Draft for review. This document has not been reviewed by legal counsel and must be reviewed before public launch. It does not claim compliance with any law or certification.

Privacy notice

Who can see what

Members of a circle can see that circle's messages, member list, profile details members chose to share, meetups, RSVPs, and office plans.
Brokerage administrators can see membership, onboarding and participation status, published circle membership, meetup counts, and aggregated feedback when at least five people have responded. They cannot read circle messages, AI host content, private feedback, rematch reasons, or "don't pair me with" preferences.
Your automatic bio (your short bio, plus any optional focus, areas, languages, interests, "ask me about" and fun fact you added) is posted once in each new circle you join. Only that circle's members see it. Your optional first hello is never posted for you.
An administrator who joins a circle as a participant is shown as leadership to everyone in that circle and can read only that circle.

How this is enforced

Access rules are enforced on our servers and in the database, not just hidden in the interface. This is an access restriction, not end-to-end encryption: the service operator's infrastructure processes messages in order to deliver them.

Optional AI host

Conversation content is only sent to an AI service after every current member of a circle agrees. Each request includes only what's needed (for example, the specific messages someone selected to summarize). If membership changes, agreement resets. If anyone declines, the circle uses built-in conversation cards and no chat content is shared.

Reports

Reporting a message shares only that message and the details you add with your brokerage's designated reviewer. It does not share the rest of the conversation.

Feedback

End-of-circle surveys are optional, and your answers are only counted in a report if you choose to include them. Reports cover either a completed calendar quarter or a brokerage's first pilot (after a 14-day response window). Each question uses one answer per person and is hidden unless at least five distinct people answered it. Reports are released once, with no office or circle breakdown, and overlapping periods are suppressed so answers can't be worked out by comparison. We do not collect free-text feedback in this release.

Invitations and email

Administrators upload names, email addresses and optional phone numbers to create invitations. Invitation links are shared by the brokerage; this release does not send email or text messages on its behalf. Email notification preferences are saved but nothing is emailed until a verified sender is connected.

Retention

Past circles become read-only when the rotation ends and stay available to their original members for 12 months. Office plans expire automatically after their date. Deleted messages are replaced with "This message was deleted."

What we don't do

No individual engagement scores, rankings, or sentiment analysis.
No location tracking or attendance inference.
No use of one circle's messages in another circle's AI requests.