Privacy
Your data, straight.
Plain English, no games. Here’s exactly what we collect, why, and the one promise we won’t break: we never sell or share your personal data. Wherever you are — the EU, the UK, Singapore or anywhere else — this is written to meet the GDPR, UK GDPR and Singapore’s PDPA.
Who controls your data
The data controller is Agencio APAC Pte Ltd (Singapore), which operates The Possible as part of Agencie.io Labs. For any data question or to exercise your rights, use the request form at the foot of this page.
What we collect, why, and our legal basis
- Joining or applying — name, email, LinkedIn, your pitch. To consider and validate you for membership. Basis: your consent when you apply, and our legitimate interest in vetting for a trustworthy room.
- Your member profile — nickname, optional avatar, discipline, optional LinkedIn, email preferences. To run your membership and the directory. Basis: our membership arrangement with you, plus consent for anything you choose to show.
- Your contributions — forum posts, votes, nominations, hat tips. To run the room. Basis: the membership arrangement and our legitimate interest in operating the community.
- Reports about members — the report and who sent it, kept confidential. Basis: the legitimate interest of the room in safety and trust.
- Commercial enquiries — name, email, company, what you want built. To respond and scope it. Basis: taking steps at your request before any contract.
- Event RSVPs — your email, to confirm your place. Basis: your consent / the membership arrangement.
- Emails we send — sign-in links and notices to run the service; any marketing or updates only with your consent, which you can withdraw any time.
- Technical — a sign-in session and minimal logs to keep you signed in and the service secure. Basis: our legitimate interest in security and delivery.
Cookies & local storage
One essential session cookie (only when you’re signed in) and a theme preference saved in your own browser. Both are strictly necessary or your own setting, so no consent banner is needed. No advertising, no third-party tracking, no analytics that follow you around the web.
Who we share it with
No one, for marketing — ever. We don’t sell or share your data. To run the platform we use a few processors who only act on our instructions:
- Cloudflare — hosting and storage (the site, and our KV/D1 databases).
- Resend — sending the emails you’d expect (sign-in links, notices).
- LinkedIn — only the profile link you choose to show on your card.
We may also disclose information where the law genuinely requires it. That’s the whole list.
International transfers
We’re based in Singapore and our processors run on global infrastructure, so your data may be processed outside your country, including outside the EEA/UK. Where that happens, transfers rely on appropriate safeguards — such as Standard Contractual Clauses and our providers’ own GDPR commitments.
How long we keep it
While it’s relevant to your membership or enquiry — then, on request, we delete it. We may keep minimal records longer where the law requires.
Your rights
Wherever you are — and specifically under the EU/UK GDPR and Singapore’s PDPA — you can ask us to:
- Access a copy of the data we hold about you.
- Correct anything that’s wrong.
- Delete it — the “right to be forgotten”.
- Restrict or object to how we use it.
- Port it — receive it in a portable form.
- Withdraw consent at any time, without affecting what we did before.
Send us a request using the form below and we’ll respond within the time the law allows (a month under GDPR). You also have the right to complain to your data protection authority — your EU supervisory authority, the UK’s ICO, or Singapore’s PDPC.
Automated decisions
Joining The Possible is decided by people — members vouch and vote, and admins make the final call. We use a wait list that’s flagged automatically when a discipline is full, but a human always reviews it. We don’t make decisions with legal or similarly significant effects by automated means alone.
Children
The Possible is not intended for anyone under 18.
Changes
If this policy changes, we’ll update this page and the date below.
Make a request
Ask for your data, a correction or deletion, or anything else — it reaches us directly, no account needed.
Last updated: 19 June 2026. See also our Terms.