Privacy, by design.

1. The information we collect

Application and verification information

• your name, work email, role, employer, home city and languages;
• your professional profile link and the application answers you provide;
• email-verification, application-review and membership status;
• where you choose LinkedIn verification, your LinkedIn member identifier, name and email address returned by LinkedIn;
• verification records needed to confirm identity, professional role or work affiliation.

Member and introduction information

• your professional profile, languages, interests, expertise, meeting preferences and optional profile photo;
• trip destination, dates, rough availability and your purpose for a particular meeting window;
• if you use the optional voice-entry feature, the short recording and transcript needed to turn what you say into a trip and meeting-availability draft;
• proposed introductions, fit signals, mutual approval choices and meeting status;
• messages, venue preferences, calendar actions, blocks, reports and support requests;
• private feedback about a meeting or venue.

Technical information

We may process device, browser, IP address, authentication, security and service-log information when you use the website or app. We do not ask for age or gender and do not use either to make introductions.

2. How and why we use information

We use personal data to:

• receive, verify and review applications;
• create and protect member accounts;
• identify potentially useful introductions based on timing, location, role, experience, interests and the purpose selected for that meeting window;
• request mutual approval before identity details are revealed;
• coordinate meeting preferences, venues and service communications;
• prevent misuse, investigate reports and protect members and the service;
• improve reliability and understand how Cercle is used;
• meet legal, accounting and regulatory obligations.

3. Our legal bases

Under the GDPR, we rely on:

• steps before and performance of a contract, to review your application and provide membership services;
• legitimate interests, to operate a trusted professional network, consider relevant introductions, secure the service and improve it, balanced against your rights;
• consent, where we ask you to connect LinkedIn, share optional information or approve identity disclosure for an introduction. You may withdraw consent at any time;
• legal obligations, where records must be retained or disclosed by law.

4. How introductions and approval work

Cercle may use relevance scoring to help identify a potential introduction. The score considers information such as overlapping availability in the same city, complementary or comparable professional perspectives, shared context and the purpose selected for that meeting window.

A score is a recommendation signal, not a decision with legal or similarly significant effects. Applications are reviewed by a person, and members remain in control of whether to proceed. Your identity is revealed to a proposed member only after the required approval step. Cercle does not permit public browsing or unsolicited member messages.

5. When we share information

We disclose personal data only where needed:

• to another Cercle member, after the relevant mutual approval. Before approval, only limited, non-identifying professional context may be shown;
• to service providers that host the website and app, store data, authenticate users, send transactional emails or support operations, including Supabase, Vercel and Resend;
• to OpenAI, only when you choose the voice-entry feature, to transcribe the recording and structure it as a trip draft for your review;
• to LinkedIn, only when you choose to start LinkedIn verification. LinkedIn then processes information under its own privacy terms;
• to a venue or booking provider, only when you choose to open its website, telephone service or booking page. Cercle does not make the reservation for you;
• to professional advisers, authorities or other parties where required by law, needed to establish or defend legal claims, or necessary to protect people and the service;
• in a business reorganisation, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal data or use it for third-party advertising.

6. International transfers

Some service providers may process data outside Belgium or the European Economic Area. Where this happens, we use a lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards, and apply additional protections where appropriate.

7. How long we keep information

We retain personal data only for as long as it is needed for the purposes above:

• incomplete or declined applications are generally kept for up to 12 months;
• member profiles, trip information and account records are kept while membership is active and generally for up to 12 months afterwards;
• meeting feedback, safety reports and related communications may be kept for up to three years after the relevant matter closes, where needed to protect members and handle disputes;
• security logs are generally kept for up to 12 months;
• voice recordings and transcripts used to create a trip draft are not saved to your Cercle profile or database;
• records required for legal, tax, accounting or claims purposes are kept for the applicable statutory period.

We may delete information sooner when it is no longer needed, or retain limited information for longer where a legal obligation or an active dispute requires it.

8. Cookies and local storage

Cercle uses essential browser storage for secure sign-in, application sessions, fraud prevention and basic service operation. These technologies are necessary for the service you request. We do not currently use advertising cookies or cross-site behavioural advertising. If optional analytics or marketing cookies are introduced, we will update this policy and request consent where required.

9. Device permissions, voice and calendars

If you choose voice entry, Cercle asks for microphone permission only while you record your availability. The recording is sent securely for transcription and converted into an editable draft. Nothing is added as a trip until you review and approve that draft.

If you choose “Add to calendar”, Cercle opens your selected phone, Google or Outlook calendar with meeting details for your review. Cercle does not read your existing calendar merely because you use this option. Other optional device permissions are requested only when the related feature needs them.

10. Security

We use access controls, private data-storage rules, encrypted connections, authentication safeguards and restricted staff access designed for a private membership service. No system can be guaranteed completely secure, but we review safeguards as Cercle develops and respond to suspected incidents.

11. Your rights

Depending on the circumstances, you may ask us to:

• provide access to your personal data;
• correct inaccurate or incomplete information;
• delete information;
• restrict or object to processing;
• provide certain information in a portable format;
• withdraw consent without affecting earlier lawful processing.

Contact info@cercle.house. We may need to verify your identity before completing a request. You also have the right to complain to the Belgian Data Protection Authority or the competent authority where you live or work.

12. Age requirement

Cercle is intended for professionals aged 18 and over. We do not knowingly accept applications from children.

13. Changes to this policy

We may update this policy as Cercle develops or legal requirements change. The latest version will remain available on this page. We will communicate material changes directly where appropriate.