Privacy Policy

Last updated: March 2026

1. Who We Are

Prōfyl ("we", "us") operates the digital business card platform at getprofyl.com. As an auto-entrepreneur based in France, we are subject to French and EU data protection law (RGPD / GDPR). Contact: support@getprofyl.com.

2. Data We Collect

  • Account data: your email address, collected when you sign in
  • Card content: name, photo, phone, WhatsApp, social links, services, and any other information you add to your card
  • Usage data: card view counts, link click counts (aggregated, not linked to individual visitors)
  • Payment data: processed entirely by Stripe — we never store your card number or payment details
  • Technical data: authentication session cookies (strictly necessary)

3. How We Use Your Data

  • To provide and operate the Service (publish your card, manage your account)
  • To process payments and manage your plan
  • To respond to support requests
  • To send transactional emails (magic link sign-in, payment confirmation)

We do not sell your data. We do not send marketing emails without your explicit consent.

4. Legal Basis (RGPD)

  • Contract performance: processing necessary to provide the Service you signed up for
  • Legitimate interest: aggregated analytics to improve the Service
  • Legal obligation: retaining payment records as required by French tax law

5. Data Sharing

We share your data only with the following trusted sub-processors:

  • Supabase (database & authentication) — hosted in the EU
  • Stripe (payment processing) — GDPR compliant
  • Vercel (hosting) — GDPR compliant

6. Cookies

We use strictly necessary cookies only — a session cookie to keep you signed in. We do not use tracking, advertising, or analytics cookies. No cookie consent is required for strictly necessary cookies under CNIL guidelines.

7. Data Retention

We retain your account and card data for as long as your account is active. Payment records are retained for 10 years as required by French accounting law. You may request deletion at any time (see below).

8. Your Rights (RGPD)

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Object to or restrict certain processing
  • Data portability
  • Lodge a complaint with the CNIL (cnil.fr)

To exercise any of these rights, email us at support@getprofyl.com. We will respond within 30 days.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes by email.