Privacy Policy

Last updated: March 2026

1. Data We Collect

Membrs collects: your email address, charity name, Charity Commission number (if provided), and usage data (scans run, eligibility checks, etc.). We do not collect payment card details directly — payments are processed by Stripe.

2. How We Use Your Data

We use your data to: provide the Membrs service, improve our AI recommendations, and send you important product updates. We never sell your data to third parties.

3. Data Storage & Security

All data is stored on servers located in the United Kingdom. We use encryption at rest and in transit. Your workspace data is isolated and never shared with other users.

4. AI & Knowledge Library

Membrs' AI assistant (ISLA) uses anonymised aggregate insights to improve recommendations. Individual workspace data is never shared. Aggregate insights require a minimum of 5 contributing workspaces before being used (k-anonymity threshold).

5. Sub-processors

Membrs uses the following third-party services to deliver the product:

  • Stripe (payment processing) — United States, Privacy Shield certified
  • Anthropic (AI analysis via Claude) — United States, data not used for training
  • Hetzner (server hosting) — Germany / Finland, EU GDPR compliant

We do not share your data with any other third parties. AI providers receive only the minimum data required for the specific task (e.g. funder criteria text for eligibility checks) and do not retain it.

6. Data Retention

We retain your data for as long as your account is active. Specific retention periods:

  • Account data (email, charity profile) — retained while account is active
  • Pipeline and leads — retained while account is active
  • Eligibility reports — retained for 12 months, then automatically purged
  • Chat history — retained for 90 days
  • Server logs — retained for 30 days
  • After account deletion — all data permanently erased within 30 days

7. Deletion

You can delete your account at any time from Settings → My Account → Danger Zone. When you delete your account:

  • All workspace data (pipeline, leads, drafts, eligibility reports) is permanently deleted
  • Your email and profile are removed from our systems
  • Any active subscription is cancelled immediately
  • Deletion is irreversible — we cannot recover your data after this point

You can also export all your data before deleting your account. Go to Settings → My Account and click "Download My Data".

8. Your Rights

Under UK GDPR, you have the right to: access your data, correct it, delete it, export it, and withdraw consent. Contact us at hello@membrs.ai to exercise these rights.

9. Cookies

We use essential cookies for authentication (session cookie). We use localStorage for UI preferences. We do not use third-party tracking cookies.

10. Contact

Membrs is operated by Membrs Ltd (registered in England & Wales, company number 17352750). For privacy enquiries: hello@membrs.ai