Legal

Policies that protect our members and partners

Comprehensive legal documentation covering Privacy, Terms, Cookies, Acceptable Use, Security, and Copyright policies.

Latest updates

Updated December 2025 with comprehensive policy content including Cookie Policy, Acceptable Use Policy, and DMCA procedures.

Privacy Policy

Last updated 2025-12-15

CariClub collects only what we need to connect executives with nonprofit board opportunities. We never sell your personal information. You control your data with access, correction, deletion, and export rights.

• We do NOT sell your personal data
• GDPR & CCPA/CPRA compliant
• 90-day data recovery period after deletion
• Transparent sub-processor disclosures

Information We Collect

• Account details (name, email, password)
• Professional information (employment history, education, skills, board experience)
• Profile content (photo, biography)
• Payment information processed securely through Stripe.
• Automatically collected information: device identifiers, IP addresses, browser type, usage data (pages viewed, features used, time spent), and authentication logs for security.

Terms of Service

Last updated 2025-12-15

The agreement governing your use of CariClub. By creating an account, you agree to these terms, including our arbitration agreement and class action waiver.

• 30-day arbitration opt-out window
• Individual arbitration (no class actions)
• Small claims court exception preserved
• Clear IP ownership and licensing

Eligibility & Accounts

You must be at least 18 years old and able to form binding contracts. You must provide accurate information and keep it updated. You are responsible for maintaining account security and all activities under your account. One person per account; accounts are non-transferable. We may suspend or terminate accounts for violations of these terms.

Cookie Policy

Last updated 2025-12-15

CariClub takes a privacy-first approach. We currently use only essential cookies for authentication and security. Analytics and marketing cookies are NOT active.

Your Cookie Choices

We use strictly necessary cookies that cannot be disabled:

• cc_session (maintains your authenticated session, expires on browser close)
• cc_auth_token (stores encrypted authentication token, 7 days)
• cc_csrf_token (protects against cross-site request forgery, session)
• cc_device_id (identifies your device for security monitoring, 1 year)
• cc_cookie_consent (records your consent choices, 12 months)

Acceptable Use Policy

Last updated 2025-12-15

Standards for professional conduct on CariClub. As a platform connecting executives with nonprofit board opportunities, we maintain high standards appropriate for senior professionals.

• Credential accuracy is mandatory
• Three-strike enforcement framework
• Professional conduct expected
• Appeals process available

Security Practices

Last updated 2025-12-15

Enterprise-grade security measures to protect your data. We use encryption, access controls, and continuous monitoring. SOC 2 Type II certification is in progress.

• TLS 1.2+ encryption in transit
• AES-256 encryption at rest
• SOC 2 Type II in progress
• 72-hour breach notification

DMCA & Copyright

Last updated 2025-12-15

CariClub respects intellectual property rights and complies with the Digital Millennium Copyright Act. Submit takedown notices to legal@cariclub.com.

• DMCA Safe Harbor compliant
• Designated agent registered
• Counter-notification process
• Repeat infringer policy

If content on CariClub infringes your copyright, submit a written notification to legal@cariclub.com including: your physical or electronic signature; identification of the copyrighted work; specific URL(s) of infringing content; your contact information (address, phone, email); statement of good faith belief that use is not authorized; and statement under penalty of perjury that you are the copyright owner or authorized agent. We acknowledge receipt within 2 business days and take action within 5 business days.