Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains what information GraceMembership ("we," "us," "our") collects when you use gracemembership.com (the "Site"), how we use it, who we share it with, and the choices you have about it. By using the Site, you agree to the practices described here.

1. Information We Collect

1.1 Information You Provide When Registering

When you create an account (either with email and password, or via Google Sign-In), we collect:

• Your name and email address.
• Your password, which is stored only as a one-way cryptographic hash. We never store passwords in plain text. (This does not apply if you sign in with Google.)
• Optionally, a profile photo and cover photo, if you upload them.
• A referral code (unique to you) and a record of who referred you, if you signed up through a referral link.

1.2 Information Generated Through Your Use of the Site

• Your membership tier and points balance (from our gamified rewards system).
• Your login streak and last-login date.
• Your notification preferences (mission updates, new video alerts, promotional emails).
• Content you create — community posts, comments, replies, and reactions.
• A Stripe Customer ID, which links your account to Stripe for payment processing. We do not store your card numbers on our servers — see Section 4.

1.3 Information Collected from Guests (No Account Required)

If you make a one-time tip without creating an account, we only collect the name you wish to display. Providing your email address is optional and is used only to send you a receipt or invoice if you choose to share it.

1.4 Anonymous Site Analytics

We log basic aggregate visit data — the page path visited and the country/country-code derived from the visit — for our own internal analytics dashboard. This information is not linked to any individual user account. We do not currently use any third-party analytics or advertising trackers (such as Google Analytics or Facebook Pixel).

2. Cookies

We use a single session cookie (via NextAuth) to keep you logged in during your visit. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings, but doing so may prevent you from logging in or using certain features.

3. How We Use Your Information

We use the information we collect to:

• Create and maintain your account.
• Process payments for memberships, purchases, and tips (via Stripe).
• Deliver the content and features associated with your membership tier.
• Send transactional emails (account confirmation, receipts, payment failure notices, support ticket updates).
• Send optional emails (mission updates, new video alerts, promotional emails) — only if you have opted in.
• Operate community features such as posts, comments, and reactions.
• Provide customer support.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Understand how the Site is used, in aggregate, to improve it.

4. Payment Information

All payments — memberships, shop purchases, and tips — are processed by Stripe. Card details are entered directly into Stripe's secure payment fields embedded on our pages. Your full card number never touches our servers or database. We retain only a Stripe Customer ID, transaction records, and PDF invoices for accounting, compliance, and dispute-handling purposes.

Stripe's own privacy practices are governed by their Privacy Policy.

5. Third-Party Services We Use

Service	Purpose
Stripe	Payment processing (memberships, shop purchases, tips)
Google Sign-In	Optional login/registration method
Google reCAPTCHA	Bot and spam protection on the registration form
Email delivery (SMTP)	Sending account, payment, and notification emails

Each of these providers processes only the minimum information needed to perform its function, and each has its own privacy policy governing how it handles that data.

6. Emails We Send

We send two categories of email:

• Transactional emails — welcome, email verification, payment invoices, payment failure notices, and support ticket updates. These cannot be opted out of, because they are necessary to operate your account.
• Optional emails — mission announcements, new video alerts, and promotional campaigns. You can opt in or out of each of these separately in your account notification preferences at any time.

7. How We Share Your Information

We do not sell your personal information, and we do not share it with advertisers.

We share information only in these limited situations:

• With service providers that help us operate the Site (see Section 5), and only to the extent needed for them to perform their service.
• To comply with law — for example, a valid subpoena, court order, or lawful government request.
• To protect our rights or safety — for example, to investigate fraud, abuse, or violations of our Terms.
• In a business transfer — if GraceMembership is acquired or merged with another organization, your information may be transferred as part of that transaction. We will notify you if this happens.

8. User-Generated Content

Any content you post publicly on the Site — community posts, comments, reactions, or a display name on the supporter leaderboard (if you opt in) — is visible to other users and, in some cases, to the public. Please do not post anything you would not want to be seen by others.

9. Data Retention & Account Deletion

You can request account deletion from your account settings at any time. When you do, we remove:

• Your profile.
• Your community posts, comments, and reactions.
• Your notifications and points history.

We retain payment and tip records after account deletion for accounting, tax, and dispute-handling purposes, as required by financial recordkeeping practices. These records are no longer tied to an active login and are retained for the period required by applicable law.

Community posts that are removed by staff for violating site rules are kept in an internal "deleted" log for moderation review, rather than being permanently erased immediately.

10. Security

We take reasonable steps to protect your information:

• Passwords are stored only as one-way cryptographic hashes.
• Card details are handled exclusively by Stripe, a PCI-DSS Level 1 certified processor.
• The Site is served over HTTPS.
• Access to member data by our staff is limited to what is needed to operate the platform and provide support.

No system is perfectly secure, however, and we cannot guarantee absolute security of information transmitted over the internet.

11. Children

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete it. Depending on your country, a higher minimum age may apply (for example, 16 in some parts of the EU/UK), and you should not create an account if you are below the age required by your local law.

12. International Users

GraceMembership is operated from and hosted on servers that may be located in different countries. If you access the Site from outside those countries, your information will be transferred to, stored in, and processed there. By using the Site, you consent to this transfer.

12.1 Rights of Users in the European Economic Area, United Kingdom, and Similar Jurisdictions

If you are located in a jurisdiction with data-protection laws such as the GDPR, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to our retention requirements for financial records).
• Object to or restrict certain processing.
• Request a portable copy of your information.
• Withdraw consent for optional emails at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@gracemembership.com.

12.2 Rights of California Residents

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the "sale" or "sharing" of your personal information. We do not sell or share your personal information as those terms are defined under California law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through a notice on the Site. Continued use of the Site after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or the way we handle your information, please contact us:

• Email: privacy@gracemembership.com
• Support: through the Support ticket system in your account