Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information. Name, email address, password (stored hashed), role (practitioner or client), and verification status.
• Profile information. For practitioners: profile photo, biography, specialties, location, video links, and other content you choose to publish.
• Payment information. If you start a paid membership, payment is processed by Stripe. We do not store your full card number; we receive a tokenized customer reference and high-level membership metadata from Stripe.
• Communications. Messages you send through the platform's chat feature, support tickets, and emails you send us.
• Usage data. IP address, browser type, device type, pages viewed, referring URL, and timestamps. We use this for analytics, security, and troubleshooting.
• Cookies and similar technologies. Used to keep you signed in, remember preferences, and understand how the Service is used (see Section 4).

2. How We Use Your Information

• To operate the Service, including authenticating users, displaying profiles, and enabling messaging.
• To process payments and manage memberships through Stripe.
• To communicate with you about your account, updates, security alerts, and support requests.
• To improve the Service through analytics and product research.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We share information only as described below:

• With Stripe for payment processing. Stripe's handling of your data is governed by the Stripe Privacy Policy.
• With other users via your public profile. Information you choose to publish (name, photo, biography, etc.) is visible to anyone who visits the Service.
• With service providers who help us operate the Service — including hosting, email delivery, error monitoring, and analytics — under contractual obligations of confidentiality.
• When legally required — e.g., to comply with a subpoena, court order, or to protect the rights, property, or safety of Clave Collective, our users, or others.
• In a business transfer such as a merger, acquisition, or sale of assets. We will notify you before your information becomes subject to a different privacy policy.

We do not sell your personal information.

4. Cookies and Tracking

We use first-party cookies and similar technologies to keep you signed in, remember your preferences, and measure how the Service is used. You can control cookies through your browser settings; disabling cookies may affect functionality such as staying signed in.

5. Email Communications

We send two categories of email, governed by different rules:

• Transactional emails — account verification, password changes, unread chat notifications, payment receipts, and support replies. These are sent because they are necessary to operate your account. You cannot opt out of essential security emails, but you can disable optional notifications (such as unread-chat alerts) from your account preferences.
• Marketing emails — occasional product updates, roadmap news, and community events. We only send these if you have explicitly opted in (by ticking the checkbox at signup or enabling Newsletter in your account preferences) and confirmed your subscription by clicking the link in the confirmation email we send you. This double opt-in process is designed to comply with Canada's Anti-Spam Legislation (CASL) and the EU's General Data Protection Regulation (GDPR).

When we record your consent, we also store the date, time, and IP address of the opt-in, along with where the consent was given (e.g. signup form, account page). We retain these records to demonstrate compliance, even after you unsubscribe.

You can withdraw consent for marketing emails at any time by:

• Clicking the Unsubscribe link in the footer of any marketing email we send you (no login required);
• Using your email client's one-click unsubscribe button (Gmail, Outlook, and Apple Mail support this via the List-Unsubscribe header we include);
• Toggling the Newsletter switch off on your account preferences page; or
• Emailing us at connect@clavecollective.com.

Withdrawals are processed immediately. You will continue to receive essential transactional emails after unsubscribing.

Every marketing email we send includes our physical mailing address, the date you opted in, and an unsubscribe link, as required by CASL, CAN-SPAM (United States), and applicable EU law.

6. Data Retention

We keep account and profile information for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we need to retain it to comply with legal obligations, resolve disputes, or enforce our agreements (for example, financial records related to past memberships).

7. Your Rights

Depending on your location, you may have rights under privacy laws including the European Union's General Data Protection Regulation (GDPR) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). These may include the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information ("right to be forgotten").
• Receive a copy of your information in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

You can exercise most of these rights from your account settings, or by emailing us at connect@clavecollective.com. We will respond within the timeframes required by applicable law.

8. Children's Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete it.

9. International Data Transfers

Clave Collective is operated from Canada. If you are located outside Canada, your information may be transferred to, stored in, and processed in Canada, the United States, or other countries where our service providers (such as Stripe) operate. These countries may have data protection laws different from your own. By using the Service, you consent to these transfers, subject to appropriate safeguards required by applicable law.

10. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS), hashed passwords, and access controls on our systems. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For privacy questions or to exercise your rights, contact us at connect@clavecollective.com.