Privacy Policy
Last updated: 17 October 2026
XClub ("XClub", "we", "us") runs invite-only gatherings and city chapters for founders, product leaders and AI practitioners. This policy explains what personal information we collect through xclub.global, our Apply form, our event registrations and our advertising, why we collect it, who we share it with, and the choices you have.
Questions, requests and grievances: pradeep@xclub.global
1. What we collect
Apply form.
When you request an invite, we collect your full name, work email, LinkedIn URL, role & company, chapter, city, what you would bring, referred by (optional), event (if you are applying for a specific gathering) and your agreement to The Code.
Event registrations (Luma).
We use Luma to manage event registration and, for paid events, payment. Luma collects the details asked for at registration, typically your name, email, company, role, LinkedIn and any answers to registration questions, and shares them with us as the event host. Your use of Luma is also governed by Luma's own privacy policy. Payments are handled by Luma and its payment processor; we never see or store your full card details.
Website analytics.
We use Vercel Web Analytics to understand how the site is used: pages viewed, referring sites, device type, browser and approximate country. This data is aggregated, does not identify you personally, and does not use cross-site tracking cookies.
We use Microsoft Clarity to understand how visitors use the site through anonymised clicks, scrolls and heatmaps.
Advertising.
We may use the Meta Pixel and the LinkedIn Insight Tag on our site, and lead forms on Meta (Facebook and Instagram) and LinkedIn. These tools use cookies and similar technologies to measure how our ads perform and to build advertising audiences, for example people who visited our site or people similar to them. If you submit a Meta or LinkedIn lead form, we receive the details you enter in it, and the platform's own privacy policy also applies.
Messages.
If you email us, we keep what you choose to send.
2. Why we use it, and our legal bases
Where we rely on consent, you can withdraw it at any time (section 9). A person reviews every request; we do not make automated decisions about you.
4. Service providers and other sharing
We do not sell your personal data.
We use these providers (processors) to run XClub. They handle data on our behalf, or under their own terms where stated:
- Vercel: website hosting and Vercel Web Analytics.
- Google Workspace: email, and storing and reviewing invite requests.
- Luma: event registration, ticketing and payments (also under Luma's privacy policy).
- Meta: Meta Pixel, ads and lead forms (also under Meta's privacy policy).
- LinkedIn: LinkedIn Insight Tag, ads and lead forms (also under LinkedIn's privacy policy).
Apart from these providers and event sponsors and partners (section 3), we share information only:
- with other guests at an event you attend, for example your name, role and company on a badge or guest list;
- where required by law, or to protect the rights and safety of our members, guests or XClub;
- with a successor, if XClub is reorganised or transferred, under the same protections as this policy.
6. At our gatherings
The Code applies to everyone: no recordings, no photos of people, no notes for publication. We don't record conversations at our gatherings, and we won't publish identifiable photos of guests without asking first.
7. How long we keep it
- Applications: up to 24 months after our last contact with you, or until you ask us to delete them, whichever is sooner.
- Event registrations: while you take part in XClub, then up to 24 months after your last contact with us, or until you ask us to delete them.
- Analytics: kept only in aggregated form.
- Payment and tax records: as long as the law requires.
8. Where your data is stored
Our providers may store and process data in India, the United States, the European Union, the UAE and other countries. When data moves across borders, we rely on the safeguards those providers offer, such as standard contractual clauses where applicable.
9. Your rights
You can ask us to:
- give you access to the personal data we hold about you;
- correct or update it;
- delete it;
- withdraw your consent at any time, including to sponsor and partner sharing;
- stop or restrict certain uses, or object to uses based on legitimate interests;
- give you a copy of your data in a portable format.
India (Digital Personal Data Protection Act, 2023). You have the rights to access information, correction and erasure, grievance redressal, and to nominate another person to exercise your rights. For grievance redressal, email pradeep@xclub.global. We will acknowledge your grievance and respond within the time the law requires. If you are not satisfied, you may approach the Data Protection Board of India.
EU and UK (GDPR). You have the rights listed above and may complain to your local data protection authority.
UAE (Federal Decree-Law No. 45 of 2021, PDPL). You have the rights to access, correction, erasure, restriction and objection, and may complain to the UAE Data Office.
To use any of your rights, email pradeep@xclub.global from the address you used with us. We reply within 30 days, or sooner where the law requires. Withdrawing consent doesn't affect sharing that happened before you withdrew, but we will ask the recipients to delete your details.
10. Security
We limit access to people who need it, use reputable providers, and protect our forms against spam and misuse. No system is perfectly secure. If a breach affects you, we'll tell you and the authorities as the law requires.
11. Under-18s
XClub is not intended for anyone under 18. We don't knowingly collect personal data from anyone under 18. If you believe we have, email us and we'll delete it.
12. Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell members and registered guests by email.
13. Contact
XClub · pradeep@xclub.global