Privacy Policy

1. Overview

Speaker Follow lets a Speaker publish a branded event page, share a QR code, collect attendee check-ins, deliver slides and resources, gather questions and feedback, and automatically follow up by email — optionally syncing attendee records to the Speaker's own GoHighLevel/LeadConnector account. Because of how the product works, most of the personal information flowing through the Service is collected by a Speaker, about that Speaker's own Attendees, for that Speaker's own follow-up. Section 6 explains what that means for who is responsible for what.

2. Who we are

Speaker Follow is operated by Human in the Loop Inc., a California corporation located at 3746 Foothill Boulevard, #524, Glendale, California 91214. You can reach us at hello@humanintheloop.com.

3. Information we collect

Information Speakers provide

When a Speaker creates an account and configures an event, we (through our service providers) collect:

• Account information — name, email address, and authentication credentials, handled by our authentication provider, Clerk.
• Billing information — if you subscribe to a paid plan, payment details are collected and processed by our third-party payment processor; we do not store full payment card numbers ourselves.
• Event configuration — event title, speaker name, dates, brand colors, logo, uploaded slides/resources, call-to-action links, and calendar/booking URLs.
• Integration credentials — if you connect your own GoHighLevel sub-account, we store the connection (access tokens, location ID) needed to sync data on your behalf. These credentials are stored server-side and are never exposed to any browser.
• Custom domain information — if you point your own domain at an event, we store the domain name and the DNS records needed to verify and serve it.

Information Attendees provide

Attendees do not need an account to use Speaker Follow. When someone checks in to a Speaker's event, submits a question, votes on a question, or leaves feedback, we collect:

• Check-in details — first name (required), last name, email address (required), mobile phone, company, and role/title.
• Consent — an explicit confirmation that the Attendee agrees to receive the event's follow-up and resources. Check-in cannot be completed without this.
• Questions and engagement — the text of any question submitted, whether the Attendee requested a follow-up, and any upvotes cast on the question board.
• Feedback — a post-event rating and optional written comment.

Information collected automatically

• Standard technical logs (IP address, browser and device information, timestamps, and pages requested) collected by our hosting provider, Vercel, for security, abuse prevention, and troubleshooting.
• A single value stored in the Attendee's browser local storage that lets them return to their own resources/feedback page for an event without checking in twice. This value stays on the Attendee's device and is not used to track them across other sites.
• Session cookies set by Clerk on the Speaker admin dashboard, used solely to keep a Speaker signed in.

We do not use third-party advertising networks or general-purpose analytics trackers on Speaker Follow at this time. If that changes, we will update this Policy.

Email engagement data

Resource-delivery and follow-up emails are sent through our email provider, Resend. Like most transactional email providers, Resend's delivery and click links let us see whether a message was delivered, opened, clicked, bounced, or reported as spam, and we store that status against the relevant Attendee record so a Speaker can see how engaged their Attendees are.

4. How we use information

• To operate check-in, resource delivery, Q&A, upvoting, and feedback features.
• To send resource-delivery and, if enabled, automated follow-up emails to Attendees who consented.
• To sync an Attendee's contact details, tags, notes, and engagement to the Speaker's own GoHighLevel sub-account, only where the Speaker has connected one and the Attendee has consented.
• To maintain, secure, and troubleshoot the Service and prevent fraud or abuse.
• To communicate with Speakers about their account, billing, and product updates.
• To comply with legal obligations and enforce our Terms & Conditions.

5. How we share information

We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising. We share information as follows:

• With the Speaker who owns the event. An Attendee's check-in details, questions, votes, feedback, and email engagement are visible to the Speaker who runs that event — this is the core purpose of the Service.
• With the Speaker's GoHighLevel sub-account. Only if a Speaker has connected their own GoHighLevel/LeadConnector account for a given event, and only for Attendees who consented, we sync contact details, tags, notes, and (if configured) enroll the contact in a workflow. That sub-account belongs to the Speaker, not to us — see Section 6.
• With service providers who process data on our behalf, listed in the table below.
• For legal reasons — to comply with applicable law, respond to lawful requests, or protect the rights, safety, and property of Human in the Loop, our users, or others.
• In a business transfer — if Human in the Loop is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to the commitments in this Policy.

6. Controller & processor roles

For Attendee data, the Speaker who runs an event decides what is collected, how it is used, and whether it is synced to their own GoHighLevel account — the Speaker is the data controller (or “business,” under California law) for that Attendee data, and Human in the Loop acts as the Speaker's processor or service provider, handling that data only to provide the Service and as the Speaker instructs. For Speaker account and billing information, Human in the Loop is the controller.

If you are an Attendee and want to exercise a privacy right described in Section 9, we recommend contacting the Speaker whose event you attended first, since they control how your information is used and where it has been synced. If you are unable to identify or reach the Speaker, contact us at hello@humanintheloop.com and we will assist, including by relaying your request to the relevant Speaker or, where the law requires us to act directly, doing so ourselves.

7. Cookies & similar technologies

The Speaker admin dashboard uses cookies set by Clerk that are strictly necessary to keep you signed in — these are not used for advertising and do not require a consent banner under applicable law. Public Attendee-facing pages do not set tracking cookies; they use browser local storage solely to remember an Attendee's own check-in for a given event on that device. Resource and follow-up emails contain delivery/open/click tracking, as described in Section 3.

8. Data retention

We retain Attendee and event data for as long as the Speaker's account is active and the related event exists, plus a reasonable period afterward to support exports, follow-up sequences, and legal or accounting requirements. When a Speaker deletes an event or closes their account, we delete or de-identify the associated Attendee data within 30 days, except where we are required to retain it for longer (for example, tax or dispute-resolution records) or where it has already been synced to a Speaker's own GoHighLevel account, which is outside our control. Speakers can request deletion of a specific event or their account at any time by contacting us.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to withdraw consent. To exercise any of these rights, contact us at hello@humanintheloop.com; if you are an Attendee, see Section 6 for guidance on contacting the relevant Speaker first.

California residents (CCPA/CPRA)

In the preceding 12 months we have collected the categories of personal information described in Section 3 (identifiers, contact details, commercial/engagement information, and internet or electronic-activity information) and disclosed them to the service providers listed in Section 5 for a business purpose. We do not sell personal information, and we do not “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not knowingly collect sensitive personal information (such as government IDs, precise geolocation, or health information). California residents have the right to know, delete, and correct their personal information, to opt out of sale or sharing (not applicable here), to limit use of sensitive personal information (not applicable here), and to not be discriminated against for exercising these rights. You may designate an authorized agent to make a request on your behalf.

EEA, UK, and other jurisdictions (GDPR/UK GDPR)

Where the GDPR or UK GDPR applies, our legal bases for processing are: performance of a contract (operating a Speaker's account), consent (Attendee check-in, resource/follow-up emails, and GoHighLevel sync), and legitimate interests (securing and improving the Service). Because our infrastructure and service providers are based primarily in the United States, personal information from the EEA and UK is transferred internationally under appropriate safeguards, such as Standard Contractual Clauses or an equivalent mechanism offered by the relevant service provider. You have the right to access, rectify, erase, or restrict processing of your data, to data portability, to object to processing, to withdraw consent at any time, and to lodge a complaint with your local data protection authority.

10. Children's privacy

Speaker Follow is intended for business and professional audiences and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls on our backend, and credential storage that keeps integration secrets (such as GoHighLevel tokens) server-side only. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

12. International users

Human in the Loop is based in the United States, and our service providers process data primarily in the United States. If you access Speaker Follow from outside the United States, your information will be transferred to, stored, and processed in the United States and possibly other countries, as described in Section 9.

13. Third-party links

Event pages may include links or embedded content chosen by a Speaker — for example, a booking calendar, a YouTube or Loom video, or a resource file hosted elsewhere. This Policy does not cover those third-party destinations; please review their own privacy practices.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice to Speakers.

15. Contact us

Human in the Loop Inc.
3746 Foothill Boulevard, #524
Glendale, California 91214
hello@humanintheloop.com