Privacy Policy
Version 1.0 · Last updated 27 September 2026.
This policy explains what we collect about you, why, who sees it, and what you can do about it.
1. Who we are
The Open Society is operated by Openhouse Club Private Limited, a company registered in India. We are the Data Fiduciary for this information under the Digital Personal Data Protection Act, 2023.
2. What we collect
When you apply: your name, email address, your answers to the application questions, and optionally who you already know in the club.
If you're shortlisted: brief notes from your call, written by the person who spoke to you. The call is not recorded.
When you join: your phone number for the club's messaging channel, and your billing history. Payment details are held by our payment provider — we do not store your card or bank details ourselves.
While you're a member: which events you attend, your RSVPs, messages you send us, any conduct reports involving you, and photographs or video taken at events where you appear.
3. Why we hold it
We hold all of it to run the club, and we rely on your consent, given when you apply and again when you first open the member app.
| What we hold | What it is for |
|---|---|
| Application answers and call notes | Deciding whether to admit you; afterwards, helping the host arrange seating |
| Contact details | Sending you event details and account notices |
| Payment and billing records | Taking payment, issuing refunds, meeting tax obligations |
| Attendance records | Standing within the club, the no-show rule, and the 7-day refund condition |
| Conduct reports | Keeping the club safe and applying our rules fairly |
We do not sell your information, rent it, or use it for advertising. We do not build advertising profiles, and we do not share the membership with anyone for marketing. Attendance records are used by us, never published, and no ranking of members is shown to anyone.
4. Who else sees it
Other members see only your name and whatever you choose to tell them.
Our payment provider processes payments and holds your payment instrument. We see only the record of the transaction.
Our messaging and app providers carry the club's channel and run the member app.
Restaurants and venues get the number of people and, where needed, a first name for a booking. Nothing else.
Third-party benefit providers see only what's needed to confirm you're a member. Anything you then share with them is governed by their privacy policy, not this one.
Professional advisers and the authorities, where the law requires it.
Some of these providers store data outside India, which is permitted under the DPDP Act except to countries the government has restricted.
5. How long we keep it
Rejected applicants: deleted within 6 months of the decision, unless you ask us to hold your application for a future intake.
Current members: for as long as you are a member.
Former members: most of your record is deleted within 12 months of leaving. Payment and tax records are kept as long as tax law requires, and records of a removal for cause are kept so the same person is not re-admitted.
6. Photographs at events
We take photographs and video at some events and may use them to show what the club is like. We will always ask before using a photograph in which you are identifiable, and you can say no at any time, including after saying yes. You can also ask us not to photograph you at all.
7. Your rights
Under the DPDP Act you can ask what we hold about you and who we have shared it with; correct or complete it; ask us to erase it; withdraw your consent at any time, as easily as you gave it; nominate someone to exercise these rights on your behalf; and complain to us and, if unresolved, to the Data Protection Board of India.
We cannot run your membership without your contact details, payment record and attendance record. If you withdraw consent for those, your membership ends and our Refunds & Cancellation Policy decides what comes back. We will tell you that before acting on the withdrawal, not afterwards.
8. Grievance Officer
Raunak Jain, Grievance Officer
We respond within [30] days. If you are not satisfied with our response, you can complain to the Data Protection Board of India.
9. Keeping it safe
We take reasonable security measures to protect your information: access is limited to the people who need it, and we do not keep information we no longer need. If a data breach occurs, we will notify you and the Data Protection Board of India as the DPDP Act requires.
10. Children
Membership is 18 and over. We do not knowingly collect information about anyone under 18. If we learn that someone under 18 has applied or joined, we will delete their information and end the membership.
11. Changes to this policy
If we change this policy materially, we will tell you and — where the law requires it — ask for your consent again. The current version and its date are always at the top of this page.