Privacy Policy

Account information

When you sign up, we collect your name, email address, and a password (stored as a secure hash). If you sign in with Google, we receive your name, email, and profile photo from Google.

Profile data

Information you add to your public profile — display name, job title, bio, contact details, links, and profile photo. This data is visible to anyone who visits your public profile URL.

Payment information

We do not store your card details. Payments are processed by Stripe, Inc. We store only a Stripe customer ID and subscription ID to manage your plan status.

Usage data

We record profile views and link clicks in aggregate to power your analytics dashboard. We do not track visitors across third-party websites.

Cookies

We use a single session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

We use the information we collect to operate and improve the service, process payments, send transactional emails (account confirmation, billing receipts), provide customer support, and detect and prevent abuse.

We do not sell your personal data to third parties, use it for advertising, or share it with anyone outside the service providers listed below.

We share data with the following providers only to the extent necessary to deliver the service:

Stripe

Payment processing. Your billing details are governed by Stripe's Privacy Policy.

Cloudinary

Profile photo storage and delivery. Uploaded images are stored on Cloudinary's servers.

Neon (PostgreSQL)

Database hosting. All application data is stored in Neon's managed Postgres service.

Vercel

Hosting and serverless functions. Your requests are routed through Vercel's infrastructure.

We retain your data for as long as your account is active. If you delete your account, we permanently delete your profile, links, and analytics data within 30 days. Payment records may be retained for up to 7 years as required by applicable law.

You have the right to access, correct, export, or delete your personal data at any time. You can manage most of this from your dashboard settings. To request a full data export or account deletion, email us at support@profiley.in.

If you are located in the European Economic Area, you have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

We use industry-standard security measures including HTTPS encryption, hashed passwords (bcrypt), and access-controlled infrastructure. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

Profiley is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the dashboard. Continued use of the service after changes take effect constitutes acceptance of the updated policy.

If you have any questions about this Privacy Policy, please contact us at support@profiley.in.