Privacy & your data

Account details — your email address and sign-in method, handled by our authentication provider. Passwords are never stored by us in readable form, and we check new passwords against known breach lists.

Profile you choose to share — name, photo, bio, role, company, location, interests, and LinkedIn or company links. All of these are optional beyond your name, and visible to other signed-in members.

What you create — posts, replies, reactions, bookmarks, saved searches, event RSVPs, and which course videos you have completed.

We do not sell member data, and we do not share it with advertisers.

Your profile and everything you post is visible to other signed-in members. Course watch history is visible only to you and to the course owner for their own modules. Event meeting links are released to confirmed attendees 24 hours before the event, not before.

Any member can download a complete, machine-readable copy of their data at any time from your profile — no request or waiting period. It includes your profile, posts, replies, reactions, bookmarks, saved searches, RSVPs, alerts and course progress.

Deletion is self-serve from your profile. To protect you against someone else using your signed-in device, we ask you to confirm your identity again when you request it, and we then wait 30 days before removing anything. We email you as soon as a deletion is requested, so if it wasn't you, you have 30 days to sign in, cancel it and change your password. Cancelling takes one click and needs nothing more than being signed in.

When the waiting period ends:

• Your sign-in credentials, profile, reactions, bookmarks, alerts, notification preferences and any roles are permanently erased.
• Posts and replies you wrote stay in the community, but are unlinked from you and shown as “Former member”. This keeps other people's conversations readable while removing your identity from them.
• We record that a deletion happened — the date, whether you or an admin requested it, and how many items were affected. That record deliberately contains no name and no email address.

If you would prefer your posts and replies removed entirely rather than anonymised, or want the 30-day wait skipped, email us and we will do it manually.

• Your account and content — kept for as long as your account exists.
• A requested deletion — held for 30 days so it can be cancelled, then carried out.
• Deletion confirmation emails — logged so we can tell whether they arrived. The recipient address is kept for at most 30 days and then automatically reduced to the domain only.
• The deletion record — kept indefinitely for accountability, with no name or email address in it.
• Encrypted backups — retained by our hosting provider on their own schedule, so recently deleted data can persist in backups for a short period before it rolls off.

Export and deletion are available directly in the app, which covers most requests instantly. For anything else — access, correction, restriction, objection, or a request made on someone else's behalf — use the form below. You do not need an account, so it also works if you were invited to an event but never joined, or if you can no longer sign in.

Every request is logged with a reference and tracked to completion by our admins. We aim to respond within 30 days. You can also email privacy@thefreeangels.com if you prefer.

Access to community data is enforced at the database level, so members can only read what they are entitled to. Two-factor authentication is available to every member from their profile, with backup codes and trusted devices.

If you believe you have found a security or privacy issue, please email privacy@thefreeangels.com rather than posting it in the community, and give us a chance to fix it.