Draft for legal review. This privacy policy is a draft. It has not yet been reviewed by a lawyer and may change before it takes effect.
Last updated: 4 October 2026 (draft)
Who we are
MemberCrew is made by ZenByte Australia Pty Ltd (ABN 38 698 761 956), a business based in Adelaide, South Australia. In this policy, “we”, “us” and “our” mean ZenByte Australia Pty Ltd.
This policy explains how we handle personal information through the MemberCrew website and the MemberCrew service. We have written it to follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Two kinds of information, two roles
Information we collect for ourselves. When you visit the website, ask for a demo, download a resource, or use MemberCrew as a committee member of a subscribing club, we collect some information about you. We decide how that information is used, and this policy covers it.
Information we hold for clubs. Each club that uses MemberCrew decides what information it collects about its members and controls that information. We store and process it on the club’s behalf, to provide the service. How the club uses its members’ information is covered by the club’s own privacy arrangements. How we handle it for the club is covered by this policy and by our data processing terms.
If you are a member of a club and have a question about your information, please contact your club first. We help clubs respond to their members’ questions and requests.
What we collect
When you visit the website
- Visitor statistics. We use Vercel Web Analytics to count visits. It does not use cookies. It records the page, the site you came from, your approximate location (country, region and city), your device type, operating system and browser. Visits are grouped using a code generated from the request, and that code is discarded after 24 hours. We see totals, not individual people.
- Spam checks. Our forms use Cloudflare Turnstile to check that a person, not a program, is sending them. To do this Cloudflare collects information about your connection and browser, including your IP address, browser details and the site you are on.
- Delivering the website. Our hosting provider, Vercel, processes technical information such as your IP address to deliver pages to you.
When you ask for a demo
Your name, club, role in the club, the club’s number of current members, email address, phone number (optional), any message you include (optional), how you heard about MemberCrew, and whether you want MemberCrew news.
When you download a resource
Your name, club, email address, how you heard about MemberCrew, and whether you want MemberCrew news.
When your club uses MemberCrew
- Committee members and other people who log in for the club: name, email address, login details, the role the club gives you, and a record of the changes you make (the activity log).
- The club’s billing contact: the details needed to bill the club for MemberCrew. Card details are entered with Stripe and held by Stripe.
- Club members (held for the club): the information the club records in MemberCrew, such as names and contact details, membership details and history, vehicles and log books, invoices and payments, event replies, and the activity log of changes to these records.
Why we collect it
We use personal information to:
- respond to enquiries and arrange demos;
- give you the resource you asked for;
- provide MemberCrew to clubs, including support;
- bill clubs for MemberCrew;
- keep the website and the service secure and free of spam;
- keep records the law or a club’s obligations require;
- send MemberCrew news, but only to people who ask for it.
We do not sell personal information.
MemberCrew news
We send news emails only to people who tick the box asking for them. Every news email has an unsubscribe link, as the Spam Act 2003 (Cth) requires. Replying to an enquiry or sending service messages to a club is not news, and does not depend on that box.
Who we share it with
We use these service providers to run the website and the service. Each handles personal information only to provide its service to us.
| Provider | What it does for us |
|---|---|
| Supabase | The main MemberCrew database, in Sydney (Australia) |
| Vercel | Hosting the website and the service, and delivering pages. The service’s server functions run in Sydney (Australia). |
| Stripe | Payments into each club’s own Stripe account, and our billing of clubs |
| Resend | Sending email from MemberCrew, once email is switched on |
| Cloudflare | Turnstile spam checks on our forms |
| Vercel Web Analytics | Cookieless visitor statistics for the website |
We may also disclose personal information where the law requires or allows it.
Overseas disclosure
The main MemberCrew database and the service’s server functions are in Sydney. That does not mean all information stays in Australia. Our providers may process information in other countries:
- Supabase stores the database in the region we chose (Sydney) and primarily processes it there. Its terms allow processing wherever Supabase or its own providers have facilities, including the United States.
- Vercel delivers pages through a worldwide network of more than 100 points of presence in about 50 countries, so a request may pass through a location near the visitor. Vercel’s primary processing facilities are in the United States, and it may process information anywhere Vercel or its providers operate.
- Stripe may transfer information to other countries, including the United States and India, and processes information in a number of countries where Stripe operates. For Australian businesses, Stripe’s local entity is Stripe Payments Australia Pty Ltd.
- Resend stores account data, email details and logs in the United States. Emails may be sent from the United States, Ireland, Brazil or Japan.
- Cloudflare primarily stores information in the United States and the European Economic Area, and may access it from other countries where Cloudflare operates.
- Vercel Web Analytics is provided by Vercel (see above). It does not record information that identifies individual visitors.
Storage and security
MemberCrew protects information in these ways:
- Role-based access. Each person who logs in for a club sees only what the role the club gives them allows.
- An activity log. Every change to a club’s records is recorded, showing who made it and when.
- The club owns its data. A club can export all of its records at any time.
How long we keep it
- Club records. Clubs on the SA Conditional Registration Scheme must keep records for five years, so activity and compliance records are kept at least that long.
- When a club leaves. The club gets a full export of its records. Its data is then deleted on request, once the club confirms it has the export.
- Enquiries and downloads. We keep these for as long as we need them to respond and to keep a record of our dealings with you.
Data breaches
If a data breach is likely to cause serious harm, we follow the Notifiable Data Breaches scheme. If a breach affects a club’s information, we tell the club promptly and work with it on any notices that need to be given.
Accessing and correcting your information
You can ask for the personal information we hold about you, and ask us to correct it, by emailing support@membercrew.au. If you are a member of a club, your club controls your membership records, so please ask your club first. Members can also update their own contact details in the MemberCrew member portal.
Complaints
If you have a concern about how we have handled your personal information, email support@membercrew.au and tell us what happened. We will look into it and reply.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC): www.oaic.gov.au, phone 1300 363 992.
Contact
- Privacy questions and support: support@membercrew.au
- Demos: hello@membercrew.au
- Post: Placeholder: postal address
- Phone: Placeholder: phone number
ZenByte Australia Pty Ltd, ABN 38 698 761 956, Adelaide, South Australia.
Changes to this policy
We may update this policy. The current version is always on this page, with the date it was last updated.