Privacy Policy

1. Information We Collect

a. Information You Provide Directly

• Name and email address (during registration)
• Username and password
• University affiliation
• Profile picture (optional)
• Club and event information you create or upload

b. Information From Google Sign-In

If you choose to sign in or register using Google Sign-In, we receive the following information from Google with your consent:

• Email address — used as your account identifier and for communications
• Full name (first name and last name) — used to pre-fill your profile
• Profile picture URL — optionally displayed as your avatar
• Google account ID — used internally to link your Google account to your ClubVerse account

We do not receive or store your Google password. We do not request access to your Google Drive, Gmail, Calendar, or any other Google services beyond basic profile information. The OAuth scopes we use are limited to: openid, email, and profile.

c. Usage Data

We may collect anonymised usage data (e.g. pages visited, features used, device type) to understand how the Service is used and to improve it. This data does not identify you personally.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your ClubVerse account
• Authenticate you when you sign in (including via Google)
• Enable you to create, join, and manage student clubs and events
• Send you transactional emails (account verification, password reset)
• Respond to your support requests
• Detect and prevent fraud or abuse
• Improve and develop the Service

We do not sell, rent, or trade your personal information to third parties. We do not use your Google data for advertising purposes.

3. Data Sharing and Disclosure

We share your information only in the following limited circumstances:

• With your consent — for example, when your club profile is publicly visible to other ClubVerse members
• Service providers — third-party vendors who help us operate the Service (e.g. cloud hosting, email delivery), bound by confidentiality obligations
• Legal requirements — when required by law or to protect the rights and safety of ClubVerse, our users, or others

4. Google API Services User Data Policy

ClubVerse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features of the ClubVerse Service.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read Google user data unless required for security purposes, legal compliance, or with your explicit permission.
• Data obtained from Google Sign-In is not transferred to third parties except as necessary to operate and improve the Service.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymise your personal information within 30 days, except where retention is required by law.

6. Data Security

We use industry-standard security measures including HTTPS encryption, secure HttpOnly cookies, and access controls. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information
• Withdraw consent (e.g. disconnect Google Sign-In from your account)
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@clubverse.app.

8. Cookies

We use strictly necessary cookies (e.g. session authentication cookies) to operate the Service. We do not use tracking or advertising cookies.

9. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where appropriate, by email.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: