PROFILEY
DRAFT FOR REVIEW — This is a working draft, not legal advice or a claim of legal compliance. Confirm the missing business and retention details below before publishing.

Privacy

This draft explains what PROFILEY currently handles when creating public profiles and receiving enquiries.

Profiles and public information

Profile owners provide information such as names, profile text, photos, business details, contact options, links, media, and FAQs. Published profiles are public to anyone with the profile link and can be shared by visitors. Do not include information you want kept private.

Enquiries

If a visitor sends a profile enquiry, the form may collect their name, email address, subject, and message. The submission is stored with the related profile, a timestamp, a source label, and a rotating HMAC hash used for rate limiting. Raw visitor IP addresses are not stored. Account administrators can view submissions and an administrator can delete them. An automatic message-retention period has not yet been set.

Profile analytics

Analytics may record profile views and link clicks, referrer origin and path, coarse device type, and a shortened browser identifier. A HMAC hash of the visitor IP is used for per-profile rate limiting; raw IPs are not stored. Analytics is enabled by default on public profiles and visitors can opt out using the profile control. The browser remembers that choice in local storage. Analytics events older than 90 days are removed when new events are recorded; stale rate-limit hashes are cleaned after two days during event ingestion.

Storage and service providers

PROFILEY uses Supabase for profile data, enquiries, authentication, and file storage, and Vercel to serve the website. Profile pages load web fonts from Google Fonts. If a visitor chooses WhatsApp, their device opens WhatsApp and shares the message they chose to send. Hosting regions and provider retention terms must be confirmed before publication.

Contact, correction, and removal

To ask about a profile or request a correction or removal, email plusstudios09@gmail.com or WhatsApp +966 54 443 9052. The owner describes PROFILEY as an internal business of Plus Studios, not a separately registered company. PROFILEY mainly serves Saudi Arabia and other Gulf countries. Identity checks, response times, and deletion from backups still need to be defined.

Before publishing: identify the responsible business owner and contact address; confirm hosting regions and service providers; set contact-message retention and deletion rules; and have the notice reviewed for Saudi Arabia and any other countries served.