Effective 22 July 2026
Privacy, in plain English.
security.xyz collects only what it needs to run verified community conversations, deliver intelligence and provide the experiences you request.
What we collect
When you verify for the community, LinkedIn provides the approved identity data used by the experience, such as your name and email address. We store that information in a private identity record. Public posts, replies and votes use a separate stable pseudonymous profile ID and generated handle. Other members do not receive your LinkedIn identity or email.
When you subscribe, we collect your email address and the preferences you choose, including industry, cadence, timezone and delivery time. Community verification does not subscribe you to email.
When you use an event agent, we record pseudonymous operational events such as the time, question length and one-way question fingerprint, request category, source records returned, safety outcome and response time. The activity log does not contain the text of your question or your raw IP address. Questions that require AI reasoning are sent to our AI provider for processing.
If you save an agent shortlist, we store the email address you provide and the public source records attached to that session. This does not subscribe you to a newsletter unless you separately select that option.
How we use it
- Verify that community participants are real people while keeping their public activity pseudonymous.
- Operate, moderate and protect community discussions.
- Deliver and personalise Today's Brief and weekly summaries when separately requested.
- Create event plans and other requested experiences.
Authorised administrators can access the private identity record for account support, trust and safety and separately consented communications. That means the system is privacy-preserving and pseudonymous, but it is not literal zero knowledge. We do not sell member data or permit vendor outreach without explicit member permission.
Your control
Every email includes an unsubscribe link. You can ask to see, correct or delete the information held about you by contacting us. Event-pass visibility and introduction permissions can be changed independently of newsletter preferences.
Security and retention
The public community store does not contain email addresses or LinkedIn identifiers. The mapping between a verified identity and a public pseudonym remains in the private identity layer. We use access controls and encrypted connections in production, and production identity access should be purpose-bound and audited. We retain information while your membership is active or while it is needed for the purpose you requested, then remove or anonymise it where practical.
Contact
For privacy requests or questions, email hello@security.xyz.