Last updated: September 2026
ClubPost ("we", "our", or "us") is operated in New South Wales, Australia. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you use the ClubPost web platform and mobile application ("Service"). We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This is an operational privacy policy that describes ClubPost's current implementation. It is not a substitute for professional legal advice. If you have questions about a specific compliance obligation, please contact us.
We may collect the following types of personal information:
We do not sell your personal information to third parties.
We use your information to:
Where you access or join ClubPost through an eligible Association Partner link or code, ClubPost may record that attribution. Attribution information may be used to administer promotional offers (such as extended trial periods) and to calculate Partner commission on qualifying subscriptions.
Relevant historical attribution and commission records may be retained for financial reconciliation and audit purposes. Partners do not receive your card details, payment credentials, passwords, or private Stripe account information.
If you invite Team Members to your Club, ClubPost processes their name and email address to enable collaboration and account administration. Team Members are not Club owners; their access is limited to the role and permissions assigned within the Club. The Club owner remains responsible for ensuring they have permission to add Team Members and share their contact details.
ClubPost Team Clubs can connect a Facebook Page and an Instagram Business or Creator account, publish a finished post straight to those platforms, and schedule posts for a later date and time. Facebook and Instagram are currently the only platforms ClubPost publishes to directly. Free and Pro Clubs do not publish through ClubPost — they download the graphic and post it themselves.
To provide this, ClubPost processes only the information required to operate the connection and the publishing you request:
ClubPost does not read your private messages, does not collect your followers or audience lists, does not build audience profiles, and does not collect engagement or performance analytics from Facebook or Instagram.
You direct all publishing. ClubPost does not decide what to post on your behalf. You choose the content, the platform, whether it publishes immediately or on a schedule, and the scheduled date and time. You can reschedule or cancel a scheduled post before it publishes.
Third-party social publishing service. ClubPost uses a third-party social publishing service to facilitate the Facebook and Instagram connection and delivery of your posts. Information required for that purpose — such as the connected account identifiers, the scheduled time, and the image and caption you selected — is shared with that service to deliver the publishing you requested.
Account access. Social account access used for publishing is handled securely on ClubPost's server-side systems and is not exposed through the normal app interface. It is used only to establish the connection, publish or schedule the content you request, and check account and publishing status.
Removing a connection. Connected accounts belong to the Club, not to an individual member. A connected account is removed from ClubPost when the Club is permanently deleted (see section 10). If you want a connected account removed from ClubPost at any other time, contact us at support@clubpost.com.au and we will action it. You can also revoke ClubPost's access at any time from your Facebook or Instagram account settings, which stops further publishing.
We may share your information with the following categories of service providers, solely to deliver the Service:
We may also disclose information if required by law, court order, or government authority in Australia or otherwise, or in the event of a merger, acquisition, or sale of all or part of our business. Where we disclose information to overseas recipients, we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles.
Your data is stored on secure cloud servers. We implement industry-standard security measures including encryption in transit (TLS) and at rest. However, no method of electronic transmission is 100% secure, and we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.
We distinguish between operational customer data (used to run your Club and account day-to-day) and records retained for legal, financial, and audit purposes.
Operational data — such as posts, assets, Club settings, and Team Member associations — is retained while your account and Club are active, and is removed when you permanently delete your Club or account as described in section 10.
Retained records — including subscription history, payment identifiers, AI Credit ledger entries, Association Partner commission records, Partner payout records, and deletion/audit information — are retained for as long as reasonably necessary for the purposes for which they are retained and to meet applicable legal, accounting, and regulatory obligations. These records may be kept in limited or anonymised form where appropriate.
Specific financial retention periods should be confirmed with ClubPost's accountant or legal adviser. If you require further detail about retention periods for a specific record type, please contact us.
You can manage deletion from Account Info → Danger Zone, which offers two separate actions:
Delete Club: Permanently closes your owned Club. This immediately cancels active Club billing, removes operational Club data, removes Team access, disconnects stored social connections, and forfeits any unused Club AI credits. The Club is tombstoned (marked as deleted and excluded from normal product flows). Required financial and audit records are retained as described in section 9. Your User account is preserved.
Delete My Account: Where you own a Club, that Club is deleted first (as described above). Your memberships in other Clubs are removed, your personal operational data is removed or anonymised, and your Base44 User account is deleted. Required financial and audit records may be retained in limited or anonymised form where appropriate.
Social media and deletion. Connected social accounts and scheduled posts belong to the Club. Deleting your personal ClubPost account, or removing an individual Team Member, does not disconnect the Facebook or Instagram accounts and does not cancel scheduled posts belonging to a Club that continues to exist. When a Club is deleted, ClubPost first attempts to cancel that Club's outstanding future scheduled posts with the third-party publishing service, removes the Club's stored social connection records, and removes the Club's operational social records. Confirmed cancellations are processed; any cancellation that cannot be confirmed is retained for support review so it can be followed up. ClubPost does not represent that the third-party service's own account or profile records are deleted automatically — if you require that, contact us and we will action the request.
Deletion does not automatically entitle you to a refund. See the Terms of Service for refund and consumer rights information.
Deletion requests by email. If you cannot access the app, or you want a connected social account or specific data removed without deleting your whole account, email support@clubpost.com.au from the address associated with your account and tell us what you would like removed. See also our data deletion instructions.
When you delete a Club or account, uploaded assets (logos, photos, media) and their references within ClubPost are removed from your active account. Some underlying files may require additional secure deletion processing by ClubPost's storage or infrastructure provider. This means that while assets are no longer accessible through the Service after deletion, the underlying file objects may persist on storage infrastructure for a period until fully purged. Required legal or financial records that reference those files may be retained separately as described in section 9.
Our web platform uses cookies and similar technologies to maintain your session and improve user experience. We use Google Analytics (GA4) to collect usage analytics — such as page views, feature interactions, and performance metrics — to understand how the Service is used and to improve it.
ClubPost does not intentionally send AI prompt text, AI-generated content bodies, uploaded media, OAuth tokens, or payment credentials in analytics events. You can disable cookies in your browser settings, though this may affect some functionality.
Depending on your location, additional cookie consent obligations may apply under local law. International cookie and consent compliance is under review.
Under the Privacy Act 1988 (Cth), you have the right to:
To exercise these rights, please contact us at the details below.
Where ClubPost is available on the Apple App Store, our use of data from the iOS app is consistent with this Privacy Policy. We do not use Apple frameworks to collect data beyond what is described here. For information about Apple's own data practices, please refer to Apple's Privacy Policy.
ClubPost is a tool for Club administrators and volunteers. It is not directed at children under the age of 13, and we do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
ClubPost is used by community sporting clubs, and the photographs Clubs upload may include junior players. Clubs upload and publish this material at their own direction. If you upload a photograph of a player — particularly a player under 18 — you are responsible for confirming that you have the consent and authority required by your club, association or governing body to use and publish that image. ClubPost does not verify consent on your behalf. If a player, parent or guardian asks for an image to be removed, remove it from your Club assets and contact us if you need assistance.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the Service or by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
If you have any questions, concerns, or complaints about this Privacy Policy or how we handle your personal information, please contact us:
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).