Privacy Policy

Who we are

IB Club India ("we", "IB Club", "the platform") operates ibclub.org, a premium professional network for investors, founders, and business leaders in India. We are the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDPA").

Data we collect

• Account data — name, email, password hash, optional phone, profile photo, bio, city/state, sectors.
• Activity data — businesses you list, investor offers, benefits you create or redeem, event RSVPs, connections, ratings/reviews, bookmarks.
• Communication data — connection messages, intro requests, event invites you send/receive.
• Payment metadata — payment ID, amount, currency, status. Card numbers are never stored on our servers — Razorpay handles payment instruments directly.
• Technical data — IP address, browser user-agent, device type (for security + rate limiting only).

Why we process your data

• Service delivery — running the network, matching deals, sending notifications.
• Communication — transactional emails (login, password reset, invites). Marketing emails are opt-in only.
• Security — fraud prevention, rate-limiting, abuse detection.
• Analytics — aggregated, anonymized usage stats. Only if you've opted in via the cookie banner.

Who we share with

We do not sell your personal data. Limited sharing:

• Other members — your public profile, businesses, offers, benefits are visible to other authenticated members.
• Service providers — Razorpay (payments), Resend (transactional emails), MongoDB Atlas (database hosting), AWS / Cloudflare (infrastructure). All bound by data processing agreements.
• Legal compliance — when required by Indian law or a court order.

How long we keep it

Active account data is retained while your account is active. Upon account deletion, we begin a 30-day grace window (so you can reverse the decision), after which personal data is purged. Aggregated, anonymized statistics may be retained indefinitely.

Your DPDPA rights

Under Section 11-14 of the DPDP Act 2023, you have the following rights:

• Right to access — download all data we hold about you. Exercise this right →
• Right to correction — edit your profile any time from your dashboard.
• Right to erasure — request account deletion. Request deletion →
• Right to grievance redressal — contact our Data Protection Officer at dpo@ibclub.org.
• Right to withdraw consent — adjust your cookie + notification preferences any time. Settings →

Cookies

We use three categories of cookies:

• Essential — login session, security, accessibility. Cannot be disabled.
• Analytics — anonymized usage tracking. Opt-in only.
• Marketing — personalized recommendations + event invites. Opt-in only.

Contact us

Questions about this policy or your data?

dpo@ibclub.org — Data Protection Officer