Privacy Policy

Memberlet is a creator membership platform that lets creators sell access to communities, courses, and content. Memberlet is operated by Meralcom Digital Technologies, a sole proprietorship registered in Nigeria. We are the data controller for the personal data we collect through memberlet.com and our related services.

If you have questions about this policy, contact us at support@memberlet.com.

Depending on context, we act as either a data controller or a data processor:

• As a data controller, we process data related to your account, billing, and our own platform operations.
• As a data processor, we process data on behalf of creators who use Memberlet to manage their members.

Creators are independent data controllers with respect to their own members and are responsible for their own privacy practices toward them.

Account data: Your name and email address when you create an account or purchase a membership.

Payment data: Payments are processed entirely by Paystack. We never store your card details. We retain transaction references, amounts, and subscription status to manage your access.

Creator payout data: If you're a creator, we store your bank name, account number, and account name to send your earnings. Account numbers are encrypted at rest.

Telegram data: If you or a creator connects a Telegram account, we store your Telegram user ID and username to automate group access. We do not read your Telegram messages.

WhatsApp data: If a creator connects a WhatsApp group, we store the phone number and group membership needed to automate access. See "Use of WhatsApp" below.

Usage data: Standard server logs including IP address, browser type, and pages visited for security and debugging purposes. We also use Google Analytics to understand how visitors use our site.

We do not use your data for advertising or sell it to third parties. We use it only to:

• Create and manage your account
• Process payments and manage subscription access
• Add or remove you from Telegram or WhatsApp groups based on your subscription status
• Send transactional emails — receipts, OTP codes, access confirmations
• Detect fraud and maintain platform security
• Understand and improve how the platform is used

We share data only with the third-party services necessary to operate the platform:

• Paystack — payment processing. Subject to Paystack's privacy policy.
• Resend — transactional email delivery.
• Google Analytics — website usage analytics.
• Telegram and WhatsApp — automated group membership management via our bots.

We may also disclose data if required by law or to protect the rights and safety of our users. We do not sell personal data.

We retain your personal data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance.

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict how we process your data
• Request a copy of your data in a portable format

To exercise any of these rights, email us at support@memberlet.com. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Some of the third-party services we rely on may process data outside Nigeria. Where this happens, we take reasonable steps to ensure your data stays protected.

We use a single refreshToken HTTP-only cookie to keep you signed in, and a small cookie to remember your active workspace. Google Analytics also sets cookies to measure site usage. We don't use advertising or cross-site tracking cookies.

Memberlet is not intended for use by anyone under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will remove it.

Our service may link to sites we don't operate, including Telegram, WhatsApp, and Paystack. We encourage you to review their privacy policies — we're not responsible for how they handle your data.

We use industry-standard practices to protect your data — HTTPS for all data in transit, encrypted storage for sensitive tokens, and HTTP-only cookies to prevent client-side access to session tokens.

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of Memberlet after changes are posted means you accept the updated policy.

When you use Memberlet to manage your members, we act as a data processor on your behalf. This Privacy Policy, together with our Terms of Service, constitutes the data processing agreement between you and Memberlet. We process member data only on your instructions, to provide the service, and in line with applicable law.

Memberlet integrates with Telegram to manage group access. When you interact with Memberlet through Telegram, Telegram independently processes your data under its own privacy policy. We're not responsible for Telegram's data practices.

Memberlet integrates with WhatsApp to manage group access. Our WhatsApp bot doesn't read or store your group's conversations — the only message content it ever looks at is the one-time verification code sent when a creator first connects a group, which is discarded immediately after use. WhatsApp independently processes your data under its own privacy policy; we're not responsible for WhatsApp's data practices.

Questions about this policy? Email us at support@memberlet.com.