Privacy Policy

At Memberflow (a product by Faizatech), we respect your privacy and are committed to protecting the personal data we store and process about you and your members. This Privacy Policy describes how we collect, use, store, and share your information when you use our membership management platform, dashboard, CDN scripts, and related services.

1. Information We Collect

To provide our services, we collect information that you provide to us directly, as well as data automatically generated during your use of our platform:

• Account Information: When you sign up for Memberflow, we collect your email address, name, password hash, and account configuration.
• Member Data: As a membership platform, we store data about your members (e.g., member email addresses, custom attributes, membership status, and tier levels) to allow you to gate content and manage their access.
• Billing and Subscription Details: All payments and subscriptions are processed by our payment provider, Lemon Squeezy. We do not store your raw credit card information, but we store subscription status metadata (such as license key, expiration date, and billing status) to manage access to our services.
• Usage and Log Data: We collect technical logs (IP addresses, browser info, access timestamps) to prevent abuse and troubleshoot issues.

2. How We Use Your Information

We use the collected information for the following purposes:

• To operate, maintain, and provide the features of Memberflow.
• To process your subscriptions and authorize access to dashboard features.
• To deliver our CDN scripts that authorize and gate content on your client websites (e.g., Webflow pages).
• To communicate with you regarding updates, system alerts, billing issues, or support requests.
• To monitor and prevent fraud, security breaches, and terms violations.

3. Data Storage and Security

Account passwords are never stored in plain text — we store a salted bcrypt hash and compare against it on login, so we cannot recover or view your actual password. Member passwords on your connected sites are handled the same way.

Application data (accounts, sites, members, tiers, and access rules) is stored in a PostgreSQL database hosted on Railway. Our dashboard and API run on Railway as well, behind HTTPS. Webflow OAuth tokens are stored server-side and are never exposed to the browser or to your members.

4. Cookies

We use a single essential cookie to keep you signed in to the dashboard. It carries your session token, expires after 7 days, and is not used for advertising or cross-site tracking. We do not run analytics or tracking scripts on the dashboard itself. Content you gate on your own Webflow site through Memberflow's CDN script is your responsibility, not ours, if you add your own tracking there.

5. Sharing and Third-Party Disclosures

We do not sell your personal or member data to third parties. We share data only with the specific providers we use to run the service:

• Lemon Squeezy: our merchant of record for subscription billing — they process your card details directly; we never see or store raw card numbers, only subscription status metadata (plan, renewal date, status).
• Webflow: when you connect a site, Webflow authorizes us to read and write the site's pages, CMS collections, and custom code via OAuth, scoped to the sites you explicitly grant access to.
• Resend: our transactional email provider, used to deliver password resets, member signup emails, and dashboard-access notifications.
• Railway: our hosting provider for the application and database.

6. Your Rights & Member Rights

You have the right to access, update, or delete your account information at any time from your settings page. As a controller of your members' data, you are also responsible for responding to requests from your members regarding their data privacy rights under applicable regulations (such as GDPR or CCPA).

7. Changes to This Policy

We may update our Privacy Policy from time to time. When we make significant changes, we will update the date at the top of this page or notify you through the dashboard.

8. Contact Us

If you have questions about this Privacy Policy or how we handle data, please contact us at: contact@faizatech.com