Operated by EXPBOX BRANDS LLP, exp.club is committed to protecting your privacy and ensuring the security of your personal information. This privacy policy details how we collect, use, and protect your data.
Information Collection
1.1Account Information
We collect:
Name
Email address
Authentication preferences
Profile information
1.2Platform Usage Data
We collect:
Team formation and membership data
Mentorship session schedules
Program duration selections
Payment and transaction records
Platform interaction data
1.3Technical Data
We automatically collect:
Browser and device information
IP address
Session duration
Feature usage statistics
Error logs
Data Storage and Processing
2.1Data Storage
All user data is hosted and processed through Supabase
Encryption is implemented for data in transit and at rest
Regular backups are maintained for data security
2.2Authentication Methods
Users can choose between:
Google Authentication
Email-based OTP via Supabase Auth
Data Usage
3.1Primary Uses
We use your data to:
Facilitate team formation and management
Schedule and manage mentorship sessions
Process payments and refunds
Maintain platform security
Improve user experience
3.2Communications
We send communications regarding:
Mentorship sessions
Team activities
Platform updates
Security alerts
Service changes
Cookie Policy
4.1Essential Cookies
Used for:
Authentication status
Session management
Security tokens
User preferences
4.2Functional Storage
Used for:
Interface customization
Session state
Technical preferences
Performance optimization
4.3Cookie Controls
Users can:
Manage cookie preferences
Clear local storage
Opt out of non-essential cookies
Control browser settings
Third-Party Services
5.1Service Providers
We share data with:
Supabase (database and authentication)
Google Authentication (optional login)
Payment processors
5.2Data Protection
All third-party providers:
Maintain appropriate security measures
Process data according to our agreements
Comply with relevant data protection laws
User Rights and Control
6.1User Rights
You have the right to:
Access your personal data
Request data correction
Request data deletion
Export your data
Object to processing
Withdraw consent
6.2Data Retention
Account data retained while account is active
Team/project data retained for 12 months after completion
Technical logs retained for 6 months
Users can request earlier deletion
Security Measures
7.1Technical Security
Data encryption in transit and at rest
Regular security audits
Automated threat detection
Secure authentication protocols
7.2Organizational Security
Access control procedures
Regular security training
Incident response plans
Data protection reviews
Children's Privacy
Services not intended for users under 13
We do not knowingly collect data from children
Parent/guardian consent required for users under 18