Privacy Policy

Last updated: March 22, 2026

VinLink ("we", "us", or "our") operates the VinLink platform (vinhardlink.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

1. Information We Collect

We collect information you provide directly, including: search queries for suppliers and products; inquiry form submissions (name, email, phone, message content); account registration data through Clerk authentication (email, name, profile picture); and business claim verification documents. We also automatically collect usage data such as IP address, browser type, pages visited, and interaction patterns.

2. Google Maps API

We use the Google Maps API to display supplier locations and industrial zones on maps. When you use map features, Google may collect your location data and usage information subject to Google's Privacy Policy (https://policies.google.com/privacy). We do not store your precise geolocation data.

3. Authentication (Clerk)

We use Clerk for user authentication and account management. When you create an account or sign in, Clerk processes your authentication data (email, name, profile image, and authentication tokens). Clerk's data handling is governed by their privacy policy at https://clerk.com/legal/privacy.

4. Cookies and Analytics (PostHog)

We use PostHog for product analytics to understand how users interact with our platform. PostHog may set cookies and collect data including page views, click events, session duration, device information, and anonymized user identifiers. You can opt out of analytics tracking through your browser settings or by using a Do Not Track header. We also use essential cookies for authentication and session management.

5. Email Communications (Resend)

We use Resend to send transactional emails, including inquiry notifications to suppliers, account verification emails, and system notifications. Your email address is shared with Resend solely for the purpose of delivering these communications. We do not send marketing emails without your explicit consent.

6. Third-Party Services

We integrate with the following third-party services: Supabase (database and backend infrastructure) for storing supplier data, user profiles, and inquiry records; Facebook for social login and sharing features; and Upstash Redis for caching and rate limiting. Each service processes data according to their respective privacy policies.

7. How We Use Your Information

We use collected information to: provide and maintain our supplier search platform; process and respond to supplier inquiries; verify business ownership claims; improve our services through analytics; send transactional communications; prevent fraud and ensure platform security; and comply with legal obligations.

8. Data Sharing and Disclosure

We share your information only in the following circumstances: with suppliers when you submit an inquiry; with third-party service providers as described above; when required by law or legal process; to protect our rights, privacy, safety, or property; and in connection with a merger, acquisition, or sale of assets.

9. Your Rights

You have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data (right to be forgotten); object to or restrict processing of your data; data portability — receive your data in a structured, machine-readable format; withdraw consent at any time where processing is based on consent. To exercise these rights, please contact us at privacy@vinhardlink.com.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Inquiry data is retained for 2 years. Account data is retained until you delete your account. Analytics data is anonymized after 12 months.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure database access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

12. International Data Transfers

Your data may be transferred to and processed in countries other than Vietnam, including the United States where our infrastructure providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

13. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data, please contact us.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

15. Contact Us