Privacy

Profilink gives a doctor a page and turns a patient's taps into a WhatsApp message. Most of what you might expect a service like this to hold, it doesn't hold, so this is mostly a list of things we don't have.

If you are a patient

Your enquiry is not stored. When you choose a concern, a clinic and a time, those choices are assembled into a message on your own device and handed to WhatsApp. The message goes from you to the doctor. It does not pass through us and we keep no copy.

We do not ask who you are. No account, no email, no phone number. We record that a page was viewed and that a booking button was tapped, together with the label of the treatment and clinic chosen — so a doctor can see that “acne” is their most requested treatment. Those counts carry no identifier and are never joined to a person.

If you leave a review, we store the rating, the text and whatever name you type — the name field is optional and may be left blank or shortened to an initial. We do not store your email or IP address with it. Reviews are public on the doctor's page as soon as you submit them. The doctor can reply but cannot delete them; if you want yours removed, write to us.

If you are a doctor

We store what you typed into the page and what we need to run your account: your email address, your practice details (name, specialty, qualifications, registration number if you gave one, hospital, experience, biography), your clinics with their addresses, timings and fees, the WhatsApp or SMS number enquiries should reach, your photo, and your plan.

Almost all of that is deliberately public — it is the page. The parts that are not public are your email address and your billing status.

Payments

Paid plans are sold through Polar, which acts as merchant of record. They take the payment, handle tax and issue the receipt. Card details are entered on their systems and never reach ours — we receive only the fact that a subscription started, changed or ended.

Who else processes this

• Supabase — database, sign-in and photo storage.
• Vercel — hosting and delivery, and a cookieless count of which pages are viewed. It sets no cookie, stores no identifier and cannot follow anyone between sites, which is why you have not been asked to accept anything.
• Polar — payments, as above.
• Resend — the emails we send you about your own page. We do not send marketing email and there is no mailing list.

We do not use advertising trackers, and we do not sell or share data with anyone for their own purposes.

Deleting things

Ask and we will delete your account. Doing so removes your page, your photo, your enquiry counts and any reviews on your page, and your link stops resolving. Deletion is immediate and cannot be reversed — we keep no backup copy of a deleted account for you to restore from.

Patients wanting a review removed, or anyone wanting to know what we hold, can write to hello@profilink.cc.

Changes

If what we store changes, this page changes with it and the date at the top moves. Contact us at hello@profilink.cc about anything here, or read the terms.