Privacy Policy

SpeakersList is a curated, editorial platform for design, product, AI, and technology speakers. We help organisers, teams, and podcast hosts discover thoughtful design voices, and we help speakers present their expertise and point of view clearly.

SpeakersList is operated by J. Goltermann & S. Rahayu, the joint controllers responsible for the personal data described in this policy. Full details are on our legal notice page.

For any privacy question, email us at hi@speakerslist.io. You can also submit a privacy request through our contact form by selecting “Data or privacy request”.

We only collect what we need to run accounts, publish profiles, and operate the platform.

• Account and authentication data. Your email address and the session data needed to keep you signed in. If you sign in with Google or LinkedIn, we also receive your name, primary email, the provider account ID, and (where shared) your profile image.
• Speaker profile content. Anything you, or an admin preparing or maintaining your profile, submit or edit on a speaker profile: name, role, company, topics, languages, short bio, location, public links, articles, appearances, talks, and uploaded images such as headshots or photo album images.
• Company metadata. When you select a company from our autocomplete, we save the company name plus the domain, logo URL, and provider returned by Logo.dev. Manually-typed companies save only the text.
• Form submissions. If you join the waitlist, suggest a speaker, send an application or enquiry, or use the contact form, we store the details you share with us (such as your name and email) so we can review it and reply.
• Account-management metadata. Timestamps and minimal supporting data tied to email-change confirmations and account-deletion requests, so we can complete and audit those flows.
• Basic technical logs. Standard server logs from our hosting and database providers (request paths, timestamps, error traces). These are operational and rotated by those providers.
• Media metadata. When you add a video or podcast link (for example YouTube, Vimeo, Spotify, or Apple Podcasts), we retrieve publicly available details about it, such as the title, thumbnail, and duration, from that provider.
• Invite and preview activity. When someone opens a private invite or preview link, we record that it was opened so the invitation and review flow works correctly.
• Analytics and performance. We use Vercel Web Analytics and Vercel Speed Insights to understand basic traffic and page performance across the site. Both are cookie-free and are not used to identify individual visitors.

• To run accounts, sign-in, and email or provider login.
• To create, edit, and host speaker profiles and the platform.
• To show approved public profiles to organisers and visitors.
• To review submissions and curate the platform (approve, decline, hide, or request changes).
• To communicate with speakers and admins about their account and profile.
• To respond to enquiries sent through the contact form.
• To protect the service against abuse (e.g. duplicate detection, rate limits, content checks).
• To debug and improve the product.

We do not sell personal data, and we do not use it to build advertising profiles. We only send transactional emails (such as sign-in, invitations, confirmations, and team notifications). We don’t send marketing emails, and we don’t track whether emails are opened.

Some information on SpeakersList is about people other than the person who submitted it.

• Suggestions and recommendations.Anyone can suggest a speaker, and approved speakers can recommend a peer. These submissions include the suggested person’s name and public details (such as a role, topics, links, and a short reason) and are used only for our internal review. They are not published, and a suggestion can be sent without giving us your own contact details.
• Editor-prepared speaker entries. We may prepare speaker entries using publicly available professional information. These entries remain private unless the person has given us permission to publish them. That permission may be given outside SpeakersList (for example by email or another written communication), and creating an account is not required.
• Curated historical event listings.We maintain curated listings of who spoke at past events, compiled from public sources. These listings may include publicly available professional information such as a speaker’s name, role, company, and talk title.

If you are named anywhere on SpeakersList and would like your information corrected or removed, contact us via the contact form and we’ll handle it.

Depending on the situation, we process personal information on one or more of these grounds:

• To provide the accounts and services people ask us for, such as running sign-in and hosting a speaker’s own profile.
• Where the person concerned has given us permission, for example a speaker agreeing that we can publish their profile.
• Where we have a legitimate interest in curating, operating, improving, and securing SpeakersList. This includes preparing and maintaining professional speaker entries and historical event listings using relevant publicly available professional information.
• Where we need to comply with a legal obligation.

You can object to processing we carry out on the basis of our legitimate interests. Just contact us through the contact form.

• Approved speaker profiles are public by design. That is the point of a curated public profile.
• Draft, in-review, preview, claim-pending, hidden, declined, and rejected profiles are not public and are excluded from search engines, public listings, and the sitemap.
• Account, admin, setup, and preview routes are protected by authentication or token checks where needed, and use noindex tags so search engines do not list them.
• We never publish a speaker’s email address on a public profile.

SpeakersList is a small product and we deliberately use trusted, standard infrastructure rather than building our own. These providers process limited data on our behalf and have their own privacy policies you can review.

• Supabase: authentication, database, and session management.
• Vercel: hosting, CDN, edge networking, and cookie-free web analytics and performance insights.
• Resend: transactional email delivery (sign-in links, password reset, profile invites, account confirmations, admin notifications, contact-form messages).
• Cloudflare R2: storage for speaker-uploaded images, served from images.speakerslist.io.
• Cloudflare: DNS and image resizing/delivery for images.speakerslist.io.
• Logo.dev: company-name autocomplete and company logo metadata.
• Media providers (YouTube, Vimeo, Spotify, Apple Podcasts): when a video or podcast link is added, we fetch its public title, thumbnail, and duration from the provider.
• Google and LinkedIn OAuth: only when you choose “Continue with Google” or “Continue with LinkedIn” for sign-in or setup. We request the minimum profile scopes (openid, email, profile) needed to identify your account.
• Lark: receives inbound email for the SpeakersList team mailbox.

We use only what we need to keep you signed in and to remember preview access. There are no advertising or cross-site tracking cookies.

• Authentication cookies set by Supabase Auth so your session persists between page loads.
• Short-lived preview-access cookies set when someone opens a private preview or site-preview link, so the preview works and remembers that access.
• No analytics cookies. Vercel Web Analytics and Speed Insights are cookie-free and do not fingerprint visitors.

We keep account, profile, and operational data for as long as your account is active or for as long as needed to operate the platform. Logs and short-lived tokens (preview links, setup links, email-change tokens) are kept only as long as required for their flow, then expire or are marked used.

Information about people who don’t have an account (speaker suggestions and recommendations, editor-prepared entries, and curated event listings) is kept while we operate and curate the directory. Where an entry is declined or set aside, we keep it in a non-public state unless you ask us to remove it.

When a speaker requests account deletion, our team handles the removal manually within the timeframe stated in the confirmation email. This includes removing the public profile, uploaded images, and the linked Supabase account. You can request deletion at any time from your account settings, or by using our contact form.

• Update or edit your profile at any time from your account.
• Request corrections, export, or deletion of your data via our contact form.
• Object to, or ask us to restrict, certain uses of your information.
• If you’re in a region with a data-protection authority, you can lodge a complaint with your local authority.
• Decline publication of a manually-seeded profile from the preview link.
• Use email and password if you prefer not to sign in with Google or LinkedIn.

The services listed above operate from data centres in several countries. Your data may be processed outside your country of residence. Where required, we rely on our providers’ standard contractual safeguards for international transfers.

SpeakersList is intended for working professionals. It is not designed for, marketed to, or intended for use by children.

We may update this policy as the product evolves. When we make material changes we will update the effective date at the top of this page.

Questions about your data, or anything on this page? Email us at hi@speakerslist.io, or send us a note via our contact form by selecting “Data or privacy request”. We’ll get back to you where a reply is needed.