I Am A Member Privacy Notice

Version 1.0 | Effective 30 October 2026

1. Who we are

CX Solutions, a company incorporated in Jamaica, business registration number 15084/2022. Address (including for service of legal documents): 14 Constant Spring Road, Kingston, Jamaica. Privacy contact: Privacy Officer, [email protected]. Support: [email protected].

2. Two roles

• We are the data controller for your Platform account, our own products (Member Plus, the Member Key, Consent extras, cosmetics), the Games Hub, Consent, security records, analytics and payments we collect.
• Each Client (the business or creator whose community you join) controls its membership list and community. We process that data for the Client on its instructions. The Client's name is shown before you pay.

3. What we collect

• Identity: your Telegram user ID, and your display name, used only as a label.
• Membership and payments: communities joined, plan, dates, renewals, cancellations and any pause or discount offer you take; payment identifiers and status from Stripe, PayPal or Telegram Stars. We do not store card numbers.
• Acceptances: which terms and version you accepted, the exact words, for which Client, and when.
• Age: your age confirmation when a group is in 18+ mode.
• Activity: "last active" dates.
• Games Hub: games played, wins, chips and points (play money), leaderboard position.
• Community: posts, reports and moderation records.
• Consent: requests you send or receive, and the messages in a Consent conversation.
• People who are not members: if someone asks to send you a Consent request, we use your Telegram ID and display name to show it to you.
• Technical: IP address, device and browser data, bot and Mini App logs (secrets removed), and cookies (see the Cookie Notice).

We will update this notice before any new feature that uses your data starts.

4. Why we use it

• Account, access, payments, renewals and our products: to perform our contract with you (or the Client's, as its processor).
• Games Hub and leaderboards: contract.
• Service messages (renewals, failed payments, cancellations, changes): contract.
• Security, fraud and cheat prevention, moderation and Consent reports: our legitimate interest in a safe platform.
• Showing a non-member a Consent request: our legitimate interest, limited to the ID and name and only while the request is open.
• Marketing our own products: to our customers, with an opt-out in every message and under /privacy; to anyone else, only with consent.
• Accounting and tax: legal obligation.
• Automated decisions: none with legal or similarly significant effects. Cheat flags are reviewed by a person before anyone is suspended.

5. Who we share with

• The Client whose community you join: your membership and payment status, and your display name.
• Telegram, and payment providers Stripe, PayPal and Telegram (Stars).
• Infrastructure: Railway (application hosting, United States); Neon (database, Amazon Web Services, Ohio, United States); Cloudflare (DNS and security, global); PostHog (analytics, European Union).
• Professional advisers, and authorities where the law requires.
• Other members can see your display name, posts and leaderboard position.
• We do not sell personal data.

6. Where your data goes

Your data is processed outside Jamaica, including in the United States. We rely on your consent at sign-up and on contracts that require equivalent protection.

7. How long we keep it

• Account and membership data: while your account exists, and until you ask us to delete it.
• Payment and acceptance records: for as long as tax and accounting law requires.
• Community posts: while the group exists, or until you delete them.
• Moderation records and reports: while we need them to keep groups safe.
• Technical logs: a short period, for security and troubleshooting.
• Unanswered Consent requests: deleted within 24 hours.
• Backups: older copies are gone within a day.

8. Your rights

You can ask to see and get a copy of your data, have it corrected or deleted, stop processing or marketing, and withdraw consent at any time. Your data export shows reports you made and reports about you, but not who reported you or what they wrote. We reply within 30 days. Contact [email protected] or send /privacy in the bot. You can also complain to the data protection authority where you live.

9. Age

Groups that are not in 18+ mode are for people at least 13. When a Client turns on 18+ mode for a group or use case, the bot asks you to confirm your age. We record your answer, the group and the date. If you do not confirm that you are 18 or older, you cannot join or use that group. We do not knowingly collect data from children under 13. If we learn we have, we delete it.

10. Security and breaches

• We encrypt data in transit (TLS via Cloudflare), keep secrets outside the code, verify Telegram logins and payment webhooks by signature, and use access control with two-factor authentication for admins.
• If a breach affects your data, we report it to the data protection authority within 72 hours of becoming aware, and we tell you.

11. Changes

We post new versions at iamamember.net/privacy and tell you in the bot about important changes.

The rights above apply to everyone.