1. Who we are and what this policy covers
Team Legend Leadership Development (“Team Legend,” “we,” “us,” or “our”) operates the private, invitation-only community at teamlegendld.com. We are responsible for deciding how personal information is used in operating this community.
This policy explains our handling of personal information when you receive an invitation, create or use an account, participate in the community, receive service emails, or contact us about the community.
This community is not a financial account portal or a channel for individualized financial advice or confidential client records. This policy does not replace any separate privacy notice that applies to financial products, professional advisory services, or another organization with which you have a relationship.
Privacy questions and requests: support@teamlegendld.com. This address is monitored by Team Legend Leadership Development and may also be used to appeal our response to a privacy request where applicable law provides an appeal right.
2. Information we collect
Account and invitation information. Your name, email address, account identifier, invitation details, platform role, hub memberships and access status. Our authentication provider processes passwords and other authentication information, including session credentials and multi-factor authentication information when enrolled. Passwords are handled through the authentication system; we do not make them available for administrators to read in account-management screens.
Optional profile information. Information you choose to provide, such as a headline, biography, phone number, timezone, website and social links, together with your directory and contact-visibility choices. A timezone preference is not GPS tracking.
Community content and activity. Posts, announcements, comments, reactions, channel messages, direct messages, book suggestions, selected-book reading checkmarks, event RSVPs, professional ranks and advancement records, community points, levels and recognition, and other information you submit through available features. If you submit an image or other file through an available upload feature, we process its contents and associated file information. Only upload information you are authorized to share.
Preferences, support and moderation information. Notification preferences, reports, blocks, support correspondence, administrative decisions, relevant message context reviewed during moderation, and security or audit records associated with use and management of the community.
Technical, device and usage information. Our hosting, authentication and delivery services process information needed to provide and protect the service. This may include IP addresses, browser and operating-system information, request and connection details, timestamps, sign-in and service events, errors, delivery status and feature activity. Not every technical field is stored in our application database. Our infrastructure may also process approximate location inferred from an IP address, such as country or region. The community does not request precise device/GPS location or access to your camera or microphone. Following a link to an external meeting service is separate from using the community itself.
Information that may be sensitive. Login credentials and the contents of private communications may be treated as sensitive personal information under some laws. We process these for authentication, communication, security, support and moderation, not to infer sensitive personal characteristics. We do not ask members to submit government identification numbers, financial account details, financial statements, individualized financial plans, health information, biometric identifiers or confidential client records. Do not submit these or unnecessary sensitive details about yourself or anyone else. Free-text content can contain information we did not request; contact us if sensitive information has been submitted in error.
We receive information directly from you, from administrators who invite you or manage access and advancement records, from other members' interactions or reports involving you, and from the service providers supporting the community. We do not obtain marketing profiles from data brokers or public databases for this community. Linking a social profile does not connect a social-login account or authorize us to import a friends list.
3. How we use information
We use personal information to:
- Invite members, authenticate accounts, administer roles and hub access, and maintain account security.
- Provide discussions, messaging, profiles, Book Club, events, recognition and other available community features.
- Save preferences, reading checkmarks, RSVPs and other member actions, and calculate community-activity points and rankings. Professional advancement records are entered or confirmed by authorized administrators, not generated by the points system.
- Send invitations, recovery and security emails, requested communications, and community notifications according to available preferences. Essential account/security communications may still be sent when optional notifications are disabled.
- Respond to questions and privacy requests, investigate reports, moderate content, prevent misuse and troubleshoot problems.
- Maintain service reliability, manage disputes, and comply with applicable legal obligations and lawful requests.
We do not use the community to sell personal information, conduct cross-context behavioral advertising or serve targeted advertisements. The community does not currently use Google Analytics, advertising pixels, Google API integrations, or Facebook/X/Google social sign-in. We will reassess our notices and any required choices before introducing materially different processing.
4. Who can see information
Other members. Content in a hub or channel is available to members authorized to access that area. Profiles can appear in the directory for members sharing a hub, subject to directory-visibility settings. Email and phone visibility are off by default and can be changed through profile settings. Shared profile links follow their visibility settings. Published professional advancements and community rankings are visible to their authorized community audience. Hiding a directory profile does not automatically hide your name on content, messages, published recognition or rankings where you participate. Recipients can retain copies or screenshots; technical access controls cannot prevent every onward disclosure.
Messages and administrators. Direct messages are available to their participants. They are stored by the service and are not end-to-end encrypted. Administrators can manage member accounts and community content and review reported messages with associated report and conversation details. The ordinary administrator role does not automatically grant participant access to every direct-message conversation or provide unrestricted DM browsing. This is not a promise that every message is monitored or reviewed in real time. Authorized technical personnel may access underlying information when necessary for maintenance, security, support or a lawful requirement.
Service providers. We use Supabase for authentication and the primary database; Cloudflare for website hosting, network/security services, real-time messaging infrastructure and private file storage, including R2; and Resend for transactional email delivery. These providers process the information needed for their functions and may use subprocessors under their applicable agreements. Provider processing may include operational and security records in addition to content we store. Sharing information with a provider to operate the service is distinct from selling it or sharing it for cross-context behavioral advertising.
Other necessary disclosures. We may disclose relevant information when reasonably necessary to comply with applicable law or a lawful request, protect people or legal rights, investigate misuse, or handle a business transfer. Any transfer remains subject to applicable privacy requirements; this is not authorization to disregard this policy.
External links, including TikTok, Facebook, book websites and Zoom meeting links, take you to services with their own privacy practices. Their collection after you visit them is governed by their policies. This notice does not promise that an external meeting is unrecorded; check the organizer's notice before participating.
5. Cookies, browser storage and privacy signals
We use necessary cookies and related browser storage to maintain authentication, protect account/invitation/recovery flows, and support essential service functions. Settings and member activity may also be saved to your account in our database. A restricted staging/review site additionally uses a temporary review-access cookie; that is separate from a member account.
We do not currently place advertising cookies or optional third-party analytics tags in the community. There is no advertising-cookie preference panel. You can control cookies through your browser, but blocking necessary cookies may prevent sign-in or other features from working.
Global Privacy Control (“GPC”) is a browser signal expressing an opt-out of sales of personal information or sharing for targeted advertising. We do not carry out those activities in the community, so there is currently no such activity for a GPC signal to switch off. The application does not currently have a separate GPC-detection or confirmation feature. GPC does not disable necessary account, security or communication processing. We will honor applicable opt-out requirements if relevant processing is introduced; this statement does not waive any rights or excuse a legal obligation.
The older Do Not Track (“DNT”) signal is different from GPC. We do not currently change the community's processing in response to DNT. This does not limit rights provided by applicable law.
6. How long we keep information
We retain personal information for as long as reasonably necessary for the purposes described in this policy, subject to applicable legal requirements. Retention depends on the type of record and factors such as whether the account remains active, whether community content is still needed for its intended audience, ongoing security or moderation needs, disputes, and applicable recordkeeping obligations.
Account closure or content removal does not necessarily erase all related records immediately. Relevant messages, moderation/audit records or other information may need to be retained for permitted safety, operational or legal purposes. Backups may contain copies after information is removed from active systems. We take applicable deletion obligations and exceptions into account when responding to a request.
You may ask what information we hold, request deletion or closure, or ask about retention of a particular record using the privacy contact above. We will assess requests under the law applicable to them rather than treat retention exceptions as an unlimited right to keep information.
7. Security
We use safeguards appropriate to the service, including encrypted connections, authentication and session controls, role/hub authorization, private file access, and security/audit records. Multi-factor authentication is available and is required for privileged production accounts under our access policy. No system or transmission method is completely secure, and this notice is not a guarantee against every security incident.
Keep your credentials private, sign out on shared devices, and report suspected unauthorized access using the privacy contact above. Community messages are not a suitable place to send passwords, one-time codes or confidential financial information.
8. Your choices and privacy rights
You can update available profile fields, directory/contact visibility, social links and notification preferences in account settings. Contact us for changes that are not self-service, including account email changes and closure requests. Turning off an optional notification does not withdraw information already delivered to a recipient or remove a post or message.
Depending on your location and the law applicable to the service, you may have rights to access or obtain a copy of information, correct it, request deletion, restrict or object to certain processing, withdraw consent where processing depends on consent, or appeal a denied request. You may also have rights to opt out of sales, targeted-advertising sharing, or certain legally significant profiling; the community does not currently use information for those purposes. We will not unlawfully discriminate against you for exercising applicable privacy rights.
Send a request or appeal to the privacy email in Section 1. We may need to verify your identity and, where relevant, an authorized agent's authority. We will request only information reasonably needed for verification and respond within applicable legal time limits, explaining any permitted refusal or limitation. You do not need a community account to email a privacy request. You may also complain to the relevant regulator where applicable law provides that right; for UK matters this may include the Information Commissioner's Office, and for EEA matters the appropriate data protection authority.
9. Legal bases where required
Where applicable data protection law requires a legal basis, processing necessary to supply the membership service requested under our terms is based on performing that agreement. Necessary security, moderation, support and reliability activities may rely on legitimate interests, subject to the balancing and objection rights required by law. Processing required by law relies on the relevant legal obligation. Where we rely on consent, including for a genuinely optional use requiring consent, you may withdraw it through the stated preference or privacy contact; withdrawal does not affect processing already lawfully carried out. We do not treat merely visiting the website as blanket consent to every use.
These bases apply only where legally available and appropriate to the particular processing. They do not override additional protections required for sensitive information.
10. International processing
Our service providers operate internationally. Information may be processed or stored in the United States and other countries where our providers or authorized personnel operate. Privacy laws may differ from those in your location. Where applicable law requires safeguards for an international transfer, those safeguards must apply to that transfer. Contact us to ask about relevant processing locations or safeguards.
11. Adults only community
The community is intended for people aged 18 or older. We do not knowingly invite children to use it or offer a parent-consent route for a child's membership. If you believe a child has an account or has submitted information, contact us so we can investigate, restrict access and address the information in accordance with applicable law. Do not submit children's information in community content.
12. Changes to this policy
We will update this policy when practices or applicable requirements change and identify its effective or revised date. We will provide notice of material changes and obtain consent when required. A later policy does not by itself authorize retroactive uses that require additional permission.
For questions or requests, use the privacy contact in Section 1.