Privacy Policy

1. Who We Are

TuckCircle is an AI-forward alumni network for Tuck School of Business alumni, operated by TuckCircle ("we," "us," or "our"). Our platform enables verified Tuck alumni to connect, collaborate, and engage with the broader Tuck community through curated, AI-mediated introductions.

For questions about this policy, contact us at privacy@tuckcircle.com.

2. Information We Collect

We collect information in the following ways:

Information you provide directly:

• Name and email address (when you apply for membership or join the waitlist)
• Tuck graduation year and current role (when you complete a membership application)
• Profile information you choose to add: current company, industry, geography, bio, LinkedIn URL, areas of expertise, and preferences for how you'd like to be connected
• Content you submit on the platform, including introduction requests and context notes

Information we collect automatically:

• Basic usage data (pages visited, features used) to improve the platform
• Authentication session data required to keep you logged in securely
• Device and browser type for compatibility and security purposes

Information from third-party sources:

• Publicly available professional information (LinkedIn public profiles, company websites) used to enrich alumni profiles for the TuckSignal intelligence layer. This data is sourced only from publicly accessible sources.
• Alumni graduation and verification data used solely to confirm Tuck affiliation

3. How We Use Your Information

We use the information we collect to:

• Verify your Tuck alumni status and activate your membership
• Operate the Tuckie introduction system — matching, filtering, and facilitating introductions between members
• Send transactional emails (login links, introduction notifications, weekly digests). These are operational, not marketing — you cannot opt out of them while remaining an active member
• Maintain platform security and prevent abuse
• Improve and develop TuckCircle features based on aggregated, anonymised usage data
• Comply with legal obligations

We do not use your information to serve third-party advertising. We do not sell your data. Ever.

4. How We Share Your Information

We share your information only in the following limited circumstances:

• With other members, upon mutual acceptance: When both parties accept an introduction request, each party receives the other's name and contact information. No contact information is shared before mutual acceptance.
• With service providers: We use Supabase (database and authentication), Vercel (hosting), and Resend (transactional email) to operate the platform. These providers process data on our behalf under data processing agreements and are not permitted to use your data for their own purposes.
• For legal compliance: We may disclose information if required by law, court order, or governmental authority.
• With your explicit consent: We will ask before sharing your information in any way not described in this policy.

5. Data Retention

• Waitlist entries: Retained until you are onboarded as a member or request deletion.
• Member profiles: Retained for the duration of your membership. Deleted within 30 days of an account deletion request.
• Introduction records: Retained to maintain the integrity of the platform's reputation and quality scoring systems. Anonymised after 24 months.
• Authentication logs: Retained for 90 days for security purposes.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of processing, including profiling
• Restriction: Request that we restrict processing of your data in certain circumstances
• Withdrawal of consent: Where processing is based on consent, withdraw that consent at any time

To exercise any of these rights, email privacy@tuckcircle.com. We will respond within 30 days. We do not charge a fee for reasonable requests.

If you are located in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection authority.

7. Cookies and Tracking

TuckCircle uses only essential cookies — specifically, authentication session tokens required to keep you logged in. We do not use advertising cookies, third-party tracking pixels, or analytics platforms that share your data with third parties.

You may disable cookies in your browser settings, but doing so will prevent you from accessing the member portal.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data:

• All data is encrypted in transit (TLS) and at rest
• Authentication is handled via Supabase Auth with magic link / OTP — no passwords are ever stored
• Row-level security policies are enforced at the database layer — members can only access data they are authorised to see
• Contact information between members is never exposed until both parties have accepted an introduction

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@tuckcircle.com.

9. Children's Privacy

TuckCircle is intended for adults who have completed a graduate business degree. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

10. International Data Transfers

TuckCircle is operated from the United States. Our infrastructure providers (Supabase, Vercel, Resend) may process data in the United States and other countries. If you are located in the EEA or UK, be aware that these countries may not have data protection laws equivalent to your jurisdiction. By using TuckCircle, you consent to this transfer.

11. Third-Party Links

TuckCircle may contain links to external websites (including LinkedIn profiles). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before sharing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify members by email. Continued use of TuckCircle after a policy update constitutes acceptance of the revised policy.