Legal
Privacy Policy
Last updated: June 16, 2026 — The Value-First Collective
What this policy covers
This privacy policy describes how the Value-First Collective, operated by Conveying Your Message LLC dba Value-First Team (“we,” “our,” or “us”), handles information on valuefirstcollective.com. It covers this site only.
The Value-First Collective is a paid, gated practitioner network. Unlike a simple marketing site, it collects information at several points: when you apply to join, when you become a member and sign in, when you choose to appear in the public practitioner directory, when you contact a fellow member, and when you pay for membership. Each is described below.
Membership agreements, the directory listing agreement, and the member-to-member contact agreement are set out in our Terms of Service. This policy explains the data side; the terms explain the rules.
Information we collect
When you apply to join. The application form on /apply collects your name, email address, and optionally your company, your role, the kind of practitioner you are, and a message about your practice and why you want to join. We use this to review your application and, if accepted, to set up your membership. Your application is stored as a Contact and an Interest record in our HubSpot CRM.
When you become a member and sign in. Membership uses a magic-link sign-in: you enter your email, we email you a one-time sign-in link, and clicking it creates a signed session. We do not store a password. Your member identity is your existing HubSpot Contact. While signed in, a session cookie (and a non-sensitive “you are signed in” signal cookie) keeps you authenticated — see the Cookies section.
Your practitioner profile. As a member you can maintain a profile — your name, photo, title, company, location, areas of expertise, and a short bio. These are the fields that may appear in the public directory, subject to your directory toggle (see the Directory section). Your profile is stored in our content system (Sanity) and your membership and directory-consent state are stored on your HubSpot Contact.
When you pay for membership. Membership payments are processed by HubSpot Commerce Hub through a hosted checkout. Your payment-card details are entered on HubSpot's hosted checkout and are handled by HubSpot and its payment processor — card numbers never touch this site. We receive and store the resulting membership and billing state (your tier, whether a payment succeeded, renewal status), not your card data.
When you contact a fellow member. Inside the member-only Collective Commons you can send a message to another member. We record the message and who sent it to whom as an internal note in our CRM so the contact is accountable. We do not reveal one member's email address, phone number, or other contact details to another member — messages are relayed by us, addressed by internal member identity, never by exposing a personal address.
Information collected automatically. This site is hosted on Vercel, which may log standard web-server data (IP address, request time, browser and device type) as part of normal hosting. The HubSpot Commerce Hub hosted checkout, when you reach it, runs on HubSpot's infrastructure under HubSpot's own policy. We do not run advertising trackers or session-recording tools on this site.
The public practitioner directory and your consent
The Value-First Collective publishes a public practitioner directory — profile cards and pages that name members, show their photo, title, company, location, expertise, and bio — as proof of the network. This is a public, search-engine-indexed surface, so it deserves explicit attention.
The directory is proof, not a marketplace. Directory cards and profiles carry no contact details and no outbound links — no email, no phone, no LinkedIn, no website, no booking link. Even where our records hold those fields, they are never read into or rendered on the directory. There is no way to contact or hire a practitioner through the public directory.
We display a practitioner in the public directory only when they have affirmatively opted in. Listing is opt-in: the directory toggle on your member profile defaults to off, and your card appears in the public directory only after you turn it on. No one is listed by default, and we do not rely on prior publication elsewhere as a basis to display anyone here — only your own affirmative opt-in puts your card on this site.
How you remove your listing. You stay in full, direct control: set your directory toggle to off and your card is removed from the public directory the next time it is rebuilt. We honor a recorded opt-out without exception — an off toggle always keeps your card out. If you cannot reach your toggle, you can have your listing removed at any time by emailing us at the address in the Contact section below, and we will remove it.
Visitors and members outside the United States, and California residents. Depending on where you are located and subject to applicable law, you may have rights over your personal information — for example, if you are in the EU or UK (under the GDPR or UK GDPR) or are a California resident (under the CCPA/CPRA). Those rights may include, to the extent the relevant law applies to us, the right to access, correct, or delete your personal information, to object to or restrict its processing, and — where our processing relies on consent — to withdraw that consent. We rely on your affirmative opt-in as the basis for displaying your directory listing, so you can withdraw it at any time by turning your directory toggle off. If you are in one of these jurisdictions and want to exercise any of these rights, contact us at the address in the Contact section and we will respond as required by the applicable law.
How we use your information
We use the information described above to:
- Review your application and decide whether to accept you into the Collective.
- Create, authenticate, and manage your membership and your member session.
- Display your profile in the public practitioner directory only after you affirmatively opt in (your directory toggle on), and remove it as soon as you set your directory toggle to off or contact us.
- Process membership payments and manage billing and renewals through HubSpot Commerce Hub.
- Relay and record member-to-member contact in the Collective Commons, without exposing personal contact details.
- Communicate with you about your application, membership, and account.
- Comply with applicable legal and accounting obligations.
We do not sell your information. We do not use it to place advertising. We share it only with the service providers described in the next section, who process it on our behalf.
Service providers we rely on
HubSpot, Inc. is our CRM and the system of record for applications, membership, and billing, and the provider of the hosted checkout for membership payments. Your application, your membership and directory-consent state, the record of member-to-member contact, and your billing state are stored in HubSpot. HubSpot processes this data on our behalf under a data processing agreement and is subject to its own Privacy Policy.
Sanity is our content system; your practitioner profile content (name, photo, title, company, location, expertise, bio) is stored there and is the source for the directory display.
Vercel hosts this site and may log standard web-server data as part of normal operation, governed by Vercel's own privacy policy.
HubSpot is also our email sender. The emails this site sends — your magic-link sign-in email, your application confirmation, and member notifications — are delivered through HubSpot. When you request a sign-in link, we record the link on your HubSpot Contact and a HubSpot workflow sends you the email containing it; application and member notifications are handled the same way. To deliver these messages, HubSpot processes your email address and the content of the message, under the same data processing agreement and HubSpot Privacy Policy described above. We do not use a separate third-party email service.
Cookies
When you sign in as a member, we set two first-party cookies: a secure, httpOnly session cookie that keeps you authenticated (it cannot be read by client-side scripts), and a small non-sensitive “signed in” signal cookie that lets the interface know a session exists. Both expire after roughly 30 days or when you sign out.
We do not set advertising or analytics cookies on this site. If you reach the HubSpot Commerce Hub hosted checkout, HubSpot may set its own cookies on its domain as part of the checkout, governed by HubSpot's policy.
Most browsers let you block or delete cookies. If you block our session cookies, you will not be able to stay signed in to the member area, but the public pages are unaffected.
Data retention and your rights
We retain your information for as long as necessary to manage your application and membership, to operate the directory and the member community, and to comply with applicable legal and accounting obligations. If you would like to:
- Access, correct, or delete the information we hold about you.
- Remove your profile from the public directory (set your directory toggle to off, or ask us).
- Object to or restrict processing of your information.
- Withdraw consent, close your membership, or request that we stop contacting you.
Contact us at the address below and we will respond within 30 days. We will honor your request to the extent practicable, and where legal obligations require us to retain certain records (such as records of membership payments), we will let you know.
California residents. The California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives California residents certain rights over their personal information. To the extent the CCPA/CPRA applies to us, the following describes the categories of personal information we collect, why we collect it, and the rights you can exercise.
Categories of personal information we collect, and why. We collect identifiers (your name and email, and your HubSpot Contact identity), professional or employment information (company, role, areas of expertise, and your bio), commercial information (your membership tier and billing status — not your card data, which is handled by HubSpot's checkout), internet or network activity (standard web-server logs at our host), and any visual information you choose to publish (your profile photo). We collect each of these for the purposes described in “How we use your information” above — to review applications, run membership and the directory, relay member contact, take payment, and meet legal obligations — and for no other purpose without telling you.
Your California rights. Subject to the thresholds above, you have the right to know what personal information we collect and how we use it, the right to request access to and deletion of your personal information, the right to correct inaccurate personal information, and the right not to be discriminated against for exercising these rights. We do not sell, and do not share for cross-context behavioral advertising, your personal information (as “sell” and “share” are defined under California law). We do not collect personal information for the purpose of inferring characteristics, and to the extent we hold any “sensitive personal information” as defined by the CPRA, you have the right to limit its use; we use such information, if any, only as needed to provide the membership you asked for. To exercise any of these rights, contact us using the information below.
How we protect your information
We take reasonable administrative and technical measures to protect the information we hold. Specifically: this site is served only over an encrypted connection, enforced by HTTP Strict Transport Security (HSTS) together with a strict Content-Security-Policy and the standard set of security response headers. Member sign-in uses a one-time magic link rather than a stored password; once you sign in, your session is carried as a signed token in a cookie that is httpOnly, Secure, and SameSite, so it cannot be read by client-side scripts and is not sent on cross-site requests. HubSpot is our system of record for the personal information we hold.
Your payment-card details never touch this site — they are entered on HubSpot Commerce Hub's hosted checkout and handled by HubSpot and its payment processor, so we do not store or transmit card numbers. The other information we hold lives with the established service providers named above (HubSpot, Sanity, Vercel), each of which maintains its own security program.
We do not claim any formal security certification (for example, SOC 2 or ISO 27001) for this site, and we describe only the measures actually in place. No method of storage or transmission is perfectly secure, and we cannot guarantee absolute security. In the event of a data breach affecting your personal information, we will notify affected members and the relevant authorities as and where required by applicable law.
Third-party links
This site links to other sites within the Value-First constellation (for example valuefirstteam.com, ainativeshift.com, valuefirststudios.com, ainativehumans.org, and valuefirstplatform.com) and to external platforms such as LinkedIn, Twitter/X, and YouTube. Each linked site has its own privacy practices. This policy covers valuefirstcollective.com only.
Children's privacy
This site is not directed to individuals under 18, and membership is for working practitioners. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will update the “Last updated” date at the top. If the changes are significant — for example, if we wire a new service provider or change how the directory works — we will make a reasonable effort to notify members through the contact information we hold.
Your continued use of this site after an update constitutes your acceptance of the revised policy.
Contact
Questions about this policy or how we handle your data:
The Value-First Collective
Conveying Your Message LLC dba Value-First Team
Email: chris@valuefirstteam.com
This policy is governed by the laws of the State of Texas.
This document is prepared for attorney review and is not legal advice. It reflects the site's actual data practices as of the date above. Material changes to site functionality (wiring a transactional mailer, launching Commerce Hub checkout, adding analytics) will require this policy to be updated to match before those changes go live.