
Privacy Policy
This Privacy Policy explains how Emerald Business Solutions ("MyClubVault," "we," "us," or "our") collects, uses, stores, and protects information when you use the MyClubVault customer platform at vip.myclubvault.com (the "Service"). This Policy is part of our Terms of Service.
1. Who this Policy applies to
This Policy applies to customers who create accounts to follow venues on vip.myclubvault.com. It does not govern the separate employee/staff portal used by venue workers, which has its own systems and policies.
The Service is intended only for individuals 21 years of age or older. We do not knowingly collect information from anyone under 21.
2. Information we collect
2.1 Information you provide
- Account data: email address, password (stored as a one-way hash), optional display name, date of birth (for age verification), optional PIN (stored as a hash).
- Consent records: timestamps and versions when you accept Terms, Privacy Policy, age confirmation, content warnings, and optional per-venue marketing consent.
- Preferences: venues you follow, notification preferences, optional push subscription keys, and in-app interaction data such as "hearts."
- Communications: if you contact us for support.
2.2 Information collected automatically
- Session and security data: login timestamps, last login IP address (where available), device cookies scoped to vip.myclubvault.com, and optional "remember me" tokens.
- QR and signup attribution: when you register or follow via a venue QR code, we record which campaign was used (not your precise GPS location).
- Technical logs: standard server logs for reliability, abuse prevention, and security.
2.3 Information we do not collect
- We do not sell your personal information to data brokers, advertisers, or other venues.
- We do not purchase or merge customer email lists between unrelated venues.
- We do not track your location history for advertising.
- We do not access your phone contacts, photo library, or microphone except through normal browser permissions you control (e.g., camera for QR if you use it elsewhere).
3. How we use information
We use personal information only to:
- Create and secure your account and verify you are 21+;
- Authenticate sign-in, magic links, email verification, and optional PIN access;
- Operate the venue feed, galleries, events, and follows you request;
- Send service-related email (verification, sign-in links, security notices);
- Send push notifications you enable, using discreet copy where configured;
- Send optional marketing email from a specific venue only if you opted in to that venue;
- Prevent fraud, enforce Terms, and protect venues and customers;
- Comply with legal obligations.
We do not use your data for unrelated third-party advertising profiles.
4. How venues use your information
When you follow a venue, that venue's authorized administrators may view limited follower information needed to operate their presence, such as your email address, follow date, account status, last login (where shown in admin tools), and whether you opted in to marketing for their venue only.
Venue administrators must use this information only for venue-related communication and must honor unsubscribe requests. They may not sell or export follower lists for unrelated purposes. MyClubVault is not responsible for a venue's misuse of data outside our platform, but we provide tools to suspend accounts and investigate abuse reports.
5. Sharing and disclosure
We may share information only in these situations:
- Service providers: hosting, email delivery, and push notification infrastructure under confidentiality obligations (e.g., your email provider receives messages we send to you; push services receive subscription endpoints).
- Legal requirements: if required by law, subpoena, or to protect rights, safety, or security.
- Business transfers: in connection with a merger or sale of assets, subject to this Policy.
- With your direction: such as when you follow a venue or opt in to its marketing.
We do not share customer lists between venues for their independent marketing without your separate opt-in to each venue.
6. Data retention and deletion
We retain account information while your account is active and for a reasonable period afterward for security, backup, and legal compliance.
When you delete your account from the Account section:
- Your email is anonymized and your account is marked removed;
- Password and PIN hashes are cleared;
- Follows, hearts, and marketing preferences are disassociated or deleted according to operational needs; and
- Some aggregated or de-identified logs may remain for security analytics.
Venue-published content you merely viewed is not "your data" and remains controlled by the venue.
7. Security
We use industry-standard measures appropriate to the Service, including HTTPS, hashed credentials, scoped session cookies on vip.myclubvault.com, and access controls for admin tools. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
You are responsible for securing your device and credentials.
8. Cookies and local storage
We use essential cookies and similar technologies for authentication and session management on vip.myclubvault.com. These are not shared with the employee staff portal or other MyClubVault subdomains unless you separately visit them. You can clear cookies in your browser, which will sign you out.
Progressive Web App installation may store offline shell files on your device for performance.
9. Push notifications
If you enable notifications, your browser generates a push subscription (endpoint and keys) stored on our servers so we can deliver alerts. You may revoke permission in device settings at any time. Discreet notification mode may show generic text on your lock screen.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, or restrict certain processing of your personal information.
- Account controls: update email/password/PIN, unfollow venues, change notification settings, and delete your account in the app.
- Marketing opt-out: unsubscribe links in venue emails or Account settings; marketing is optional per venue.
- Requests: email contact@myclubvault.com for access or deletion help. We may verify your identity before responding.
California residents: we do not sell personal information as defined by the CCPA/CPRA. Nevada residents: we do not sell covered information.
11. Confidentiality commitment
MyClubVault treats customer account information as confidential and uses it only as described in this Policy. We do not publish customer lists, resell email addresses, or provide follower exports to other venues or third parties except as you direct (e.g., following a specific venue) or as required by law.
12. Children and minors
The Service is not directed to anyone under 21. If we learn we have collected information from someone under 21, we will delete the account and associated data promptly.
13. International users
The Service is operated from the United States. If you access it from other regions, you consent to processing in the U.S. and understand that protections may differ from your home country.
14. Changes to this Policy
We may update this Privacy Policy. The effective date at the top will change. Material updates may require renewed acceptance on sign-in. Continued use after notice may constitute acceptance where permitted.
15. Contact
Privacy questions or requests: contact@myclubvault.com