Privacy Policy

SwitchBoard121 is operated by Cornerstone Business Consultants LLC, a North Carolina limited liability company with its principal place of business at 6425 Northwick Pl, Raleigh, NC 27609, USA.

We are the controller of the personal data we process about you as a user of the service. For personal data about your referral partners that you upload or invite, you are the controller and we act as your processor (see “Your partners' data” below).

Contact: support@switchboard121.com

When you sign in with Microsoft or Google we store your name and email address. We use them to identify your account and to sign your introduction emails. We never receive your password.

We do not store your profile photo. SwitchBoard121 shows your initials instead.

We also store the settings you enter: your sign-off, closing line, signature, and your own introduction paragraph.

You add referral partners, or invite them to add themselves. For each one we store their name, email address, job title, company, the keywords describing what they do and who they would like to meet, and the paragraph used to introduce them.

Your partner list is visible only to you. Every record is tied to your account, and no other SwitchBoard121 user can see, search, or be introduced to your partners.

You are responsible for having a proper basis to hold and share your partners' details, and for what you say about them in an introduction.

You decide which partners to add and what information to store about them. You are the controller of that data.

If you are subject to the GDPR, UK GDPR, or similar laws (or to the CCPA/CPRA in your capacity as a “business”), SwitchBoard121 processes your partners' personal data on your instructions as a processor. In that case our Data Processing Addendum forms part of these terms and sets out our respective obligations.

We do not use partner data for our own purposes, sell it, or share it with other users.

If you connect your mailbox, introductions are sent from it, so they come from you and replies reach you directly.

SwitchBoard121 requests permission to send mail only. It cannot read, search, forward, or delete anything in your mailbox, and it does not store copies of the messages it sends. Only a record that an introduction was sent, between whom, and when.

You can disconnect your mailbox at any time in Settings, which immediately removes the stored access tokens. You can also revoke the permission entirely at myapps.microsoft.com.

Subscriptions are handled by Stripe. Card details are entered on Stripe's own payment page and are never sent to or stored by SwitchBoard121. We keep only the identifiers Stripe gives us for your customer and subscription, and whether that subscription is active.

SwitchBoard121 relies on a small number of services to operate. Each receives only what it needs:

• Microsoft: sign-in; sending your introductions when you connect your mailbox; and system emails (such as profile confirmations) sent from our own mailboxes
• Google: sign-in, if you choose it
• Stripe: payments and subscription status
• Vercel: hosting and application infrastructure
• Neon: database

These providers store data on our behalf and do not use it for their own purposes.

We do not sell your data, and we do not share your partner list with anyone.

We use only one cookie: the strictly necessary session cookie required for authentication (NextAuth). We do not use any non-essential cookies, local storage, or analytics or tracking tools.

We keep your account and partner data for as long as your account exists. If you ask us to delete your account, we delete your partner records, introduction history, and settings. Records Stripe holds for financial and tax purposes are retained by Stripe under their own policies.

We protect personal data with appropriate technical and organizational measures, including:

• Encryption in transit using TLS 1.2+ on all connections
• Encryption at rest at the storage layer (via our infrastructure provider Neon, using AES-256 and AWS KMS-managed keys)
• Additional application-layer encryption for SMTP mailbox credentials
• Access limited to authorized personnel on a need-to-know basis

Even internal admin tools only expose account and usage metadata; they do not surface the content of partner records or introduction emails.

Further details are available on our Trust Center / Security page.

We primarily process data in the United States (AWS us-east-1, Northern Virginia). Where personal data is transferred from the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) that form part of our agreements with our infrastructure providers.

You can see and edit everything held about your partners inside the product, and disconnect your mailbox at any time.

To have your account and everything in it deleted, use the request form under Settings → Your data. Requests are raised from inside your signed-in account, so we know they came from you.

To get a copy of your data, email support@switchboard121.com from the address on your account.

Depending on where you live you may also have the right to correct inaccurate data, restrict or object to certain processing, data portability, withdraw consent (where processing is based on consent), and lodge a complaint with a supervisory authority. We will respond to valid requests within the time required by applicable law.

SwitchBoard121 is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it last changed. If a change is material we will provide reasonable notice.

Questions about this Privacy Policy: support@switchboard121.com

Cornerstone Business Consultants LLC
6425 Northwick Pl, Raleigh, NC 27609, USA