Privacy Policy

Effective date: July 26, 2026

1. Overview and scope

Expert Connect is a direct marketplace for paid video consultations between clients and domain experts. This Privacy Policy explains how Expert Connect collects, uses, shares, stores, and protects personal information when you use our website, create an account, browse profiles, create projects, book consultations, join video calls, receive payouts, or contact support.

This Privacy Policy applies to people who use Expert Connect as clients, experts, or visitors. It also applies to information we collect through our website, account systems, booking workflows, payment flows, support interactions, and related services.

Limited parts of this Privacy Policy also apply to people who do not have an Expert Connect account: if a member sends you a referral invitation through the platform, or if we identify you as a prospective expert or client from the public sources or team-uploaded contact lists described in Section 5, we process the information described in Section 5, share it as described in Section 8, retain it as described in Section 11, and honor the choices described in Section 12.

2. Who we are

Expert Connect provides the platform infrastructure for discovery, scheduling, payment, and quality enforcement for expert consultations. If you have questions about this Privacy Policy or want to exercise your privacy rights, you can contact us at support@expert-connect.co.

3. Information we collect from experts

When you create or use an expert account, we may collect the following categories of personal information:

Identity: name, email address, avatar photo.
Professional: job title, company, seniority level, industry, LinkedIn URL, Twitter URL, personal website URL.
Work history: past employers, job titles, employment dates, role descriptions, company domains.
Expertise: function tags, domain tags, region tags, industry tags.
Contact: phone number, country code, SMS opt-in preference.
Financial: Stripe Connect account ID and payout status. We do not store bank account numbers or routing numbers. These are held by Stripe.
Availability: weekly office hours, timezone, booking lead time preferences.
Content: bio text, thought leadership documents (PDFs), article links.
Vetting status: the status and the method of each part of an expert's vetting profile, including identity verification status and method, expertise confirmation status and method, code and legal violations status, count, and method, and client satisfaction tier and method. The information used in vetting includes the identity, professional background, and credential information you provide (including, where applicable, the AI-assisted document parsing described in Section 6), user reports, dispute outcomes, and strikes recorded on the account, and client ratings of completed consultations. The current status of each part is displayed with your expert profile.
Preferences: profile privacy settings, name visibility settings, notification preferences.

4. Information we collect from clients

When you create or use a client account, we may collect the following categories of personal information:

Identity: name, email address, avatar photo.
Professional: job title, company, industry.
Contact: phone number, country code, SMS opt-in preference.
Financial: Stripe customer ID and saved payment method tokens. We do not store full credit card numbers. These are handled by Stripe.
Content: project descriptions, screening questions, booking notes.
Preferences: name and company visibility settings, notification preferences, advance notice preferences.

5. Information generated through use of the platform and other information we collect

We also create and store information as part of operating the marketplace. This includes:

Consultation records: used for scheduling, payment processing, status tracking, audit trail purposes, dispute review, to make a client's own consultation history available to that client account or client organization and its authorized users, and to make a copy of a consultation's transcript available to the expert who delivered that consultation, for that consultation only. Any recordings remain available only to the client account or client organization that booked the consultation and its authorized users.
Consultation transcripts and recordings: transcripts are generated by default unless the client turns transcription off for that consultation; recordings are created only where recording has been explicitly enabled. They are used for the purposes described in Section 10.
Consultation derivatives: summaries, embeddings, tags, classifications, and similar AI-derived data that may be generated from consultation transcripts (and recordings, where recording was enabled), used for the purposes described in Section 10.
Expert Vetted history: a record of changes to an expert's vetting status over time, used for audit, trust and safety, and to maintain an accurate history of how an expert's vetting profile has evolved.
Proposed times: used to support scheduling negotiation between clients and experts.
Ratings and reviews: used to generate quality signals and improve marketplace trust.
Reports: used for trust and safety review, enforcement, and account moderation.
Expert strikes: used for quality enforcement and suspension decisions.
Search embeddings: numerical vector representations derived from expert profile text, used for expert discovery and search relevance.
Company cache: company metadata enrichment information from People Data Labs, maintained with a 90-day freshness window.
Product and usage analytics: a limited record of in-product events, such as page views and which steps of the booking flow are reached, together with the page path, referring page, and general device and browser type. For page-view events we also derive, on our servers, an approximate country from the IP address and a cookieless visitor signal that rotates daily. These events set no persistent identifier on your device and are described further in Section 9. Separately, for visitors located in the United States, we use a third-party advertising cookie for conversion measurement, which is described in Section 9. That advertising cookie is distinct from the first-party product and usage analytics described here.
Search activity: the searches you run on the platform, including the search text, the filters applied, and the experts returned, used to provide and improve search relevance. For a search you run from within a project, the stored search text also incorporates the project title and description and a short summary of the project's screening questions. For signed-out searches the search text is stored only in a hashed form.

We also collect standard HTTP request logs through our hosting provider (Vercel), including IP address, request URL, timestamp, and browser user agent. Authentication session tokens are managed by Clerk.

Referral invitations. If you send a referral invitation through the platform, we collect the email address you provide for your invitee and send the invitation on your behalf, identifying you as the sender. We keep a log of each send (the invitee's email address in a normalized form, your account, the referral code used, and the time of the send) to enforce sending limits and prevent abuse, and we maintain a list of addresses that have opted out. Every referral invitation includes an unsubscribe link. We do not send referral invitations to an address that has opted out, and an invitee's address is used only to deliver invitations and honor opt-outs; it is not added to any marketing list.

Prospective experts and clients (outreach records). To grow the marketplace, we identify people who may be a good fit as experts or clients using public sources and contact lists our team uploads: the CMS Open Payments public database, the USPTO PatentsView public patent database, and team-uploaded contact exports (such as a LinkedIn connections export). For these prospective users, who may not have an Expert Connect account, we store the professional contact information the source provides, such as name, job title, employer, general location, public profile URL, and email address, together with the underlying source record in which you appear (for example, the public industry-payment or patent record, or the contact-list entry). We use an AI service (Anthropic Claude) to help score how well a prospect may fit the marketplace and to draft introduction emails, and no outreach email is sent without explicit approval by a member of our team. Outreach emails include an unsubscribe link and our postal address, and we record the delivery status of each message (such as delivered, opened, or replied) using standard email delivery reporting. Opt-outs, bounces, and complaints are added to a suppression list that we check before every send, and we do not send further outreach email to a suppressed address. If you have been contacted this way and want your information removed, contact us as described in Section 12.

6. AI-derived data and automated processing

Expert Connect uses certain AI and machine-learning tools to support profile setup, search, project creation, and consultation transcription.

LinkedIn and resume parsing: uploaded PDF documents may be processed by Anthropic Claude to extract structured profile data such as work history, biography details, and tags. Extracted data is presented to you for review and editing before it is saved to your profile. Consultation content is not sent to Anthropic.
Project brief generation: text prompts submitted by clients may be processed by Anthropic Claude to generate a project title and description. Generated content is presented for review and editing before it is published. Consultation content is not sent to Anthropic.
Expert profile embeddings: concatenated profile text may be processed by VoyageAI to create a numerical vector used for search and ranking. These embeddings are mathematical representations, not readable text, and are used solely for search relevance. Consultation content is not sent to VoyageAI.
Auto-tagging: profile text may be processed using VoyageAI and cosine similarity to suggest taxonomy tags. Consultation content is not sent to VoyageAI.
Consultation transcription: consultation audio from consultations where transcription is enabled (whether or not video recording is enabled) is processed by Deepgram (via our video provider) to generate a transcript, with vendor-side PCI redaction enabled. The resulting transcript is stored for the purposes described in Section 10.

Live consultations are not subject to real-time AI surveillance. Expert Connect does not use AI to monitor, listen to, or analyze the substance of consultations as they happen. AI processing of consultation content occurs only after the consultation ends, on stored transcripts or recordings.

Future expansion of AI processing on consultation content. As described in Section 10 and the Terms of Service, Expert Connect may use Consultation Content internally to generate summaries, embeddings, classifications, and tags, and to train internal models, in order to operate, develop, secure, support, and improve the platform and its features, including matching, ranking, search, screening-question suggestions, trust and safety, and quality scoring. Where the purpose permits, this processing is performed on de-identified content. Before using Consultation Content for purposes beyond those described in Section 10, Expert Connect will update this Privacy Policy and notify users in accordance with the changes process described in Section 17.

Customer-facing AI features. If Expert Connect introduces customer-facing AI features informed by generalized patterns and learnings derived from prior consultations, those outputs will be designed not to disclose verbatim excerpts, client identity, expert identity, or other information reasonably capable of identifying a particular consultation to another client.

Vendor use of consultation content. Expert Connect uses third-party vendors to provide services such as recording, transcription, storage, consultation-record access, and dispute or trust-and-safety support. Consultation content is shared with such vendors only for those service purposes, as described in this Privacy Policy. If Expert Connect later puts additional contractual restrictions in place for such vendors, it may update this Privacy Policy accordingly.

7. How we use information

We use personal information to operate, secure, and improve Expert Connect. Depending on how you use the platform, we may use information to:

Create and manage user accounts and authenticate sessions.
Enable profile creation, expert discovery, and search relevance.
Facilitate booking requests, scheduling, screening questions, and consultation workflows.
Process payments, holds, captures, refunds, transfers, and expert payouts.
Send transactional emails and service notifications.
Identify and contact prospective experts and clients from the sources described in Section 5, and send referral invitations that members request.
Support calendar integrations where enabled.
Enforce marketplace rules, trust and safety standards, and quality controls.
Investigate reports, disputes, no-shows, circumvention, and potential MNPI issues.
Maintain records for audit, tax, legal, security, and operational purposes.
Generate and maintain expert search embeddings, tags, and company enrichment data.
Operate, develop, train, evaluate, secure, and improve the platform and its features, including matching, ranking, trust and safety, quality scoring, and customer-facing AI features (see Section 6 and Section 10 for the consultation-content uses).
Measure the effectiveness of our advertising and marketing, including conversions from paid search and display campaigns, and optimize our advertising spend, as described in Sections 8 and 9.
Respond to support requests and privacy rights requests.
Comply with legal obligations and cooperate with lawful requests.

8. How we share information

We share information only as needed to operate the platform, process payments, support video consultations, provide infrastructure, grow the marketplace as described in Section 5, and comply with law. We do not sell your personal information for money. Some U.S. state privacy laws define a "sale" or "sharing" of personal information broadly to include the use of advertising cookies for cross-context advertising; where that applies, Section 14 describes those activities and the controls available to you.

Clerk (authentication and user management): receives email, name, OAuth tokens, and session cookies.
Supabase (database and file storage): receives profile and transactional data stored through the platform, including avatars and thought-leadership PDFs experts upload to their profile, and consultation transcripts and recordings copied from our video provider for retention and access purposes.
Stripe (payment processing and payouts): receives payment method tokens, transaction metadata, and Stripe Connect information. Full card numbers do not touch our servers.
Daily.co (video consultations, recording, and initial recording storage): receives room metadata, participant join and leave events, and, for consultations where transcription is enabled, the audio of the consultation, plus the audio and video where recording is enabled. Daily.co orchestrates transcription on Expert Connect's behalf and generates recordings where recording is enabled; transcripts and any recordings are then copied to Expert Connect-controlled storage shortly after each consultation as described in Section 10.
Deepgram (speech-to-text transcription): receives consultation audio for consultations where transcription is enabled, transmitted via Daily.co for the purpose of generating WebVTT transcripts. Vendor-side PCI redaction is enabled.
Resend (transactional and program email): receives email addresses, names, and consultation details such as scheduled time and duration, and, for referral invitations and prospective-user outreach, the recipient's email address and the content of those messages.
VoyageAI (search embeddings and auto-tagging): receives concatenated expert profile text including name, title, company, bio, work history, and tags to build profile embeddings, and, when a search is run, the search query text used to build a query embedding. For a search run from within a project, that query text includes the project title and description and a short summary of the project's screening questions. Consultation content is not sent to VoyageAI.
People Data Labs (company enrichment): receives company domain names only. No personal data is shared.
Anthropic (AI-powered PDF parsing, project-brief generation, and prospect scoring and outreach drafting): receives PDF documents submitted for parsing and text prompts submitted for generation, and, for the prospective-user outreach described in Section 5, prospect records (name, job title, employer, general location, and data source) used to score marketplace fit and draft introduction emails. Consultation content is not sent to Anthropic.
Recal.dev (calendar integration): receives OAuth tokens for connected Google or Microsoft calendars and free/busy availability metadata. Expert Connect requests read-only, free/busy access only; it does not request permission to read, create, or edit calendar events, and event titles, attendees, and descriptions are not accessed or shared.
OpenStreetMap Foundation (Nominatim) (city and timezone lookup during onboarding): receives the city query string a user types in the location field. No data processing agreement is offered by this public service.
Svix (webhook signature verification): Expert Connect uses the Svix library to verify the authenticity of inbound webhook event payloads it receives from providers such as Clerk and Resend. This verification runs within Expert Connect's own systems; account and consultation data is not shared with Svix for this purpose.
Google (favicon CDN): when company logos are displayed in the platform, the user's browser loads favicons directly from Google's public favicon service. Google receives the company domain string and standard browser request metadata (such as IP address and user agent). No personal information from your account is sent.
Google (Google Ads conversion tracking and measurement): for visitors located in the United States, when you take certain actions on our website (such as submitting a request, completing an expert profile, or creating an account), your browser sends a conversion signal to Google so we can measure how well our advertising performs and optimize our advertising campaigns. Google receives the fact that the action occurred, standard browser and device information, and identifiers Google sets through its own advertising cookies. We do not send Google your name, email address, or account identifier as part of these conversion signals. Google processes this information as an independent controller under its own terms and may use it for its own advertising and measurement purposes, including remarketing. This advertising technology is not loaded for visitors we detect as located in the European Economic Area, the United Kingdom, or Switzerland. See Section 9 for cookie details and how to manage it.
Vercel (hosting and serverless infrastructure): receives HTTP requests and server logs, and provides the approximate country derived from your IP address for our first-party analytics.
Vercel Web Analytics (cookieless web analytics, provided by Vercel): receives aggregate, cookieless page-view telemetry such as page paths, referrers, and general device and browser type. It does not receive cookies, a persistent visitor identifier, account identifiers, names, email addresses, or other information that identifies you, and is not used for advertising or cross-site tracking.
Upstash (rate-limiting infrastructure, provided through the Vercel Marketplace): receives your IP address and, when signed in, your account identifier as short-lived keys used to enforce request rate limits and protect the platform from abuse.
Sentry (error monitoring and session replay, by Functional Software, Inc.): receives crash reports, request metadata, release and environment identifiers, and Clerk user IDs. For sessions that encounter errors, Sentry also receives anonymized session playback with all text and input fields masked and all media blocked. Sentry does not receive email addresses, names, IP addresses, cookies, or user-typed content.
Slack (internal operations notifications, by Slack Technologies, Inc.): receives automated trust-and-safety and dispute alerts containing a consultation identifier, the report or dispute category, and the role of the person who filed (client or expert). Names, email addresses, and consultation content are not sent to Slack.

If Expert Connect engages additional vendors to process consultation content on its behalf, those vendors will be added to this list before any consultation content is shared with them, together with a description of the services they provide and the categories of consultation content involved.

We may also share information if required by law, subpoena, court order, or regulatory request, or where necessary to protect rights, safety, platform integrity, or to investigate fraud, abuse, or prohibited conduct.

Google user data. When you connect a Google account, Expert Connect's access is limited to read-only free/busy calendar availability, used solely to display your availability and prevent double-booking when scheduling consultations. Expert Connect's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it, share it with data brokers, or use it to train AI models. (This carve-out governs notwithstanding the broader internal-use and training permissions described in Section 10, which apply to consultation content, not to Google API data.) For clarity, the advertising cookies and conversion measurement described in Section 9 use information about your activity on our own website. They do not use any data we receive from Google APIs (such as your Google Calendar free/busy availability), which remains subject to the Limited Use commitments described above and is never used for advertising.

9. Cookies and similar technologies

Expert Connect uses essential cookies, privacy-preserving cookieless analytics, and, for visitors located in the United States, a single advertising-measurement cookie described below. We do not use Google Analytics, Segment, Mixpanel, or similar third-party website analytics services. Apart from the Google Ads conversion measurement described below, we do not use advertising cookies or third-party tracking pixels, and we do not build cross-site advertising profiles of you.

Essential cookies. Required for the platform to function and to keep you signed in:

__session: Clerk session token. Essential, HttpOnly, Secure.
__clerk_db_jwt: Clerk JSON Web Token. Essential, HttpOnly, Secure.

Cookieless analytics. We also measure how the platform is used so we can improve it. This measurement does not rely on cookies or other identifiers stored on your device:

Vercel Web Analytics (provided by our hosting provider, Vercel): collects aggregate, cookieless page-view and traffic information, such as which pages are visited, referring pages, and general device and browser type. It does not set cookies, does not store a persistent visitor identifier on your device, and is not used to build a profile of you or to track you across other websites.
First-party product analytics: Expert Connect itself records a limited set of in-product events, such as page views and which steps of the booking flow are reached, to understand where the experience can be improved. These events are stored in our own systems, are not shared with a third-party analytics vendor, and set no cookie or persistent identifier on your device. For page-view events we derive, on our servers, your approximate country from your IP address and a privacy-preserving visitor signal that rotates every day and is not used to track you across days or to identify you. Booking-flow events are recorded without identifying you while you are signed out; when you are signed in, an event may be associated with your account.

Advertising and conversion-measurement cookies (United States visitors). For visitors we detect as located in the United States, we use Google Ads conversion tracking to measure how our paid search and display advertising performs and to optimize our advertising spend. When you take certain actions, such as submitting a request, completing an expert profile, or creating an account, a Google tag on our site records that a conversion occurred and sends that signal to Google. To do this, Google sets its own advertising cookies and identifiers in your browser, which Google may use to attribute the conversion to an ad and for its own advertising purposes, including remarketing. We do not send Google your name, email address, or account identifier with these signals. This is the only advertising cookie we use, and we do not load it for visitors we detect as located in the European Economic Area, the United Kingdom, or Switzerland.

Your choices for advertising cookies. You can limit this advertising measurement by blocking or deleting cookies through your browser settings, which prevents Google from associating your activity with its advertising identifiers; doing so does not affect the essential cookies needed to sign in and use the platform. A basic conversion signal (that an action occurred, together with standard browser and device information) may still be sent to Google even when cookies are blocked. You can also manage or turn off ad personalization in Google's My Ad Center and Google Ads Settings, which control how Google uses advertising identifiers for its own personalization.

Error-debugging session replay. For the purpose of debugging errors, a small sample of browser sessions and every session that encounters an error is recorded by Sentry as anonymized DOM structure. All text and input fields are masked; media is blocked. Recordings are used only for debugging and are not used for advertising, profiling, or cross-site tracking.

We also use browser sessionStorage for temporary onboarding and booking form state. This information is stored only in your browser, is never sent to our servers, and is cleared when the browser session ends. It is not used for advertising or cross-site tracking. The advertising-measurement cookie described above is the only exception to the no-advertising-cookie posture in the rest of this section, and it applies only to visitors in the United States.

10. Consultation content and consultation-record access

Consultation content is captured and used as described in this Section.

Recording and transcription. Consultations are transcribed by default so the client receives a written record, and are not video- or audio-recorded by default. The client may turn transcription off for a consultation at any time before the call starts. Recording occurs only where it has been explicitly enabled for a consultation through platform functionality. Before each consultation begins, every participant receives a conspicuous on-screen notice stating whether transcription and recording are enabled for that session, and may decline to join. When recording is enabled, both parties are notified before the session begins and at the start of the session. Experts who participate in consultations agree to this recording and transcription posture as part of the Terms of Service.

Where transcripts and recordings are stored. Consultation transcripts are generated through our video provider, Daily.co, with audio transmitted to Deepgram for speech-to-text transcription as described in Section 6; recordings are generated through Daily.co where recording is enabled. Shortly after each consultation, transcripts and any recordings are copied to Expert Connect-controlled storage (provided by Supabase) for retention and access purposes.

Consultation-record access. Expert Connect may make transcripts, any recordings, and related consultation records available to the client account or client organization that booked the consultation and its authorized users. Expert Connect may also make a copy of a consultation's transcript available to the expert who delivered that consultation, for that consultation only. Recordings, where enabled, remain available only to the client account or client organization that booked the consultation and its authorized users. We do not make a cross-client transcript library available, do not disclose Consultation Content from one client's consultation to other clients, and do not sell, license, or repackage Consultation Content as a research product.

How we use consultation content today. Today, Expert Connect's use of consultation content is limited to recording (where enabled), transcription via Deepgram, secure storage, consultation-record access, and dispute and trust-and-safety review.

How we may additionally use consultation content. In addition to the uses above, Expert Connect may generate summaries, embeddings, classifications, and tags from consultation content, and may use consultation content to train internal models, in order to improve matching, ranking, search, screening-question suggestions, trust and safety, and quality scoring. Where the purpose permits, this processing is performed on de-identified content. This use is permitted as part of the Terms of Service that experts and clients agree to.

No real-time monitoring. We do not use AI to monitor, listen to, or analyze the substance of consultations as they happen. AI processing of consultation content occurs only after the consultation ends, on stored transcripts or recordings.

Vendor use of consultation content. Expert Connect may use third-party vendors to support recording, transcription, storage, consultation-record access, and dispute or trust-and-safety functions involving consultation content, as described in this Privacy Policy.

The limits that always apply. All of the uses described above, including model training, are subject to the following limits, which do not change: Expert Connect does not make a cross-client browsable library of consultation content available; does not disclose one client's consultation content to another client; and does not sell, license, or repackage consultation content as a research product. The data we collect is used to improve the platform; it does not become a product offered to others.

11. Data retention

We retain information for as long as needed to operate the platform, maintain transaction records, enforce safety rules, and comply with legal obligations. Our current retention practices are as follows:

Active user profiles: retained while the account is active.
Deleted accounts: when you delete your account, your profile is immediately deactivated and removed from public visibility, and your sign-in credentials are deleted so the account can no longer be accessed. Associated profile and transaction data is retained as needed for legal, financial, safety, audit, fraud-prevention, and recordkeeping purposes. Personal data that we are not required to retain is deleted or de-identified upon a verified deletion request, as described in Section 12 and elsewhere in this Section and in the Terms of Service.
Consultation records: retained as long as reasonably necessary to preserve historical transaction records and to support audit, tax, dispute-resolution, trust and safety, fraud prevention, legal compliance, and platform-integrity needs, including name snapshots used to preserve historical transaction records.
Consultation transcripts and recordings: transcripts and, where recording was enabled, recordings are copied from our video provider to Expert Connect-controlled storage (Supabase) shortly after each consultation, and retained for 90 days from the consultation date. After 90 days, transcripts and recordings are deleted, except where retention is required for an active dispute, trust and safety investigation, legal hold, or audit need.
Consultation derivatives: consultation derivatives (embeddings, summaries, tags, classifications, and similar AI-derived data generated from consultation content) are retained for so long as they support platform features. Where reasonably possible, derivative data is maintained in a form that does not contain personal identifiers.
Model and system improvements: model artifacts, evaluation datasets, or system improvements derived from consultation content may be retained as long as they are in operational use, even after the underlying source content is deleted.
Ratings, reports, and expert strikes: retained as long as reasonably necessary for quality enforcement, trust and safety, dispute handling, fraud prevention, legal compliance, and recordkeeping.
Company cache: maintained with a 90-day freshness window and refreshed when stale data is accessed.
Thought leadership PDFs: retained in storage until the user deletes them or the account is removed.
Search embeddings: updated when an expert profile changes and deleted when the expert is removed.
Product and usage analytics events: retained to support aggregate analysis of how the platform is used. Events recorded while you are signed out are not associated with any account. Analytics events associated with a signed-in account are retained for this purpose; you may request their de-identification or deletion, as described in Section 12, where we are not required to retain them.
Advertising and conversion-measurement data: the advertising cookies and conversion signals described in Section 9 are set and retained by Google under Google's own retention policies; Expert Connect does not control how long Google retains this information. The first-party events we associate with a conversion are retained as described above for product and usage analytics events.
Referral send log and opt-outs: the log of referral invitations (including the invitee's email address in normalized form) is retained for audit and abuse prevention. Opt-out records are retained indefinitely so that we can continue to honor them.
Prospective-user outreach records: prospect and outreach records are retained while we operate our outreach program or until we receive a verified removal request. Suppression records (opt-outs, bounces, and complaints) are retained indefinitely so that we can continue to honor them.

Some records may be retained longer where necessary for tax, payment, dispute, fraud prevention, or legal compliance purposes.

12. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information.

Access: you can view profile data from your dashboard.
Correction: you can edit profile information from your dashboard.
Deletion: you can request account deletion through settings or by contacting support. Account deletion immediately deactivates your profile and deletes your sign-in credentials. Personal data that we are not required to retain for the purposes described in Section 11 is then deleted or de-identified upon a verified deletion request.
Data portability: you may request a copy of your personal data in a structured, machine-readable format by contacting support@expert-connect.co. This copy includes your account and profile information and your transaction records, such as your consultations, projects, ratings, and reports. It does not include consultation transcripts or recordings; where you are entitled to a consultation's transcript, it is made available to you through the per-consultation download described in Section 10.
Communications choices: you can manage notification preferences in settings, including available notification channels and SMS opt-in choices. Marketing email is off by default and is sent only if you opt in; you can manage this in your notification preferences in settings.
Advertising choices: for visitors in the United States, you can prevent the advertising and conversion-measurement cookie described in Section 9 by blocking or deleting cookies through your browser settings, and you can manage Google's ad personalization through the Google controls described in Section 9.

If you are not an Expert Connect user: you can stop referral invitations or outreach email at any time using the unsubscribe link included in every such email. You can also contact us at support@expert-connect.co to object to our processing of your information or to request its deletion; we honor these requests within the same 30-day window described below, except that we keep the minimal suppression record needed to continue honoring your opt-out.

To exercise privacy rights, contact support@expert-connect.co. We will respond to your request within 30 days.

13. GDPR notice for EEA, UK, and Swiss users

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional rights under applicable data protection law, including the right to access, rectify, erase, restrict processing, object to certain processing, and request data portability.

Our legal bases for processing personal information include contract performance, such as creating accounts, enabling bookings, processing payments, and facilitating consultations, and legitimate interests, such as operating the marketplace, preventing fraud, maintaining platform security, enforcing rules, improving search and marketplace quality, and contacting prospective users identified from the public sources or team-uploaded contact lists described in Section 5.

Expert Connect is operated from the United States and personal information is processed and stored in the United States.

The advertising and conversion-measurement cookies described in Section 9 are not loaded for visitors we detect as located in the European Economic Area, the United Kingdom, or Switzerland, and we do not conduct cross-context behavioral advertising for those visitors.

You may contact us at support@expert-connect.co to exercise these rights. If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

14. California privacy notice

If you are a California resident, you may have rights under California law regarding access to and deletion of your personal information. Expert Connect does not sell your personal information for money. For visitors in the United States, we use the Google Ads conversion-measurement cookie described in Section 9. Depending on how "sharing" is defined under California law, that use may be considered "sharing" of personal information for cross-context behavioral advertising. You can limit this activity by declining or removing advertising cookies through your browser's cookie controls, as described in Section 9, which prevents Google from associating your activity with its advertising identifiers; as Section 9 explains, a basic conversion signal may still be sent to Google even when cookies are blocked.

15. Security measures

We use a combination of technical and organizational measures to protect personal information. These measures include HTTPS across the platform, authentication through Clerk with industry-standard OAuth and session management, server-side identity scoping in our application so that each request is authenticated and limited to the requesting user's own data, with Row-Level Security enabled on database tables in Supabase as an additional backstop, webhook signature verification (using HMAC-SHA256 and the Svix library) for providers such as Daily.co, Stripe, Clerk, and Resend, admin endpoint restrictions, and Stripe tokenization so full card numbers do not touch our servers.

No system is completely secure, and we cannot guarantee absolute security.

16. Children's privacy

Expert Connect is intended only for users who are at least 18 years old. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from a person under 18, we will take steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact support@expert-connect.co.

17. Changes to this privacy policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a notice on the platform and update the effective date at the top of this page. Your continued use of Expert Connect after the updated Privacy Policy takes effect means you accept the revised policy.

18. Contact

If you have questions, requests, or concerns about this Privacy Policy, contact us at:

Expert Connect
Email: support@expert-connect.co