Privacy Policy

Account data: your email address and a hashed password, stored by Supabase when you create an account.

Legal name: collected at signup for verification purposes. Your legal name is stored separately and is never shown publicly.

Profile data: the professional information you choose to add to your profile, such as display name, bio, specializations, tools, scripts, languages, file formats, availability, portfolio cards, badges, and related profile settings. Only approved profiles are shown publicly.

Uploaded files: if you upload an avatar or portfolio images, these files are stored as part of your profile. Only upload material you have the right to publish. Do not upload confidential client material, personal data, or documents you are not allowed to share publicly.

Contact messages: if someone contacts you through your profile, LPN processes the message details needed to deliver that message to you. Contact messages addressed to your profile are deleted with your account.

Buyer requests (Ask LPN): if you submit a request via the Ask LPN form, we collect your email address, the description of your need, and the context you provide, such as specialist type, timing, budget range, company, source page, and filter context. This data is used to respond to your request and prevent abuse. It is not published and is not shared with specialists without your permission.

Aggregate usage data: Vercel Web Analytics collects aggregate statistics such as page views, referrers, and country-level geography. It does not use cookies, personal identifiers, or cross-site tracking. This data is not used to identify individual visitors.

Technical request data: hosting, security, and email delivery providers may process technical metadata such as IP addresses, request paths, user agents, timestamps, delivery status, or error logs where necessary to operate, secure, and troubleshoot the service.

We use your data only to operate and improve LPN:

• To create and manage your account
• To verify, review, approve, and display member profiles
• To let clients contact approved members through the platform
• To send transactional emails, such as account confirmation, approval notifications, password reset emails, contact messages, and Ask LPN notifications
• To respond to Ask LPN requests
• To prevent abuse, spam, and misuse
• To understand aggregate site usage and improve the platform
• To comply with legal obligations

We do not sell your data, share it with advertisers, or use it for advertising.

Contract or pre-contractual steps: to create and manage your account, provide your profile, and operate the member dashboard.

Consent: where you intentionally submit information, publish a profile, send a request, or ask LPN to contact you.

Legitimate interest: to run a professional directory, review profiles, prevent abuse, secure the platform, deliver transactional messages, and understand aggregate non-personal usage patterns.

Legal obligation: where we must retain or process limited records to comply with applicable law.

Supabase: database, authentication, and storage. LPN uses Supabase to store account data, profile data, private member data, public directory data, and uploaded files such as avatars and portfolio images. The LPN Supabase project is hosted in the EU region, Ireland (AWS eu-west-1). A Supabase data processing agreement is in place.

Resend: transactional email delivery. LPN uses Resend to send account emails, contact-form emails, Ask LPN emails, and admin notifications. Email-related data may include sender and recipient email addresses, message content where applicable, and delivery metadata. Resend's primary processing operations take place in the United States. A Resend data processing agreement is in place. Transfers of personal data outside the EU or EEA are governed by Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Resend states that customer data is deleted within 90 days after termination of the Resend service account.

Vercel: hosting, deployment, and analytics. LPN uses Vercel to host and deliver the website and to collect aggregate website statistics via Vercel Web Analytics. Vercel may process technical request metadata, such as IP addresses, user agents, request paths, timestamps, and deployment or runtime logs, as part of serving and securing the site. Vercel Web Analytics is cookie-free and does not track individuals across sites or sessions. Vercel's edge network is global. A Vercel data processing agreement is in place. Vercel runtime logs are retained for up to 1 day on the Pro plan.

The main LPN application database, authentication data, profile data, and uploaded profile files are stored in Supabase's EU region in Ireland.

Some service providers may process limited technical or email-related data outside the EU or EEA. This includes Resend for transactional email delivery and Vercel for hosting, edge delivery, and technical logs. Where personal data is transferred outside the EU or EEA, we rely on appropriate safeguards including data processing agreements, Standard Contractual Clauses, and, where applicable, the EU-US Data Privacy Framework.

LPN sets no advertising cookies and uses no advertising or cross-site tracking technology. The Vercel Web Analytics tool we use is cookie-free and does not use advertising or cross-site tracking. We therefore do not use an analytics cookie banner.

Under the GDPR, you have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing
• Request data portability where applicable

You can update your profile data at any time from your dashboard.

Self-service deletion: you can delete your own account at any time from your dashboard. Deletion is immediate for your member account and profile data: your legal name, profile, portfolio, uploaded images, specializations, tools, scripts, languages, badges, credentials, and contact messages addressed to your profile are removed with your account. Some technical records may remain in infrastructure systems for a limited period as described in the Data retention section below.

Withdrawing consent: where our processing is based on your consent, you have the right to withdraw that consent at any time with future effect. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of your rights, email contact@lpn.network. We may ask for reasonable information to verify your identity before responding. We will respond within one month.

You also have the right to lodge a complaint with a data protection supervisory authority. For Berlin, this is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (www.datenschutz-berlin.de).

We retain member account and profile data for as long as the account is active.

When you delete your account, your legal name, profile, portfolio, uploaded images, specializations, tools, scripts, languages, credentials, and contact messages addressed to your profile are removed immediately from the live LPN application and storage.

Infrastructure and provider logs: some technical records, such as server logs, IP addresses, and email delivery metadata, may remain in secure infrastructure systems for a limited period where required for security, abuse prevention, and system integrity. Vercel runtime logs are retained for up to 1 day. Resend email delivery records are retained according to Resend's data processing agreement and service terms. Resend states that customer data is deleted within 90 days after termination of the Resend service account. These records are not used to restore or display your profile.

Supabase backups: the current Supabase Free plan does not include managed daily backups or point-in-time recovery for this project. If our plan changes, this section will be updated.

Ask LPN requests are deleted within 14 days after your request has been responded to, unless limited retention is needed for abuse prevention, security, or legal reasons. You can also ask us to delete your request at any time by emailing contact@lpn.network.

Anonymous aggregate analytics data that cannot identify you may be retained indefinitely.

Questions about this policy: contact@lpn.network

Data controller: C. Onur Ilter, Schwedter Str. 23, 10119 Berlin, Deutschland