The Utah List (“we,” “our,” or “us”) operates utahlist.com, a directory and intelligence platform covering Utah’s software ecosystem. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to visitors, registered users, people who claim company or investor profiles, and anyone who signs in with LinkedIn.
1. Information we collect
Account information. When you create an account, sign in, or claim a profile, we collect your email address and any name you provide.
LinkedIn profile data. If you choose to sign in with LinkedIn, we use LinkedIn’s OAuth 2.0 flow with the openid, profile, and email scopes. With your consent, LinkedIn returns your name, headline, profile picture URL, public LinkedIn profile URL, and verified email. Access and refresh tokens are encrypted at rest on our servers and are never exposed to the browser or to third parties.
Submissions and contributions. When you submit a company, investor, partner, idea, feature request, correction, or claim, we store the content you provide along with your account identifier.
Usage and analytics. We collect pages viewed, referrer, coarse device and browser information, and an anonymous session identifier. When you are signed in, these events are associated with your account so that companies you claim can see aggregate engagement on their own profiles.
Public ecosystem data. Much of the content on The Utah List concerns organizations and public professional roles. We compile this from public sources, partner disclosures, and user submissions, with citations where available.
2. How we use information
- Operate, maintain, and improve the site and its features.
- Authenticate you and keep your session secure.
- Verify company, investor, and partner claims.
- Provide claimed-profile analytics to authorized owners.
- Respond to submissions, corrections, and support requests.
- Detect, prevent, and address abuse, fraud, and security incidents.
- Comply with legal obligations.
3. LinkedIn sign-in specifics
We request only the openid, profile, and email scopes from LinkedIn. We do not post, message, connect, or take any other action on your behalf on LinkedIn. LinkedIn data is used solely to identify you, populate your profile on The Utah List, and (where applicable) verify that you represent a company, investor, or partner you are claiming.
You can revoke our access at any time from your LinkedIn permitted services settings. Revocation ends our ability to refresh tokens; existing profile data on your Utah List account remains until you request deletion.
4. How we share information
We do not sell personal information. We share limited data with service providers that host our infrastructure, database, email delivery, and analytics under contractual confidentiality obligations. We may disclose information when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify affected users).
Public profile information you submit or that appears in the public directory (for example, your name and public role at a company you claim) is visible to any visitor.
5. Data retention
We retain account and claim data for as long as your account is active or as needed to provide the service. LinkedIn tokens are retained only while the connection is active. Analytics events are retained in aggregated form for trend analysis. You may request deletion of your account and associated personal data at any time by contacting us.
6. Your choices and rights
- Access, correct, or delete your account information.
- Sign out at any time and disconnect LinkedIn from LinkedIn’s settings.
- Request a copy of the personal information we hold about you.
- Depending on your jurisdiction (including the EEA, UK, and California), you may have additional rights such as objecting to processing or lodging a complaint with a supervisory authority.
7. Cookies and local storage
We use a small number of cookies and browser local storage entries to keep you signed in, remember an anonymous visitor identifier for analytics, and store display preferences. We do not use third-party advertising cookies.
8. Security
We use industry-standard measures to protect personal information, including encrypted transport (HTTPS), encrypted storage of OAuth tokens, row-level security in our database, and least-privilege access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
9. Children
The Utah List is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.
10. International users
The Utah List is operated from the United States. If you access the site from outside the United States, you understand that your information will be processed in the United States.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. For material changes, we will provide additional notice (for example, an in-app message to signed-in users).
12. Contact us
Questions, requests, or complaints about this Privacy Policy or our data practices can be sent to privacy@utahlist.com.