MembersIntel is built and operated by Caseproof, LLC, the company behind MemberPress. This notice covers the marketing site at membersintel.com and the product at app.membersintel.com. For anything in this notice, write to [email protected].
We handle personal data in two different roles, and your rights run through different doors depending on which one applies to you:
We use Cloudflare Web Analytics to count visits to this marketing site. It records the page path, the referring page, and broad device characteristics (browser, operating system, country). It sets no cookie, stores nothing in your browser, and collects no identifier — we cannot tell one visitor from another, and we don't try. Cloudflare processes these measurements for us as a service provider. Our lawful basis is our legitimate interest in knowing whether the site works and which pages people read. Cloudflare retains the aggregate measurements for [TBD — Allen: Cloudflare's written retention position for Web Analytics].
Because these measurements contain no identifier, we cannot link them back to you, and GDPR does not require us to collect extra data just to make that possible (Article 11). In practice this means access, deletion, and portability requests cannot be applied to analytics data — there is nothing of yours in it to find.
One promise that follows: we do not place this analytics beacon on any page whose URL carries a token or identifier, and we do not encode people or accounts into marketing URLs.
The marketing site uses one cookie and one local-storage key, both first-party and both functional:
There is no advertising, no third-party tracking, and no cross-site anything.
Our contact and connect forms use Cloudflare Turnstile to tell humans from bots. Turnstile runs a check in your browser when those forms load; Cloudflare processes the signals needed to make that call, on our behalf.
When you write to us through the contact form we collect your email address, your message, and — if you give them — your name and a subject line. We use it to reply, and for nothing else. Once your request is resolved, the submission is automatically deleted 90 days after resolution. If you message us from inside the app instead, that message is linked to your account and kept as account data — see "How long we keep things".
Signing up collects your email address and a password, or — if you choose "Continue with Google" — Google tells us your email address and basic profile instead. A display name is optional. We use this to run your account, and it's needed to perform our contract with you.
When you connect a WordPress site, we sync the data the advisor works from: member records, memberships, transactions, subscriptions, and engagement activity. This is the substance of the service, and how we handle it is described throughout this notice — see "How long we keep things" for what happens when you disconnect.
Your conversations with the advisor are stored in your account so you can return to them. The advisor also keeps two kinds of memory: a business profile per connected site, and account-level memory — notes and conclusions it records about your business across sessions. Both exist to make the advisor useful; neither is used to train AI models (see "Our commitments" on the trust page).
Pro billing runs through Stripe. We send Stripe your email address; the checkout and billing pages where you enter card details are operated by Stripe, so your payment details go to Stripe directly and never touch our servers.
We send transactional email (receipts, sync alerts, account notices) via Resend. If you email support or [email protected], we keep the correspondence as long as we need it to help you.
If you're a member of a membership site and that site's owner connected it to MembersIntel, we hold a synced copy of some of your data: your email address, first and last name, and your membership, transaction, and subscription records and engagement activity from that site. We process it only on the site owner's instructions, to give them insights about their own business — the site owner is the controller of that data, and we are their processor.
That means your privacy rights over this data — access, correction, erasure — run through the site owner, not through us. Contact the site you're a member of; when they act on your request, we carry it out. Our data processing agreement with site owners is available on request via [email protected].
We keep one canonical, dated list of every sub-processor this product uses — who they are, what they do, and when we last checked — on our trust page. We don't duplicate it here, because two lists drift apart and one of them ends up wrong.
| Data | How long |
|---|---|
| Contact-form submissions | Deleted automatically 90 days after your request is resolved. Messages sent from inside the app are linked to your account and kept as account data — see "Account data" below. |
| Synced site data (members, transactions, subscriptions) | Deleted immediately when you disconnect the site. Residual copies in automated backups expire within 14 days. |
| Site business profile | Deleted immediately when you disconnect the site. Residual copies in automated backups expire within 14 days. |
| Site-derived advisor memory (conclusions the advisor recorded from chats about a specific site) | Deleted when you disconnect the site. |
| Chat transcripts | Stay in your account after a disconnect, so your history survives a reconnect. Deleted with your account. |
| Account-level advisor memory (memories you asked the advisor to keep, and conclusions from portfolio-wide chats) | Stays with your account. You can ask us to remove entries, or all of it, at any time. |
| Erasure digests | When a member of a connected site exercises their right to erasure, we keep a keyed one-way digest of their email address (never the address itself) for as long as that site could be connected — it is the mechanism that stops a later sync from silently undoing the erasure. It cannot be reversed into an address, and we review whether these digests are still needed on a recurring schedule. |
| Account data | Kept while your account exists. See "Your rights" for deletion. |
| Analytics measurements | [TBD — Allen: Cloudflare's written retention position]; they contain no identifier either way. |
Two things stated plainly, because they surprise people: disconnecting a site is not deleting your account — your chats and account-level memory stay with the account, as the in-app disconnect screen also tells you. And there is no self-serve delete-account button yet: to delete your account, email [email protected] and we handle it through support.
MembersIntel runs in the United States: the application and database on Google Cloud in us-central1, with logs and release artifacts in Google's US multi-region. If you're in the EU/EEA or UK, your data is transferred to the US; where the law requires it, those transfers are covered by Standard Contractual Clauses with our vendors. [TBD — Allen: confirm executed SCC/DPA coverage per vendor before this sentence is published unqualified.]
If GDPR applies to you, you have the right to access your data, correct it, have it erased, restrict or object to how we use it, and receive a portable copy. Email [email protected] and we'll act on it — including full account deletion, which is handled through support today. You can also complain to your local supervisory authority, though we'd rather you gave us the chance to fix it first.
The one carve-out: identifier-free analytics data, per the analytics section above — there is nothing in it we could match to you.
If you're a California resident: the categories we collect are identifiers (name, email), commercial information (billing records, subscription status), and internet activity (the aggregate, identifier-free analytics described above). We collect them for the purposes in this notice, from you directly or from your connected site. We do not sell your personal information and we do not share it for cross-context behavioral advertising — which is why you won't find a "Do Not Sell or Share" link here; there's nothing it would turn off. You have the right to know, to delete, to correct, and to never be discriminated against for exercising any of it. Same email: [email protected].
MembersIntel is a business tool. It is not directed at anyone under 16, and we don't knowingly collect their data.
When this notice changes, we'll update it here and move the date at the top. If a change meaningfully reduces your rights or expands what we collect, we'll tell account holders directly before it takes effect.
Caseproof, LLC — [email protected]. That mailbox is read by humans who can actually do something about your request.