Privacy Policy

BizLink collects information people provide when they create accounts, build profiles, create businesses, publish services, post content, communicate, book appointments, and leave reviews.

• Account information, including name, email address, password in protected hashed form, email verification details, password reset details, role, and account status.
• Profile information, including username, profile photo, cover photo, bio, and city or region.
• Business information, including business name, description, category, logo, cover image, location, contact information, hours, services, prices, duration, and availability.
• Community content, including posts, images, comments, likes, ratings, and reviews.
• Communication and activity information, including messages, appointments, notifications, reports when available, and support or contact requests sent to BizLink.

BizLink does not currently collect payment-card information, financial account information, government ID, biometric information, or precise GPS location through the v1.0 product.

Some BizLink information is meant to be public so people can discover businesses and decide who to contact or book.

Public information may include profile names, usernames, profile photos, public business details, services, prices, posts, comments, ratings, and reviews. Users should avoid publishing sensitive information in public fields.

Private messages are not displayed as public profile or business content.

BizLink may receive technical information during normal operation, such as IP address, browser request information, authentication/session information, request timing, security logs, and error information needed to operate and protect the platform.

The frontend currently uses browser session storage for the active authentication token and user session. It uses local storage for account-specific search history and account-specific profile onboarding dismissal. BizLink does not currently use an advertising tracking system in the codebase.

• Create, manage, and protect accounts.
• Verify email ownership and provide password recovery.
• Authenticate users and protect restricted routes.
• Display public profiles, businesses, services, posts, comments, ratings, and reviews.
• Process appointment requests and status changes.
• Enable messaging, notifications, follows, likes, comments, and reviews.
• Support uploads for profile, business, service, and post images.
• Prevent abuse, troubleshoot problems, improve reliability, and respond to support requests.
• Comply with legal obligations when they apply.

BizLink uses transactional email for account and security purposes, including email verification and password reset messages. Essential account or security emails may be required to use parts of the service.

BizLink does not currently operate a promotional newsletter in the v1.0 product.

BizLink shares information only as needed to operate the product and support user interactions.

• Public information is shown to visitors and users as part of profiles, businesses, services, posts, comments, ratings, and reviews.
• Appointment and message information is shared with the users involved in that appointment or conversation.
• Infrastructure and service providers process information for database hosting, image/media storage, email delivery, frontend hosting, and backend hosting.
• Information may be used or disclosed when reasonably necessary for safety, fraud prevention, enforcement, legal obligations, or platform protection.

BizLink does not currently sell personal information.

BizLink uses service providers for database storage, image and media storage, email delivery, frontend hosting, and backend hosting. Repository configuration confirms MongoDB/Mongoose, Cloudinary, SMTP email delivery, and hosted frontend/backend environments are used or prepared for use. These providers process information to help operate BizLink.

BizLink may retain information while an account is active, as needed to provide the service, for security and abuse prevention, for dispute handling, to comply with legal obligations, and in backups for a limited operational period. BizLink does not currently define a public exact retention period, and deletion may not immediately remove information from every backup.

BizLink does not yet provide automatic self-service account deletion. Users may request account or personal-data deletion by contacting enmh.karimi@gmail.com.

BizLink may need to verify the requester's identity and may retain limited information when reasonably necessary for security, fraud prevention, moderation enforcement, disputes, or legal obligations.

BizLink uses reasonable administrative and technical safeguards, including password hashing, email verification, protected authentication, token expiration, rate limiting, input and file validation, and restricted environment secrets. No online service can guarantee absolute security.

Users can edit account information, profile information, business information, services, and other optional content where the product supports editing. Users may also request correction or deletion support by contacting enmh.karimi@gmail.com. BizLink does not currently provide privacy toggles or a self-service data export tool.

BizLink is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If BizLink learns that such information was collected, appropriate steps may be taken to remove it.

BizLink may update this Privacy Policy as the product changes. When the policy is updated, the effective date will be revised.

Privacy questions, account requests, and data requests can be sent through the Contact page or by emailing enmh.karimi@gmail.com. You can also review the Terms of Service.