Privacy Policy

This Privacy Policy explains how MembershipPortal collects, uses, discloses, and protects personal information when you visit our website, request information, or use our hosted membership platform, member portal, or mobile application (collectively, the "Services").

Organizations use MembershipPortal to administer their own members. For personal information an organization places in the Services, that organization determines why and how the information is used, and MembershipPortal processes it on the organization's behalf. Contact your organization first about its membership records or policies. MembershipPortal acts on its own behalf for website inquiries, platform account administration, security, and business operations.

Depending on how you interact with the Services, we may process:

• Identity and membership information: names, member numbers, organization relationships, membership options, status, dates, and eligibility.
• Contact and profile information: email, phone, mailing address, profile details, directory choices, communication preferences, and delivery preferences.
• Transaction information: dues, orders, receipts, refunds, publication fulfillment, and payment status. Card details are entered through Stripe-hosted checkout and do not pass through MembershipPortal.
• Account and security information: sign-in identifiers, authentication events, access roles, device and browser details, IP address, audit records, and security events.
• Content and communications: support requests, working-session inquiries, organization notices, listings, protected contact requests, and files submitted through the Services.
• Usage information: pages and features used, timestamps, diagnostic records, and session state needed to operate and secure the Services.

We receive information from you, your organization, authorized administrators, service providers, payment providers, and connected systems your organization chooses to use.

We use personal information to:

• provide, maintain, personalize, and support the Services;
• manage accounts, memberships, payments, publications, and access decisions;
• authenticate users, enforce permissions, prevent fraud, and investigate abuse;
• complete requests and communicate about service or membership activity;
• monitor reliability, troubleshoot problems, and improve the Services;
• meet legal obligations and protect users, organizations, and the public; and
• respond to inquiries and evaluate whether MembershipPortal fits an organization.

Where required, we rely on a contract, legitimate interests, legal obligations, or consent as the legal basis for processing. When we process information for a customer organization, that organization determines the applicable legal basis.

We may disclose personal information to:

• your organization and its authorized administrators, according to assigned roles and organization policy;
• infrastructure, hosting, authentication, communications, customer-relationship, and security providers that process information for us;
• Stripe for hosted payment processing and financial operations initiated by you or your organization;
• connected services and fulfillment providers at your organization's direction;
• professional advisers, auditors, insurers, and parties to a business transaction, subject to appropriate confidentiality protections; and
• authorities or other parties when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or enforce agreements.

MembershipPortal does not sell personal information for money or share personal information for cross-context behavioral advertising. We do not use member records to advertise unrelated products.

The Services use cookies and browser storage that are necessary for authentication, security, organization selection, saved session state, and requested workflows. These technologies may store a session token, organization identifier, security state, or short-lived workflow details.

You can configure your browser to restrict these technologies, but essential parts of the Services may stop working. We do not currently use third-party advertising cookies on the MembershipPortal website.

We retain information for as long as needed to provide the Services, follow a customer organization's documented instructions, maintain reliable financial, publication, security, and audit records, resolve disputes, and meet legal obligations. Retention periods vary by record type and organization policy.

We delete or de-identify information when it is no longer needed, subject to legal holds, fraud prevention, backup cycles, and records that must be preserved. An organization may retain required financial, membership-period, security, and completed mailing history after erasing other member details.

Depending on where you live and the context, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to withdraw consent or appeal a request decision. You may also have the right to complain to a privacy or data-protection authority. We will not discriminate against you for exercising an applicable privacy right.

For organization-controlled member information, submit your request through your member profile or contact the organization that manages the record. You may also email support@membershipportal.org. We may need to verify your identity and authority before completing a request. Some rights are subject to legal exceptions.

We use administrative, technical, and organizational safeguards designed to protect personal information, including tenant isolation, role-based access, multi-factor authentication for sensitive administration, encryption in transit, private asset controls, audit records, and recovery procedures. No system can guarantee absolute security.

MembershipPortal and its providers may process information in countries other than where you live. Where required, we use contractual and other safeguards intended to protect information transferred across borders.

For more detail about platform safeguards, review our Trust and security overview.

The Services are designed for organizations and their membership communities and are not directed to children under 13. We do not knowingly collect personal information directly from a child under 13 without authorization required by law. If you believe a child provided information improperly, contact us so we can investigate.

We may update this policy as the Services or legal requirements change. We will post the revised policy here, update the date above, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

Questions about this policy or MembershipPortal's privacy practices may be sent to support@membershipportal.org. Use your organization's support contact for questions about its membership policies and records.

Your use of the Services is also governed by our Terms and Conditions and any agreement between MembershipPortal and your organization.