This policy has two changes that apply from November 17, 2026. Until then, the current promises still apply.
- Data incidents (section 12): instead of notice within 72 hours, we will notify you without unreasonable delay and within the time the applicable law requires.
- How policy changes are announced (section 13): no more email; instead a banner on the website and a notice card in the app, each for 30 days.
In the same update, section 11 now describes accurately how the app and the website use your location (effective now).
Sections 3 and 9 now also name Google Analytics and Travelpayouts, which run on the website, and describe how the website handles Global Privacy Control and Do Not Track (effective now).
Section 3 now also names EasyPost and USPS, which ship the orders of Shops in the Marketplace (effective now).
1. Information We Collect
VietLinker collects information when you register an account, post listings, or use our services:
- Personal information: full name, email, phone number
- Listing information: content, images, address
- Payment information: via Stripe (we do not store card details)
- Technical information: IP address, browser, device
2. How We Use Information
- To provide and improve VietLinker services
- To process payments and manage credits
- To send account and listing notifications
- To provide customer support and resolve disputes
- To comply with applicable laws and protect user rights
3. Sharing Information
We do not sell or rent your personal information. Information is only shared in these cases:
- With your explicit consent
- With service providers (Supabase, Stripe, Vercel), the location services BigDataCloud, ipapi.co / ipwho.is and Google (see “Your location” in section 11), Google Analytics (page views) and Travelpayouts (affiliate marketing partner, see section 9)
- With the shipping partners of Shops in the Marketplace: EasyPost (Simpler Postage, Inc.) checks the delivery address you save; when you ask for a shipping price at checkout and when an order is shipped, EasyPost and USPS receive the name, address and phone number of the recipient and of the sending shop, and the size and weight of the parcel, to price the shipping, buy the shipping label and track the delivery
- When required by law
- To protect the rights and safety of VietLinker and its users
4. Third-Party AI Services
VietLinker provides AI-powered features. When you use them, certain data is sent to third-party AI providers:
AI Features:
- AI Assistant — text and image chat with AI
- Voice Chat — voice conversations with AI
- Phone Agent — AI-powered phone calls
- Daily Digest — AI-generated content summaries
- Goal Planner — AI-assisted milestone planning
- Image Generator — AI-generated images from text
AI Providers:
5. Your AI Persona
In the Voice Room you may record a short clip of yourself so VietLinker can build a “companion” that carries your face. The companion speaks with a stock AI voice you pick — we do not clone your voice. The feature is entirely optional: if you never create a persona, we collect none of the data described in this section.
What we collect
- A short selfie clip of about 8 seconds (your face and voice) — used only to extract one still frame, then deleted
- One still frame extracted from that clip
- A consent record (no video, no audio): timestamp, consent-text version, and the server-issued random code for that recording
Sole purpose
Building the persona (portrait and persona clips) used by your own account in the Voice Room. Nothing else.
Who we share it with
Only the still frame is sent to xAI Corp. to render the portrait and the persona clips; your clip and your voice never leave VietLinker's servers. Per xAI's commitment, data sent through their API is not used to train their models and is deleted after an operational retention window of at most 30 days. We do not send your face or voice to any other third party.
Retention and destruction
- The original clip (which contains your voice): deleted as soon as the portrait is built, and within 24 hours at the latest even if the build fails — we keep no voice sample
- Frame, portrait and persona clips: deleted the moment you delete the persona or your account, and automatically after 12 months of non-use
- Consent record: kept as proof that you consented; it contains no image and no audio
Security
All files live in a private bucket with per-user access control, are reachable only through server-issued links that expire after 120 seconds, and are encrypted at rest.
Your rights
- Withdraw your consent at any time
- Delete the persona in the app: Settings → Companion
- Delete your account — which also deletes every file listed above
- Request access to the data we hold, at account@vietlinker.com
6. Data Security
We use industry-standard security measures — SSL/TLS encryption, AES-256 at rest, two-factor authentication, and strict access controls.
7. Your Rights
You have full control over your personal data:
- Access — view data we hold about you
- Rectification — correct inaccurate information
- Erasure — request deletion of your account and data
- Opt-out — stop AI data processing at any time
Contact account@vietlinker.com to exercise these rights.
8. Public Records & Directory
Part of VietLinker is a directory aggregating professional licensing data (doctors, lawyers, real estate agents, accountants, insurance producers, dentists, pharmacists) from federal and state public records.
Sources:
- Federal: NPI Registry (CMS), IRS PTIN FOIA
- State: Bar Associations, Real Estate Commissions, Departments of Insurance, Boards of Pharmacy/Dentistry
- National: NIPR (National Insurance Producer Registry)
9. Cookies & Tracking
- Strictly necessary: keeping you signed in and keeping the website safe (cannot be turned off — the website needs them to work).
- Functional: remembering a few of your choices on this browser, for example that you closed a notice.
- Analytics: Google Analytics measures page views and how the website is used, so we can improve it. Its advertising features are off (no ad cookies).
- Affiliate partner: on wide screens (usually computers), the website loads a script from Travelpayouts; Travelpayouts receives your IP address and browser information and may set cookies. The script is not loaded in the VietLinker app’s web view, nor when your browser sends a Global Privacy Control or Do Not Track signal.
- Apart from the affiliate partner above, VietLinker uses no third-party advertising or targeting tags or cookies. YouTube videos on the website use YouTube’s privacy-enhanced (no-cookie) mode until you play them.
How to refuse:
- Turn on Global Privacy Control or Do Not Track in your browser: the website honors the signal automatically and does not load the Travelpayouts script. Google Analytics still measures page views.
- Block or delete cookies in your browser settings; some features may not work if necessary cookies are blocked.
10. State Privacy Rights (CCPA, VCDPA, CPA…)
VietLinker honors the rights below for all users regardless of state — covering CCPA/CPRA (CA), VCDPA (VA), CPA (CO), CTDPA (CT), UCPA (UT), TDPSA (TX), OCPA (OR).
- Right to Know — request what data we hold about you
- Right to Erasure — request deletion, processed within 45 days
- Right to Correct — fix inaccurate information
- Right to opt out of sale of personal info (VietLinker does NOT sell)
- Right to opt out of targeted advertising (VietLinker does NOT do this)
- Right to portability — request data in JSON/CSV
- Right to non-discrimination — no penalty for exercising your rights
[APPEAL]. Still not satisfied — file a complaint with your state Attorney General.How to exercise rights:
- Email: account@vietlinker.com (subject: [Privacy Request])
- Receipt confirmed within 10 days
- Identity verified via email confirmation
- Substantive response within 45 days (extendable by 45 if complex — we will notify)
State-specific notes:
- CA Shine the Light (Civil Code §1798.83) — VietLinker does not share data for third-party direct marketing
- Nevada NRS 603A — VietLinker does not sell data; opt-out requests still honored
- Illinois BIPA — we create no faceprint or voiceprint, run no face-geometry scan and never use images or audio to identify anyone; the raw selfie clip for the AI Persona feature has its own written consent and deletion schedule (see section 5)
- Washington MHMDA — no consumer health data collected (only business info from public records)
- New York SHIELD Act — fully complied with (see sections 6 + 12)
11. Children & Sensitive Data
Children (COPPA — Federal):
VietLinker does not knowingly collect data from children under 13. If discovered, it will be deleted immediately. Parents may request deletion of their child's data at account@vietlinker.com.
Sensitive data:
- Health (WA MHMDA, CA CMIA): only business info of healthcare providers — NO consumer health data
- Biometric (IL BIPA, TX CUBI): no fingerprints, no face-geometry scan, no voiceprint, no identity matching. A raw selfie clip (face + voice) is collected only if you create an AI Persona — see section 5
- Precise location (GPS): used only to show results near you and fill in your city; no background tracking — details below.
- Financial: NO stored card numbers — payments handled by Stripe (PCI-DSS Level 1)
Your location:
- Your device’s precise location (GPS) is used only with your permission: in the app, when you grant VietLinker location access; on the website, when you tap “Near me” or open a list link with the “near me” filter (near=1) — your browser asks for your permission (if you allowed the site before, it may not ask again). We use it to find listings, jobs, homes, restaurants and businesses near you, and to fill in your city. There is no tracking while you are not using the app or the website.
- Coordinates are sent to VietLinker’s servers to measure distance and filter results near you. We do not save these coordinates to your account; server request logs may record request URLs that contain coordinates.
- To turn coordinates into a city name, the app uses your phone’s built-in map service (Apple on iPhone, Google on Android); the website sends the coordinates to BigDataCloud.
- When the website has no location of yours from the last 24 hours, each visit estimates your city from your IP address (ipapi.co, or ipwho.is as a fallback) to suggest results near you. The website’s analytics tool (Google Analytics) also infers an approximate city from your IP address.
- Your latest location (city and coordinates) is remembered on your own device so you are not asked again: the website uses it for up to 24 hours; the app keeps it on your phone until your location changes or you pick another place.
- VietLinker AI does not receive your coordinates. It knows your city and state only if you turn on “Let AI know your city” (see section 4).
- Community posts: you can attach a place by typing to search for it (address suggestions from Google, through VietLinker’s servers). The place name is shown on the post; the coordinates of the place you pick are stored with the post and sent with it to people who can see the post. If you pick a specific address, those are that address’s coordinates. This is the place you choose, not your device’s GPS location.
- To turn off GPS: revoke location access in your phone or browser settings. Choosing a city yourself only changes the results you see — the website’s IP estimate still runs.
12. Retention & Breach Notification
Data retention:
- Professional profile (public records): retained while license is active + 12 months after expiry
- User account: retained while account is active + 24 months after closure
- Analytics data: anonymized after 14 months
- Privacy request log: retained 24 months (compliance)
- Email correspondence: retained 3 years
13. International Users & Policy Changes
VietLinker serves U.S. users. If you access from outside the U.S., your data may be stored/processed in the U.S. and may not have the same protection as GDPR (EU). By using the Site you agree to this.
When we update this policy:
Through November 16, 2026:
- New version + update date posted at the top
- Banner notice on the Site for 30 days
- Email to registered users for material changes
From November 17, 2026:
- New version and update date posted at the top
- A banner on the website for 30 days
- A notice card in the VietLinker app for 30 days
14. Contact
Questions about privacy / privacy requests / opt-out — contact: account@vietlinker.com
General support — contact: support@vietlinker.com
Need help?
Our team is ready to assist you.
