Privacy Policy.

VietLinker collects information when you register an account, post listings, or use our services:

• Personal information: full name, email, phone number
• Listing information: content, images, address
• Payment information: via Stripe (we do not store card details)
• Technical information: IP address, browser, device

• To provide and improve VietLinker services
• To process payments and manage credits
• To send account and listing notifications
• To provide customer support and resolve disputes
• To comply with applicable laws and protect user rights

We do not sell or rent your personal information. Information is only shared in these cases:

• With your explicit consent
• With service providers (Supabase, Stripe, Vercel)
• When required by law
• To protect the rights and safety of VietLinker and its users

VietLinker provides AI-powered features. When you use them, certain data is sent to third-party AI providers:

In the Voice Room you may record a short clip of yourself so VietLinker can build a “companion” that carries your face. The companion speaks with a stock AI voice you pick — we do not clone your voice. The feature is entirely optional: if you never create a persona, we collect none of the data described in this section.

What we collect

• A short selfie clip of about 8 seconds (your face and voice) — used only to extract one still frame, then deleted
• One still frame extracted from that clip
• A consent record (no video, no audio): timestamp, consent-text version, and the server-issued random code for that recording

Sole purpose

Building the persona (portrait and persona clips) used by your own account in the Voice Room. Nothing else.

Who we share it with

Only the still frame is sent to xAI Corp. to render the portrait and the persona clips; your clip and your voice never leave VietLinker's servers. Per xAI's commitment, data sent through their API is not used to train their models and is deleted after an operational retention window of at most 30 days. We do not send your face or voice to any other third party.

Retention and destruction

• The original clip (which contains your voice): deleted as soon as the portrait is built, and within 24 hours at the latest even if the build fails — we keep no voice sample
• Frame, portrait and persona clips: deleted the moment you delete the persona or your account, and automatically after 12 months of non-use
• Consent record: kept as proof that you consented; it contains no image and no audio

Security

All files live in a private bucket with per-user access control, are reachable only through server-issued links that expire after 120 seconds, and are encrypted at rest.

Your rights

• Withdraw your consent at any time
• Delete the persona in the app: Settings → Companion
• Delete your account — which also deletes every file listed above
• Request access to the data we hold, at account@vietlinker.com

We use industry-standard security measures — SSL/TLS encryption, AES-256 at rest, two-factor authentication, and strict access controls.

You have full control over your personal data:

• Access — view data we hold about you
• Rectification — correct inaccurate information
• Erasure — request deletion of your account and data
• Opt-out — stop AI data processing at any time

Contact account@vietlinker.com to exercise these rights.

Part of VietLinker is a directory aggregating professional licensing data (doctors, lawyers, real estate agents, accountants, insurance producers, dentists, pharmacists) from federal and state public records.

Sources:

• Federal: NPI Registry (CMS), IRS PTIN FOIA
• State: Bar Associations, Real Estate Commissions, Departments of Insurance, Boards of Pharmacy/Dentistry
• National: NIPR (National Insurance Producer Registry)

• Strictly necessary: login session, CSRF (cannot be disabled — required for the Site)
• Analytics: Google Analytics, Plausible — anonymized, can be opted out
• Functional: language, preferences — can be opted out
• NO third-party advertising or targeting cookies

VietLinker honors the Do Not Track browser signal (per CalOPPA). You can disable cookies in your browser settings — some features may not work if necessary cookies are disabled.

VietLinker honors the rights below for all users regardless of state — covering CCPA/CPRA (CA), VCDPA (VA), CPA (CO), CTDPA (CT), UCPA (UT), TDPSA (TX), OCPA (OR).

• Right to Know — request what data we hold about you
• Right to Erasure — request deletion, processed within 45 days
• Right to Correct — fix inaccurate information
• Right to opt out of sale of personal info (VietLinker does NOT sell)
• Right to opt out of targeted advertising (VietLinker does NOT do this)
• Right to portability — request data in JSON/CSV
• Right to non-discrimination — no penalty for exercising your rights

How to exercise rights:

• Email: account@vietlinker.com (subject: [Privacy Request])
• Receipt confirmed within 10 days
• Identity verified via email confirmation
• Substantive response within 45 days (extendable by 45 if complex — we will notify)

State-specific notes:

• CA Shine the Light (Civil Code §1798.83) — VietLinker does not share data for third-party direct marketing
• Nevada NRS 603A — VietLinker does not sell data; opt-out requests still honored
• Illinois BIPA — we create no faceprint or voiceprint, run no face-geometry scan and never use images or audio to identify anyone; the raw selfie clip for the AI Persona feature has its own written consent and deletion schedule (see section 5)
• Washington MHMDA — no consumer health data collected (only business info from public records)
• New York SHIELD Act — fully complied with (see sections 6 + 12)

Children (COPPA — Federal):

VietLinker does not knowingly collect data from children under 13. If discovered, it will be deleted immediately. Parents may request deletion of their child's data at account@vietlinker.com.

Sensitive data:

• Health (WA MHMDA, CA CMIA): only business info of healthcare providers — NO consumer health data
• Biometric (IL BIPA, TX CUBI): no fingerprints, no face-geometry scan, no voiceprint, no identity matching. A raw selfie clip (face + voice) is collected only if you create an AI Persona — see section 5
• Geolocation: NO precise tracking — only city-level inferred from IP for analytics
• Financial: NO stored card numbers — payments handled by Stripe (PCI-DSS Level 1)

Data retention:

• Professional profile (public records): retained while license is active + 12 months after expiry
• User account: retained while account is active + 24 months after closure
• Analytics data: anonymized after 14 months
• Privacy request log: retained 24 months (compliance)
• Email correspondence: retained 3 years

VietLinker serves U.S. users. If you access from outside the U.S., your data may be stored/processed in the U.S. and may not have the same protection as GDPR (EU). By using the Site you agree to this.

When we update this policy:

• New version + update date posted at the top
• Banner notice on the Site for 30 days
• Email to registered users for material changes

Questions about privacy / privacy requests / opt-out — contact: account@vietlinker.com

General support — contact: support@vietlinker.com