Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, professional niche, company size, and role (member or facilitator). If you choose to complete your profile, you may also provide a bio, photo, and other professional details.

Usage Data

We automatically collect information about how you interact with the Platform, including pages visited, groups joined, topics submitted, votes cast, session attendance, and feature usage. We also collect device and browser information, IP addresses, and referral URLs.

Analytics Data

We use Google Analytics (GA4) to understand how visitors interact with the Platform. Google Analytics collects information such as pages viewed, time on page, traffic sources, device type, browser, approximate geographic location, and navigation paths. Google Analytics uses cookies (including _ga and _gid) to distinguish unique users and sessions. This data is aggregated and does not personally identify you to us, though Google may process it in accordance with Google's Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Payment Information

If you purchase a group membership or subscribe as a facilitator, payment is processed by Stripe. We do not store your full credit card number. We retain billing records including the last four digits of your card, transaction amounts, subscription status, and payout records for Hosts. For Hosts using Stripe Connect, we receive limited account information from Stripe necessary to process revenue-share payments.

Communications

We collect the content of messages you send to us (e.g., support requests), as well as topics you submit and comments you post on topic boards and Learning Link boards within the Platform.

Session and Transcript Data

Peer group video sessions are hosted via the video platform chosen by the Host (such as Zoom, Google Meet, Microsoft Teams, or others). We do not record or store session video or audio content ourselves. However, Hosts may upload session transcripts to the Platform for AI-assisted processing (see Section 3). When transcripts are uploaded, we process the text content to generate session recaps and summaries. Transcript text is processed by our AI service provider and is not retained after processing is complete. We also receive session metadata such as attendance records, session dates, and RSVP responses.

Terms Acceptance Records

When you accept our Terms of Service (for example, by checking a checkbox during signup), we log the acceptance event, including your user ID, the Terms version accepted, the date and time, and your IP address. These records are retained for legal compliance purposes.

Host Application Data

If you apply to become a Host, we collect additional information submitted through the host application form, including your qualifications and areas of expertise.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Match you with relevant peer groups based on your profile
• Facilitate group sessions, topic boards, Learning Link boards, and voting features
• Process payments and manage subscriptions through Stripe, including revenue-share distributions to Hosts
• Generate AI-assisted session recaps and summaries from transcripts uploaded by Hosts, delivered via post-session recap emails
• Send transactional emails such as session reminders, application confirmations, and account notifications via Resend
• Communicate platform updates, new features, and policy changes
• Analyze usage patterns to improve the Platform experience (including via Google Analytics)
• Monitor platform health and prevent abuse or fraud
• Respond to support requests and customer inquiries
• Maintain records of Terms of Service acceptance for legal compliance

We do not use your data for automated decision-making that produces legal or similarly significant effects without your involvement.

3. AI-Assisted Features

The Platform uses AI-assisted features to process session content. When a Host uploads a session transcript, we send the transcript text to a third-party AI service provider for processing. The AI generates a structured summary or recap of the session, which may be delivered to group members via email.

What happens to transcript data: Transcript text is sent to our AI provider solely for the purpose of generating the recap. We do not use transcript content to train AI models. Transcripts are processed in real time and are not retained by the AI provider after processing.

Your consent: By participating in a group session where the Host uploads a transcript, you consent to the processing of that session's content as described here and in the Terms of Service. Hosts are responsible for informing their members if a transcript will be uploaded and for obtaining any consent required by applicable law.

4. Information Sharing

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

Service Providers

We work with trusted third-party providers who process data on our behalf:

• Supabase — database and authentication infrastructure
• Stripe — payment processing, subscription management, and Host payouts
• Resend — transactional email delivery
• Google Analytics — website analytics and usage tracking
• AI processing providers — session transcript summarization
• Video platforms (chosen by Hosts — e.g., Zoom, Google Meet, Microsoft Teams) — video conferencing for peer group sessions
• Vercel — hosting and edge infrastructure

Each provider is bound by their own privacy policies and data processing agreements. We share only the minimum data necessary for each service to function.

Within Peer Groups

When you join a peer group, your name, professional niche, and company size may be visible to the group's facilitator and other members. This visibility is limited to the group context.

Legal Requirements

We may disclose your information if required by law, regulation, court order, or to protect the rights, property, or safety of Peer2Peer Group, its users, or the public.

5. Cookies and Tracking Technologies

Strictly Necessary Cookies

Session cookies that allow you to stay logged in and use Platform features. These cannot be disabled without preventing Platform functionality.

Analytics Cookies

Google Analytics cookies (_ga, _gid, and related cookies) that help us understand how visitors use the Platform. These cookies persist across sessions and track usage patterns over time. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings.

We do not use advertising cookies, retargeting cookies, or cross-site tracking cookies for advertising purposes.

Do Not Track

Some browsers send a "Do Not Track" (DNT) signal. There is no industry standard for how websites should respond to DNT signals. At this time, we do not alter our data collection practices in response to DNT signals, but you can opt out of Google Analytics as described above.

6. Data Retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal information within 30 days, except where we are required to retain it for legal, financial, or fraud prevention purposes.

• Payment records — retained for a minimum of seven years as required by applicable tax and accounting regulations
• Terms acceptance records — retained indefinitely for legal compliance (these are append-only records and are not deleted)
• Session transcripts — processed in real time and not retained after recap generation is complete
• Analytics data — retained by Google Analytics in accordance with our configured retention settings (currently 14 months)
• Anonymized or aggregated usage data — may be retained indefinitely for analytical purposes

7. Your Rights

You have the following rights with respect to your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your data in a machine-readable format
• Opt-out of marketing: Unsubscribe from non-essential communications at any time via the link in any email
• Opt-out of analytics: Disable Google Analytics tracking using the browser add-on or cookie controls described in Section 5

To exercise any of these rights, contact us at tim@peer2peer.group. We will respond within 30 days.

8. California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions (such as legal retention requirements).
• Right to opt out of sale or sharing: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA/CPRA rights.

To exercise these rights, contact us at tim@peer2peer.group. We will verify your identity before fulfilling your request.

9. Children's Privacy

Peer2Peer Group is intended for professionals aged 18 and older. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has created an account, please contact us at tim@peer2peer.group and we will promptly delete the account.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. These include encryption in transit (TLS/SSL), access controls, and secure infrastructure provided by our hosting and database providers. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. International Data

The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those of your jurisdiction. By using the Platform, you consent to such transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Effective Date" and "Version" at the top of this page and notify users via email and/or a prominent notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: