Privacy policy

Who operates this service

Joingroup operates JoinGroup.live from Gwalior, India. Contact info@joingroup.live with questions about this policy or your data.

Account and community information

JoinGroup stores account names, email addresses, password hashes, verification/reset records and session records in Cloudflare D1. A session cookie keeps you signed in. Passwords are stored as hashes, not as readable passwords.

We store the community names, permanent slugs, destination invite URLs, destination status, routing settings and tracked-link metadata you enter. Destination invites can contain private invitation tokens. They are available to the owning account and are used to redirect visitors; they are not included in analytics CSV exports.

Privacy-friendly click analytics

The app stores aggregate UTC daily click counts, source labels from the optional ref parameter and destination redirect totals. It does not permanently store a raw record for every visitor event, precise visitor IPs, GPS coordinates, fingerprints, advertising identifiers or visitor user-agent strings. Authentication throttling stores keyed digests rather than raw IP addresses, and session IP/user-agent fields are kept empty.

Network information and request headers are still processed transiently to deliver pages, secure the service and filter known preview/search bots. Cloudflare, email providers, payment providers and external communities perform their own normal network processing; this policy does not claim that no provider ever receives an IP address.

Source values are bounded and sanitized. Use labels such as instagram or college-poster; do not put personal or sensitive information in a source label. Public-link query parameters are used only by JoinGroup analytics and are not forwarded to the community invite.

Payments and transactional emails

When you choose paid checkout and consent, your account name, email address and mobile number are sent to Cashfree. JoinGroup stores billing contact information, the selected plan, checkout setup details, subscription/payment identifiers, amounts, statuses and paid-period dates for subscription management and reconciliation.

Payment card and bank information is entered on Cashfree’s hosted checkout, not in JoinGroup’s forms. JoinGroup does not ask for or store full card numbers, card security codes or bank account credentials. Payment webhooks are checked for authenticity; raw webhook bodies are not permanently retained. Event digests, identifiers and processing status support verification and duplicate handling.

Resend processes recipient email addresses and transactional verification/password-reset messages. Authentication emails use no advertising pixels or open/click tracking configured by JoinGroup. The app does not add advertising pixels to community links.

Providers and external communities

Cloudflare hosts the application and D1 database. Resend delivers authentication email. Cashfree processes subscription mandates and payments. Cloudflare Turnstile helps verify signup and report submissions and processes security challenge information under Cloudflare’s policies. When a visitor follows a validated community destination, the external platform receives that visit and applies its own policies. JoinGroup cannot control that platform’s data collection or membership decisions.

Community reports and abuse prevention

A report records the public community reference, a reason, an optional note of up to 500 characters and its review status. Authorized administrators can review these records, destination invites and moderation activity. Do not include passwords, private invitation tokens or sensitive personal information in a report.

Authorized administrators can review account names, email addresses, verification and access status, registration dates and community counts to manage abuse and support. Account access changes are recorded in a moderation audit. Administrator roles and access grants are controlled by the server.

To limit repeated abusive submissions, the app stores short-lived keyed hashes derived from request network information rather than raw IP addresses. Turnstile tokens are verified by the server and are not used for advertising or click analytics.

Resolved reports become eligible for scheduled cleanup after 180 days, and moderation audit records after 365 days. Cleanup runs in bounded batches, so deletion may occur later when there is a backlog. Open reports remain available while awaiting review. Expired abuse-prevention buckets are removed through scheduled or request-time cleanup.

Retention and account requests

Saved account and community records remain available until removed through the app’s supported controls or handled by the operator. Deleting a community deletes its related aggregate and tracked-link records. Deleting a destination preserves its redirect history; deleting tracked-link metadata does not invalidate an already shared source URL.

Aggregate history is retained in the service database; a plan’s 7, 30 or 90 day window controls the history available in views and exports, rather than promising physical deletion at that boundary. Billing records are retained for payment reconciliation and subscription administration. No automatic account-erasure or billing-record deletion schedule is currently implemented.

You can download your own account data in Settings. This private export includes saved destination invite URLs; analytics CSV exports do not. To ask about accessing, correcting or deleting account information, email info@joingroup.live from your account address. These requests are handled manually and reviewed alongside any records that need to be retained. Do not send your password, card details or bank credentials.