Privacy policy

Last updated September 30, 2026

ClubReach gives play-money poker clubs tools to invite players: personal invite links, a club page, a Telegram bot, and replies to people who ask for an invite on Instagram. Facebook Login is used by owners to connect eligible Instagram accounts. Facebook acquisition is not part of this pilot. This page explains what we collect and why.

Club owners and admins

We store your name, email address, a hashed password, and the club details you enter. Payments are handled by Stripe; we never see or store card numbers.

Players who use a club’s Telegram bot

• Your Telegram user id, first name, and username, so the bot can talk to you and credit whoever invited you.
• Your answers during sign-up: that you’re 18 or older, your ClubGG player ID, and nickname.
• Which invite link brought you, your RSVPs to games, and whether you muted announcements.

People who comment or message a club on Instagram

When you comment one of the club’s keywords or message its Instagram account, we process account-scoped identifiers, the originating comment and post, and the messages needed to answer the invitation, 18+ and ClubGG-experience questions. We store conversation stage, the acknowledgement and experience answer, event identifiers, timestamps, provider acceptance and job status. Raw inbound message text and usernames are not retained in webhook records. Outbound message jobs contain the minimum recipient and message details needed to send them.

A comment allows one initial private reply. We wait for your response before continuing within Meta’s messaging window. Send STOP to stop this automated onboarding. An 18+ answer is self-attestation, not verified age. We do not scrape profiles or contact people who have not contacted the account first.

Tracked links record Instagram as a marketing source and may record the originating post. A copied link does not prove the Telegram player owns the Instagram account, so we do not merge those identities. Member referral credit is recorded separately and requires a valid member invite.

Visits to a club page

When you tap Join, we record which link you came from and a keyed hash of an address supplied by a configured trusted proxy, when available, to count visits and spot abuse. We do not store that address in visit records. A cookie remembers who invited you for 30 days.

What we don’t do

• We don’t sell personal data or use it for advertising.
• We don’t handle real money. Clubs on ClubReach are play-money only.

Who can see it

Each club’s owner and admins see the data for their own club. Our service providers (hosting, email delivery, Stripe) process data on our behalf.

Keeping and deleting data

Club data is kept while the club uses ClubReach, subject to deletion requests and operational record requirements. Players can request deletion from the club owner or ClubReach support, send STOP to halt Instagram onboarding, or block the Telegram bot to stop bot messages. Blocking a bot does not itself delete membership or reward records.

An owner can disconnect Instagram in Connections, which disables future sends and removes usable credentials. An owner can also revoke access or request deletion through Facebook’s connected apps or business integrations. We verify Meta’s signed callback against the authorizing owner identity. Revocation stops sends; a data-deletion callback also erases associated Instagram conversations, webhook records, and recipient/message data in queued jobs. It does not silently delete a separate Telegram member or chip fulfillment record based on a shared link.

Play money only. No real-money gambling, deposits, withdrawals, or prizes with cash value. 18+ only. ClubReach and the clubs that use it are independent and not affiliated with, endorsed by, or sponsored by ClubGG.