure, so please use a strong, unique password for your account.

13. Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the competent supervisory authority and, where required, affected users without undue delay and in accordance with applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect and update the effective date above. Continued use of the Service after the effective date means the updated policy applies.

15. Contact

For privacy questions, rights requests, and general support, contact us at [email protected].

Data controller: Crushlinx Media Ltd. This policy is governed by the laws of the Republic of Cyprus, without limiting any mandatory data-protection rights you have under the laws of your place of residence.