Privacy policy

Who we are

Madclub is operated by NOT_CONFIGURED, registered at NOT_CONFIGURED.

This policy explains what personal data Madclub collects, why, who it is shared with, and how to reach us about it. It covers madclub.co and the Madclub app.

What we collect

Account details. A name, a username, and at least one verified way to reach you — a mobile number, an email address, or both. We record whether each has been verified, and when.

Profile details you choose to add. A display name, a short bio, and profile or cover images you upload.

Booking and payment records. The trips you book, who you booked for, and the amounts involved. Card, UPI and bank details are handled entirely by our payment gateway — they never reach Madclub's servers and we cannot see them.

Things you post. Reviews you write after a trip you attended, and your messages and events inside clubs you join.

Technical records. Server logs of requests to the platform. These identify records by id only — we do not write contact details into logs.

Sign in with Google

If you sign in with Google, we request three basic scopes and no others: openid, email and profile. That gives us your Google account's stable identifier, your email address, and basic profile information such as your name and profile picture.

We do not request, receive, or have any access to your Gmail, Drive, Calendar, Contacts, or any other Google service or data.

We link your Madclub account to Google's stable account identifier, never to your email address alone — so if an email address is ever reassigned, it cannot hand your Madclub account to someone else.

You can revoke Madclub's access at any time from your Google Account's security settings. Doing so stops future Google sign-ins; it does not by itself delete your Madclub account.

Why we use it

To run the service: creating your account, signing you in, taking bookings, issuing refunds, and paying operators.

To keep the marketplace trustworthy: verifying operators before they can publish, confirming that a review comes from someone who actually attended, and investigating safety reports.

To send you messages you need — booking confirmations, payment and refund notices, and sign-in codes. We do not sell your data, and we do not use it for third-party advertising.

Who we share it with

Payments are processed by Razorpay, which receives what it needs to take payment and issue refunds.

Transactional email is sent through Amazon Simple Email Service, and WhatsApp messages through Twilio. Each receives the address or number being messaged and the message itself.

Operators receive only what they need to run the trip you booked with them — your name, the participants you listed, and the contact details required to reach you about that specific trip.

Uploaded images are stored on Madclub's own infrastructure, not a third-party media host.

We may disclose data where the law requires it. We do not otherwise share your personal data with third parties.

Keeping and deleting your data

We keep account and booking records for as long as your account exists and for as long afterwards as tax, accounting and dispute-resolution obligations require.

You can ask us to correct or delete your personal data using the contact below. Some records — a completed booking's financial trail, for instance — must be retained even after an account is closed, because the law requires it.

Your rights and how to reach us

You can ask what personal data we hold about you, ask us to correct it, ask us to delete it, or complain about how it has been handled.

Grievance Officer: NOT_CONFIGURED. Write to NOT_CONFIGURED and we will acknowledge your complaint and respond to it.

For anything else, customer care is at NOT_CONFIGURED.

Changes to this policy

If we change what we collect, why, or who it goes to, we will update this page and change the date at the top. Continuing to use Madclub after a change means the updated policy applies.