Privacy policy

Last updated November 2, 2026

Exclusif is run by Varun Arasu ("we", "us"). This policy explains what information Exclusif handles, why, and what you can do about it. Questions go to privacy@exclusif.vip.

Two kinds of people

Exclusif handles information about two groups, in different roles:

• Customers are the developers and teams who sign up for Exclusif to control access to their own apps. For customer accounts, we decide how the information is used.
• End users are people who ask for access to, or sign in to, an app that uses Exclusif. We handle end users' information on behalf of that app and follow its instructions. The app's own privacy policy explains how it uses your information; contact the app first, and we will help it answer you.

What we collect

From customers

• Your email address, the one-time sign-in codes we send to it, and your name if you give it.
• Your organization and project names, settings, and the email copy you write.
• Keys and credentials you create or connect. We store keys only as one-way hashes, and connected email-provider credentials encrypted.
• Basic request logs, such as IP address and time, kept for security and troubleshooting.

About end users, on a customer's behalf

• Email address, and any extra form fields the customer's app asks for.
• The identifier your sign-in provider assigned you in that app, such as an account id.
• Your request, admission, and waitlist history in that app, including any credits or terms you were given.
• Delivery status of the emails we send you for that app, such as delivered, bounced, or marked as spam.

How we use it

• To run Exclusif: deciding access under each app's rules, recording what each person was given, and showing customers their dashboards.
• To send the transactional emails Exclusif exists to send: sign-in codes, request confirmations, waitlist and approval notices.
• To keep the service secure, including bot checks on public forms and rate limits.

We do not sell personal information, use it for advertising, or send marketing email to end users.

Who processes it for us

Your information may be stored and processed outside your country, including in the United States and India, where these providers run our infrastructure.

How long we keep it

Customer account information is kept while the account is open. End users' request and admission records are kept for as long as the customer's project exists, because they are the record of who was let in and on what terms. Request logs are kept for a limited time for security. When a customer asks us to delete a project or an account, we delete the associated records, except where we must keep something to meet a legal obligation or resolve a dispute.

Cookies

The Exclusif dashboard uses one cookie to keep you signed in. This website does not use advertising or tracking cookies.

Your choices and rights

You can ask us to access, correct, export, or delete your information by writing to privacy@exclusif.vip. If you are an end user, we may pass your request to the app you used, since it decides how its records are handled. Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.

Security

Traffic is encrypted in transit. Keys are stored as one-way hashes, connected credentials are encrypted at rest, and every project's data is reachable only with that project's own keys, by members of its organization, or by us when needed to run and support the service.

Children

Exclusif is a tool for developers and is not directed at children under 16. Customers must not use Exclusif to collect information from children in ways their local law forbids.

Changes

We will update this page when our practices change and change the date at the top. If a change materially affects customers, we will also email account owners.