Privacy

ProfiLink gives a doctor a page and turns a patient's taps into a WhatsApp message. Most of what you might expect a service like this to hold, it doesn't hold, so this is mostly a list of things we don't have.

If you are a patient

Your enquiry is not stored. When you choose a concern, a clinic and a time, those choices are assembled into a message on your own device and handed to WhatsApp. The message goes from you to the doctor. It does not pass through us and we keep no copy.

We do not ask who you are. No account, no email, no phone number. We record that a page was viewed and that a booking button was tapped, together with the label of the treatment and clinic chosen — so a doctor can see that “acne” is their most requested treatment. Those counts carry no identifier and are never joined to a person.

Two things here are not ours. Every page carries Meta's advertising pixel and PostHog, because that is how we measure the adverts that show ProfiLink to doctors and whether the doctors who arrive get a page built. Both are told that a page was opened, and Meta's can recognise you across other sites — the one thing on this page that follows anyone anywhere. Neither is sent your enquiry or anything you type, and neither records what happens on a doctor's page. Both are described under who else processes this, below.

If you leave a review, we store the rating, the text and whatever name you type — the name field is optional and may be left blank or shortened to an initial. We do not store your email or IP address with it. Reviews are public on the doctor's page as soon as you submit them. The doctor can reply but cannot delete them; if you want yours removed, write to us.

If you are a doctor

We store what you typed into the page and what we need to run your account: your email address, your practice details (name, specialty, qualifications, registration number if you gave one, hospital, experience, biography), your clinics with their addresses, timings and fees, the WhatsApp or SMS number enquiries should reach, your photo, and your plan.

Almost all of that is deliberately public — it is the page. The parts that are not public are your email address and your billing status.

Payments

Paid plans are sold through Polar, which acts as merchant of record. They take the payment, handle tax and issue the receipt. Card details are entered on their systems and never reach ours — we receive only the fact that a subscription started, changed or ended.

Who else processes this

• Supabase — database, sign-in and photo storage.
• Vercel — hosting and delivery, and a cookieless count of which pages are viewed. It sets no cookie, stores no identifier and cannot follow anyone between sites.
• Meta — an advertising pixel on every page, including doctors' public pages. We advertise ProfiLink to doctors on Instagram and Facebook, and this is how we tell which adverts brought someone here. Unlike everything else on this list it sets a cookie (_fbp) and it is a tracker that can recognise you on other sites, so Meta may connect a visit here to a Facebook or Instagram account. It records that a page was opened. It is not given your enquiry, your review, your name or anything you type.
• PostHog — how we tell whether a doctor who arrived actually got a page built. It counts page views and the steps of the sign-up wizard, and sets a cookie so a visit today and a sign-up next week can be recognised as the same person. On the two account screens — the wizard and the dashboard — it also records the screen, so we can see where doctors get stuck; typed values are masked out of those recordings. It never records a doctor's public page, so a patient is never filmed, and we do not give it anyone's name or email address.
• Polar — payments, as above.
• Resend — the emails we send you about your own page. We do not send marketing email and there is no mailing list.

Meta's pixel is the one advertising tracker here, and the list above is all of them. We do not sell your data, and nothing a doctor or a patient gives us is handed to anyone for their own purposes. Browsers set to block trackers, and extensions that do the same, will stop the pixel and PostHog loading, and nothing on the page will break.

Deleting things

Ask and we will delete your account. Doing so removes your page, your photo, your enquiry counts and any reviews on your page, and your link stops resolving. Deletion is immediate and cannot be reversed — we keep no backup copy of a deleted account for you to restore from.

Patients wanting a review removed, or anyone wanting to know what we hold, can write to hello@profilink.cc.

Changes

If what we store changes, this page changes with it and the date at the top moves. Contact us at hello@profilink.cc about anything here, or read the terms.