Privacy Policy

1. Introduction

Welcome to UPNEXT ("we," "our," or "us"). UPNEXT is a LinkedIn community platform designed to help ambitious creators build accountability, visibility, and real influence. We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information.

This Privacy Policy explains our practices regarding the collection, use, disclosure, and protection of information when you use our platform located at upnext.community (the "Service"). By accessing or using our Service, you agree to the collection and use of information in accordance with this policy.

We respect your privacy rights and are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada.

2. Information We Collect

2.1 Personal Information You Provide

When you use our Service, we may collect the following types of personal information:

• Name: Your full name as provided during waitlist registration
• Email Address: Your work email address for communications and account management
• LinkedIn Profile Information: Your LinkedIn profile URL and any information you choose to share from your LinkedIn profile
• Contact Information: Any additional contact details you provide through contact forms or community interactions
• Communication Preferences: Your preferences regarding email subscriptions and notifications

2.2 Automatically Collected Information

When you visit our Service, we automatically collect certain technical information:

• Browser Information: Browser type, version, and language settings
• Device Information: Device type, operating system, and screen resolution
• IP Address: Your Internet Protocol address, which may be used to determine your general geographic location (city/country level)
• Usage Data: Pages visited, time spent on pages, click patterns, and navigation paths
• Referral Sources: The website or source that referred you to our Service
• Access Times: Date and time of your visits and interactions

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Session Cookies: Essential cookies that enable core functionality and are deleted when you close your browser
• Analytics Cookies: Cookies used to understand how visitors interact with our Service (e.g., Google Analytics, if implemented)
• Preference Cookies: Cookies that remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Service Provision: To facilitate community connections between members, manage your account, and provide access to community features
• Communications: To send you updates about community events, cohort launches, platform changes, and important announcements (with your consent where required)
• Community Management: To organize cohorts, match members, and facilitate networking opportunities
• Platform Improvement: To analyze usage patterns, improve website functionality, enhance user experience, and develop new features
• Analytics and Performance: To monitor platform performance, track engagement metrics, and identify areas for optimization
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforce our Terms of Service
• Security: To detect, prevent, and address fraud, security breaches, and other potentially prohibited or illegal activities
• Customer Support: To respond to your inquiries, provide technical support, and address any issues you may encounter

4. Legal Basis for Processing (GDPR Compliance)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Consent: When you subscribe to our newsletter, opt-in to marketing communications, or consent to non-essential cookies, we process your data based on your explicit consent, which you can withdraw at any time
• Legitimate Interest: We process data for community management, platform improvement, security, and fraud prevention based on our legitimate interest in operating and improving our Service
• Contractual Necessity: We process data necessary to provide access to community features and fulfill our contractual obligations to you
• Legal Obligation: We may process data to comply with legal requirements, such as tax obligations or responding to lawful requests from authorities

5. Data Sharing and Third Parties

5.1 Third-Party Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Service:

• Web Hosting Providers: Our hosting provider (Vercel) stores and processes data on our behalf
• Email Service Providers: We use email services (e.g., Resend) to send transactional and marketing emails
• Analytics Providers: We may use analytics services (e.g., Google Analytics) to understand usage patterns
• Database Providers: We use database services (e.g., Neon Postgres, MongoDB) to store your information securely

All third-party processors are contractually obligated to protect your data and use it only for the purposes we specify. We do not sell your personal information to third parties.

5.2 LinkedIn Integration

When you click on LinkedIn profile links shared on our platform, you will be directed to LinkedIn's website. We are not responsible for LinkedIn's privacy practices. Please review LinkedIn's Privacy Policy.

5.3 No Sale of Data

UPNEXT does not sell, rent, or trade your personal information to third parties for their marketing purposes. We are committed to protecting your privacy and maintaining your trust.

5.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or others.

6. Your Rights (GDPR & CCPA Compliance)

Depending on your location, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request a copy of the personal information we hold about you. We will provide this information within 30 days of your request, subject to verification of your identity.

6.2 Right to Rectification

You can request that we correct any inaccurate or incomplete personal information. You can also update your information directly through your account settings when available.

6.3 Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal information. We will honor your request unless we have a legitimate reason to retain the data (e.g., legal obligations, ongoing disputes).

6.4 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider.

6.5 Right to Opt-Out (CCPA)

If you are a California resident, you have the right to opt-out of the sale of your personal information (though we do not sell your data). You can also opt-out of sharing your information for cross-context behavioral advertising.

6.6 Right to Object

You can object to certain types of processing, including processing based on legitimate interests or for direct marketing purposes.

6.7 Right to Restrict Processing

You can request that we restrict the processing of your personal information in certain circumstances, such as when you contest the accuracy of the data.

6.8 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@upnext.community. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: We retain your account information while your account is active and for a reasonable period after account closure to comply with legal obligations
• Waitlist Data: We retain waitlist signup information until you request deletion or withdraw consent
• Analytics Data: Aggregated and anonymized analytics data may be retained indefinitely for statistical purposes
• Legal Requirements: We may retain certain data longer if required by law, regulation, or to resolve disputes

When data is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: We use SSL/TLS encryption to protect data in transit
• Secure Hosting: Our Service is hosted on secure, industry-standard infrastructure (Vercel)
• Access Controls: We limit access to personal information to authorized personnel who need it to perform their duties
• Regular Updates: We keep our systems and software updated with security patches
• Staff Training: Our team is trained on data protection and privacy best practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You use our Service at your own risk.

8.1 Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours, as required by applicable law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country.

If you are located in the EEA or Canada, and we transfer your data outside these regions, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Other legally recognized transfer mechanisms
• Compliance with applicable cross-border data transfer requirements

By using our Service, you consent to the transfer of your information to these countries.

10. Children's Privacy

Our Service is not intended for individuals under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If we become aware that we have collected personal information from a child under the applicable age limit, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us at privacy@upnext.community.

11. Your Choices and Controls

11.1 Cookie Preferences

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect your ability to use certain features of our Service.

11.2 Email Communications

You can opt-out of marketing emails by clicking the "unsubscribe" link in any email we send, or by contacting us at privacy@upnext.community. You will continue to receive transactional emails (e.g., account updates) even if you opt-out of marketing communications.

11.3 Do Not Track

Our Service does not currently respond to "Do Not Track" signals from browsers. However, you can control tracking through your browser settings and cookie preferences.

11.4 Account Settings

When available, you can update your account information and communication preferences through your account settings on our platform.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users (for significant changes)
• Displaying a notice on our Service

Your continued use of our Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@upnext.community
• General Inquiries: contact@upnext.community

We aim to respond to all privacy-related inquiries within 30 days. For data subject rights requests, we will respond within the timeframe required by applicable law.

14. Canadian Privacy Law Compliance (PIPEDA)

If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). We comply with PIPEDA's requirements, including:

• Consent: We obtain your consent before collecting, using, or disclosing your personal information, except where permitted by law
• Purpose Limitation: We collect personal information only for purposes that a reasonable person would consider appropriate
• Access: You have the right to access your personal information and request corrections
• Accountability: We are responsible for personal information under our control and have designated personnel to handle privacy inquiries
• Security Safeguards: We protect personal information with security measures appropriate to the sensitivity of the information
• Breach Notification: We will notify you and the Privacy Commissioner of Canada of any breach that poses a real risk of significant harm

If you have concerns about our privacy practices, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.