Internal and partner-facing rules for member/attendee data

Effective date: August 11, 2026

1. Principle

AI Insiders is designed around high-trust participation. Sponsorship, partnership, speaking, or event access does not automatically include participant contact data.

2. Default Data Lanes

• Private personal data: identifiable contact details, application answers, member notes, private messages, unpublished recordings, and confidential room participation are restricted by role and purpose.

• Opt-in introductions: direct sharing may occur when the individual requests, accepts, or otherwise consents to an introduction or lead-sharing flow.

• Operational sharing: limited information may be shared with venues, ticketing, security, vendors, or service providers as needed to deliver the program under appropriate contractual controls.

• Aggregate/de-identified insights: AI Insiders may use aggregated or de-identified information for reporting, planning, intelligence products, sponsorship reporting, and research where permitted by law.

3. Prohibited Uses

• Selling or distributing unrestricted member or attendee lists.

• Scraping, bulk exporting, enriching, deanonymizing, or matching restricted participant data without authorization.

• Using participant data for unrelated cold outreach, recruitment, fundraising, political activity, or advertising without a lawful basis and required notice/consent.

• Providing sponsors automatic access to private application responses, private notes, or confidential-room data.

4. Introduction Workflow

Where practical, AI Insiders should broker introductions through consent-based workflows: request → context → recipient choice → limited disclosure → follow-up. CRM notes should distinguish an introduction request from consent to broader marketing.

5. Access Controls and Retention

Access should be role-based and limited to legitimate business need. Export permissions should be restricted. Data no longer needed should be deleted or de-identified consistent with retention, legal, and security obligations.

6. Incident Escalation

Suspected unauthorized export, scraping, disclosure, or misuse of participant information should be escalated immediately to the internal operator responsible for security/privacy. Access may be suspended while the issue is investigated.

AI Enrichment, Model Training, and Relationship Graphs

Restricted member, attendee, applicant, speaker, or partner information may not be provided to third-party enrichment, model-training, facial-recognition, voice-identification, embedding, retrieval, or relationship-graph services unless the specific use has been approved under the applicable privacy, security, contractual, and consent workflow.

A sponsor or partner receiving an opt-in lead may use it only for the disclosed purpose and under the applicable commercial agreement. Receipt of one lead does not authorize enrichment or extraction of other participants, attendees, employers, social profiles, or relationship networks.