Privacy Policy

1. Introduction

The Social Executive Network (“SEN,” “we,” “us,” or “our”) is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, apply to join our community, attend our experiences, or partner with us.

SEN is a curated leadership community connecting executives across industries through meaningful relationships and thoughtful experiences. This policy covers both your direct interactions with our website and the relationships we build with you as a member, partner, speaker, or sponsor.

2. Information We Collect

2.1 Information you provide directly

• Contact information: name, email, company, job title, and any other details you submit through our forms
• Inquiry content: the message body of your partnership, speaker, community, or general inquiries
• Event participation: RSVPs, attendance, dietary or accessibility needs, and any notes you share when registering for an experience
• Communications: emails, meeting notes, Slack messages, and recorded conversations when you engage directly with our team
• Testimonials and quotes: written feedback, attribution permissions, and any content you authorize us to publish

2.2 Information we collect automatically

• Technical signals: IP address, user-agent string, referring page, and the URL from which you submitted the form
• Usage data:pages visited and interactions with the site, collected through Vercel's cookieless analytics
• Abuse signals: Cloudflare Turnstile challenge responses used to distinguish humans from automated bots

2.3 Information from third parties

• Professional networks: public profile information from LinkedIn and similar platforms when we evaluate community or partnership applications
• Event platforms: attendee lists and RSVPs from Luma and equivalent experience-hosting services
• Introductions: information shared by mutual contacts who refer you to SEN

3. How We Use Your Information

3.1 Community operations

• Respond to contact-form inquiries and route them to the appropriate team member
• Evaluate community, speaker, and partnership applications
• Curate and deliver SEN experiences, including invitations, logistics, and follow-ups
• Facilitate curated introductions between members

3.2 Business operations and improvement

• Understand how the website is used so we can improve it
• Monitor and prevent abuse, spam, and fraudulent submissions
• Send occasional updates about what we're building, when you have consented or requested them
• Maintain business records, manage partnerships, and support internal operations

3.3 Legal and administrative purposes

• Comply with applicable laws and regulatory obligations
• Protect our rights, property, and safety, and those of our members, partners, and guests
• Investigate and resolve disputes or claims

4. Communications

4.1 Transactional communications

When you contact us through the website, we send a confirmation email acknowledging receipt. When you RSVP to an experience, we send logistics and reminders. These communications are tied to a specific action you took and are delivered regardless of marketing preferences.

4.2 Community updates

We may send occasional updates about upcoming experiences, community happenings, and insights from the network. You can unsubscribe from any of these at any time using the link in the email footer, or by emailing privacy@socialexec.co.

4.3 What we don't do

We do not sell your information. We do not rent mailing lists. We do not run outbound campaigns on behalf of third parties using your data. SEN is a community, not a marketing service.

5. Information Sharing and Disclosure

5.1 Our general principle

We do not sell your personal information. We share information only with a small set of trusted processors who help us operate the site and respond to you, or when legally required.

5.2 Service providers

• Supabase — database and storage for form submissions, event records, and community data (hosted in the United States, US-East region, encrypted at rest)
• Resend — transactional email delivery for confirmations and updates
• Clarify — customer relationship management for inquiry tracking and partnership operations
• Slack — internal team notifications when new inquiries arrive
• n8n — workflow automation that connects the above services
• Vercel — website hosting, SSL, and cookieless analytics
• Cloudflare — DNS, CDN, and bot-abuse protection via Turnstile
• Luma — event hosting platform for RSVPs and attendee logistics
• Google Workspace — email inboxes for SEN team members

Each of these providers operates under written agreements that include appropriate confidentiality and data-protection terms. We use them only for the specific purposes listed above and do not authorize them to use your information for their own marketing.

5.3 Partnerships and sponsors

We may share aggregated, anonymized information about our community (for example: “25,000+ leaders across 15+ industries”) with partners and sponsors. We do not share individual member identities with sponsors without your explicit consent.

5.4 Legal and business requirements

• When required by court order, subpoena, or applicable law
• To protect our rights, property, safety, or those of our members and guests
• In connection with a merger, acquisition, or sale of business assets, provided the acquirer agrees to honor this policy
• To investigate and prevent fraudulent or illegal activity

6. Data Security and Protection

6.1 Security measures

• Encryption in transit: all traffic to and from our services uses industry-standard TLS
• Encryption at rest: submitted information is encrypted at rest inside Supabase
• Access controls: row-level security policies restrict database access to authorized operations only
• Authentication: administrative access is scoped, logged, and reviewed
• Abuse protection: Cloudflare Turnstile blocks most automated spam before it reaches our systems
• Email authentication: SPF, DKIM, and DMARC are configured to prevent spoofing of our domain

6.2 Security limitations

No method of transmission over the internet or electronic storage is completely secure. We work to maintain appropriate safeguards and respond promptly to any incident, but we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately at privacy@socialexec.co.

7. Your Rights and Choices

7.1 Access and control rights

• Access: request a copy of the information we hold about you
• Correction: ask us to update or correct inaccurate information
• Deletion: request that we delete your personal information, subject to legal and operational obligations
• Restriction: ask us to limit how we process your information in certain circumstances
• Portability: receive your personal data in a structured, machine-readable format
• Objection: object to specific types of processing, including direct marketing

7.2 How to exercise your rights

Email privacy@socialexec.co with a clear description of the right you wish to exercise. We will verify your identity and respond within 30 days, and may request additional information if needed to fulfill your request.

8. Cookies and Tracking Technologies

8.1 What we use

• Essential cookies: required for the website to function (for example, remembering that you dismissed the cookie notice)
• Cookieless analytics: Vercel Analytics collects aggregate usage patterns without placing a third-party tracking cookie
• Turnstile challenges: Cloudflare Turnstile may set a short-lived cookie to verify the contact form is being submitted by a human

8.2 What we don't use

We do not use advertising cookies, cross-site trackers, third-party marketing pixels, or behavioral retargeting.

8.3 Cookie management

Most browsers allow you to refuse cookies or alert you when cookies are being set. Disabling essential cookies may affect site functionality.

9. Data Retention and Deletion

9.1 Retention principles

We keep your information for as long as necessary to provide our services, operate the community, and comply with our legal obligations.

9.2 Specific retention periods

• Contact form submissions: retained until you request deletion, or anonymized after 24 months of no activity
• Active member records: retained for the duration of your engagement with the community, plus a reasonable period thereafter
• Event attendance records: retained for 3 years for planning, reference, and curation purposes
• Marketing list subscribers: retained until you unsubscribe, or after 3 years of inactivity
• Website analytics: aggregated data retained indefinitely; individual records retained no more than 26 months
• Business and financial records: retained for 7 years as required by applicable law

9.3 When we delete

• Upon request, when no legal obligation requires retention
• Automatically, when retention periods expire
• When required by law or court order

10. Third-Party Information and Consent

If you share information about another person with us (for example, suggesting a community member, introducing a partner, or inviting someone to an experience), you confirm that you have the authority to share that information, have obtained any necessary consent, and will inform them of their rights under this policy if they ask.

11. Children's Privacy

SEN is designed for senior executives and business leaders. Our services are not directed to individuals under 18, and we do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, please contact us at privacy@socialexec.co and we will delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries outside your jurisdiction, including the United States, where our operations and most of our service providers are based. We ensure appropriate protections through the contractual and technical safeguards required by applicable data-protection laws, including standard contractual clauses where relevant.

13. GDPR Rights (EU / UK Residents)

13.1 Legal bases for processing

• Consent: when you submit a form or subscribe to updates
• Legitimate interest:for community operations, abuse prevention, and limited marketing about services you've engaged with
• Contract performance: where we have a service or partnership agreement with you
• Legal obligation: where required by law

13.2 Additional GDPR rights

• Withdraw consent at any time for consent-based processing
• Object to processing based on legitimate interest, including direct marketing
• Lodge a complaint with your local supervisory authority

14. California Privacy Rights (CCPA/CPRA)

14.1 Your rights as a California resident

• Know the categories and specific pieces of personal information we hold about you
• Request deletion of your personal information, subject to legal exceptions
• Opt out of the sale of your personal information — note that we do not sell personal information
• Not receive discriminatory treatment for exercising your privacy rights

14.2 Categories of information we collect

• Identifiers: name, email, IP address
• Professional information: job title, company, industry
• Internet activity: website usage and interaction patterns
• Commercial information: records of community membership, event attendance, or partnership
• Communications: content of inquiries and messages you send to us

14.3 Exercising California rights

Email privacy@socialexec.co. We will verify your identity before processing your request and will respond within 45 days.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will post the updated policy here with a new “Last updated” date. For material changes that affect how we handle your information, we will provide additional notice by email when we have a way to reach you.

Your continued use of our services after any changes constitutes acceptance of the updated policy. If you do not agree with the changes, you may request deletion of your personal information as described in section 7.

16. Contact

For any questions about this Privacy Policy, to exercise your rights, or to report a privacy concern, contact us at privacy@socialexec.co.

We respond to general inquiries within 5 business days, rights-request inquiries within 30 days (extendable to 60 days for complex requests), and security concerns within 24 hours.