What we hold, and who sees it.

Your name, work email, title, organisation, and — if you give one — your mobile number and LinkedIn address. A headshot if you upload one. Dietary notes if you write them. Which dinners you reserved a seat at and which you walked into. The CPE certificates issued to you. Anything you write to the desk.

We also keep an audit record of consequential actions on your record: who changed what, and when. That exists so the desk can answer “did that letter go out” and “who edited this” — questions you are entitled to have answered.

To decide on your application, to seat you at a dinner, to tell the venue how many are coming and what they can eat, to issue you a CPE certificate an auditor will accept, and to reach you about the club. Nothing else.

The desk. Other members see only what the peer directory shows — your name, title and organisation — and only if your record is set to appear there. It is on by default because the directory is much of the point, and you can switch it off in one click on your profile, at any time, without asking anyone.

Attendance is never shared. We do not tell members who else is coming to a dinner, we do not publish guest lists, and the text line will not confirm whether a person belongs to the club — to anyone, members included.

Photographs from dinners are shown at /scenes to people who are signed in, and nowhere else. Those pages carry a noindex instruction, so search engines do not reach them.

A CPE certificate is verifiable by anyone holding its number, at cxocadre.com/verify/<number>, with no account. That is what makes it useful to an auditor. The page states the credits, the date, and the issuing body. It says nothing about who else was in the room.

The site runs on Vercel. Records live in a Neon Postgres database in the United States. Sign-in is handled by Clerk. Email is sent through Amazon SES; text messages through AWS End User Messaging. Uploaded images are stored in Vercel Blob. Each of these processes data on our instructions and for no purpose of their own.

Two parts of this site call Claude, run inside our own Amazon Bedrock account. The first writes a short briefing note on an application, so the desk reads a file rather than a form — it decides nothing, and a person always makes the call. The second answers the text line, using only what it reads from this site and from your own record.

Your data is not used to train anybody’s model. It is not sent to a consumer AI product. And no model on this site can change your record — the text line can pass a request to the desk, and that is the extent of it.

We email you about your application, your seat, and your certificates. If you gave us a mobile, we may text you a dinner reminder or a membership update — a handful a year, never marketing. Reply STOP to stop, HELP for help. Message and data rates may apply. Removing your number from your profile ends it just as completely.

We do not sell your data, rent it, trade it, or hand it to advertisers. We do not build public profiles. We do not let search engines index member pages. We run no advertising trackers and no third-party analytics on member areas.

Your record lasts as long as your membership, and the CPE ledger outlives it — a certificate that stops verifying is worthless to the person holding it. Ask us to close your account and we remove your profile, your headshot and your contact details, and keep the certificate numbers and the audit trail.

Write to the desk at cxocadre.com/contact or desk@cxocadre.com and say what you want. We will tell you what we hold, correct anything wrong, or remove you. If you are in California, the CCPA rights to know, delete, correct and opt out are yours; we do not sell or share personal information as that law defines it, so there is nothing to opt out of.

CXO Cadre is operated by Virtually Testing Foundation, a non-profit registered in the United States. Orange County, California.