Privacy Policy

The INSEAD Global Entrepreneurship Club (“IGEC”, “we”, “us”) operates this platform — a private network for INSEAD alumni founders, investors and operators. IGEC is an independent, volunteer-run alumni club. It is not INSEAD or the INSEAD Alumni Association, and neither of those institutions is responsible for this platform or for the data it processes.

IGEC is the data controller for the personal data described in this policy. For any question about your data or this policy, contact us at till.oberhummer@insead.edu.

We process the following categories of personal data:

• Identity — your name, email address, INSEAD programme and graduation year, location, LinkedIn URL, phone number and profile photo.
• Profile — your role, short bio, region, persona (founder, investor, operator or expert) and directory visibility preference.
• Venture — company name and website, your one-liner, venture type, stage, team size and a key metric.
• Network signals — sectors, what you are looking for, what you can offer, and the free-text answers you give about how you can help and what you need.
• Activity — connection requests, introductions, confirmed connections, and post-meeting feedback. We also derive an internal, non-public reputation signal from that feedback; it is visible only to administrators and the matching algorithm and is never shown on your profile.
• Consent and account records — your consent choices and timestamps, sign-in records, and an audit log of changes to your profile.

• The registration form you complete when you apply to join the network.
• Information you add or edit yourself on your profile.
• A LinkedIn profile PDF, if you choose to upload one to fast-fill your profile (see section 6).
• Your activity on the platform — connections, introductions, and feedback.

• To operate your membership — running the directory, matching, connections and your account. Legal basis: performance of our agreement with you (contractual necessity).
• To feature you publicly — publishing a Founder Spotlight or including you in external communications. Legal basis: your explicit consent, which you can withdraw at any time.
• To keep the network safe and useful — moderation, security, and improving match quality. Legal basis: our legitimate interests in a trustworthy, high-signal network.

We use a small set of trusted providers to run the platform. Each processes data only on our instructions and under a data processing agreement.

We do not sell your personal data, and we do not use advertising or third-party tracking services.

In-app chat has been retired. This app no longer sends data to Stream. Historical chat data may remain with the former provider until its separate retirement process is complete. Contact us about access or erasure of that data.

You can choose to use AI-assisted profile import:

• LinkedIn fast-fill — if you choose to upload your LinkedIn profile PDF, it is sent to Anthropic to extract draft profile fields for you to review. The PDF is processed in memory and is not stored afterwards.

Founder Spotlight articles, where you have consented to publication, are drafted with the help of Langdock. Our AI providers do not use data submitted through their APIs to train their models.

Your core profile and account data is stored in the European Union: our database and profile photos are hosted in Frankfurt.

Some providers — including Vercel’s global edge network, Resend, Anthropic and Mailchimp — may process data outside the EU, including in the United States. Where that happens, the transfer is protected by Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

We use only the cookies needed to run the platform. We do not use advertising, analytics or tracking cookies, so the platform shows no cookie banner.

• A sign-in cookie keeps you logged in. It is strictly necessary and cannot be turned off while you use the platform.
• Two preference cookies remember that you dismissed an on-screen prompt. They hold no personal data and expire after seven days.

We keep your profile and account data for as long as you are a member. If you leave or ask us to delete your data, we complete the deletion within 30 days (see section 10).

Consent records are kept as long as the law requires us to evidence them. Moderation records are kept for two years after a case is resolved. Limited audit-log entries are retained for security and accountability.

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw any consent you have given. You can also lodge a complaint with your national data protection authority.

To exercise any of these rights, email till.oberhummer@insead.edu. We respond within 30 days.

When you ask us to delete your data, we anonymise your record by default — your identifying details are removed and your profile disappears from every directory, while anonymised entries are kept where they are needed for the integrity of audit and moderation records. If you explicitly request complete erasure, we permanently delete your record and your uploaded files.

Member data is hosted in the EU with reputable providers under data processing agreements. Connections are encrypted in transit, access to member data is restricted to the volunteers who operate the platform, and administrator credentials are stored only as salted hashes. If a data breach affecting your rights occurs, we will notify the competent supervisory authority and, where required, you.

The platform is for INSEAD alumni and is not directed at, or intended for, anyone under 18.

We may update this policy as the platform evolves. When we make a material change we update the date above and, where appropriate, ask you to review the change the next time you sign in.

For any privacy question or to exercise your rights, contact us at till.oberhummer@insead.edu.