ClubhouseOS

CHOS Finance

Privacy Policy

Effective September 5, 2026.

This policy explains how ClubhouseOS ("we," "us") handles information for CHOS Finance, our authorized business finance tools. It also covers the integration that may appear as "Finance App" in a provider's authorization screen. It does not replace a golf facility's golfer-facing privacy policy.

1. Information we handle

The information handled depends on the features you use and the accounts your organization authorizes:

Information comes from authorized users, connected providers, and use of the tools. Credential setup alone does not begin recurring transaction ingestion. A connection check may request limited provider data to confirm that access works. We do not ask you to supply online-banking passwords or full payment-card credentials to CHOS Finance.

2. How information is used

We use information to configure and verify authorized connections, provide enabled finance functions, link supporting evidence, support review and reconciliation, respond to requests, protect access, and meet applicable legal obligations. Records are used for the organization and purposes for which access was authorized, not to provide another organization with access to your books.

Automated analysis, where enabled, supports classification, matching, and review. Suggestions are not a substitute for professional judgment or required approvals. This policy does not itself authorize a payment or accounting change.

3. Sharing and service providers

Information may be accessed by authorized personnel and advisers for the relevant organization, and by service providers necessary to operate the enabled functions. Connected providers receive requests and information needed for the actions you authorize. Those providers also process information under their own terms and privacy policies.

We do not sell finance information or share it for targeted advertising. We do not use connected financial records to train general-purpose AI models. Before enabling a feature that sends financial records to an external AI provider, we will disclose that processing to your organization and obtain its authorization. We may disclose information when required by law or when reasonably necessary to investigate abuse or protect legal rights and security.

4. Credentials and security

Local credential setup stores submitted secrets in protected credential storage on the operator's device. Hosted connections store authorization tokens encrypted on our servers, with access restricted to authorized service functions. Credentials are sent to their intended provider when an authorized connection or check requires them; they are not displayed on these public pages. Hosted sign-in uses essential session cookies and a phone-verification provider to deliver and check codes. Keep your device and provider accounts secure, and revoke credentials you believe are compromised.

We limit access to authorized purposes. No storage or transmission method is completely secure. Please contact us promptly about suspected unauthorized access, without including secrets in your message.

5. Retention, disconnection, and deletion

Credentials are kept until replaced or removed. A hosted disconnect requests revocation with the provider and removes the stored usable tokens after that request succeeds. If revocation fails, encrypted tokens may remain temporarily so the request can be retried. You can also revoke connected-app permissions directly with the provider; contact us for help removing stored copies. Disconnecting does not automatically delete connection audit history or previously obtained business records.

We retain business records only as needed for the authorized service and applicable accounting, tax, audit, security, contractual, or legal requirements. The appropriate period depends on the record and obligation. Records subject to a legal hold or retention requirement may need to be preserved; backups may retain copies until their normal expiration. Contact us to request access, correction, or deletion. We will verify authority and explain any applicable retention restriction.

6. Public pages and international processing

These finance legal pages contain no advertising trackers, analytics scripts, or financial-data entry forms. Website hosting may process technical request information, such as IP addresses, for delivery and security. Depending on the services used, information may be processed in the United States or other countries where authorized providers operate.

7. Your choices and contact

You may decline a connection, revoke provider access, stop using the tools, or ask about the information handled for your organization. Depending on applicable law, you may have additional privacy rights. CHOS Finance is intended for authorized adult business users, not children.

For privacy requests or questions, contact abbas@clubhouse-os.com. Do not include passwords, API secrets, or full account numbers. We will update this page when practices change and notify authorized users before material changes apply.