Privacy Policy

Who is responsible

My Link Contact is operated by Mihail-Vlad Prajescu, a sole trader based in Northamptonshire, United Kingdom. For privacy enquiries, email info@mylink.contact or use our contact form. Mihail-Vlad Prajescu is the controller of the personal information used to operate My Link Contact. This notice covers visitors, business account holders, their representatives, prospective business contacts and people who contact us. It applies to personal information even when the service is used for business purposes.

Where we operate

Our launch markets are the United Kingdom, United States, Canada, Australia and New Zealand. We provide the service in English and are not targeting the European Union at this stage. Applicable privacy rights depend on the circumstances and local law, rather than the language of this website alone.

Information we use

• Account identity, email address, authentication records, security settings and team roles.
• Business profiles, locations, listings, business requests, chosen contacts, links and uploaded profile images.
• Verification and claim evidence, publication choices, introductions, reviews, reports and notifications.
• Support messages, attachments, responses, delivery status and records of authorised support edits.
• Technical security and usage information from our hosting, authentication and analytics services.

Information comes from you, authorised colleagues, businesses you interact with and service providers. Company research can also use public registries, Google Places and company websites, including contact or legal pages and images containing company details. Business contact details and sole-trader information may still be personal information.

Research can include a company name, registration number, website, business locations, published business contacts and website screenshots. It supports checking and preparing company records; it does not mean a business has joined, endorsed the service or agreed to receive marketing. You can ask for the source of information about you, correct it or object to its use through our privacy contact. Public availability does not remove your applicable privacy rights.

Why we use it

We use information to provide accounts and business workspaces, check authority, display approved business profiles, facilitate introductions, provide recommendations, deliver service messages, resolve enquiries and prevent misuse. We do not use an introduction agreement as permission for unrelated marketing.

Our UK lawful bases

• Contract: providing an account and requested services where you are personally a party to the agreement, for example as a sole trader, or taking steps you request before that agreement.
• Legitimate interests: administering business relationships and team accounts where you represent a company, responding to enquiries, maintaining an accurate business network, researching relevant public company information, checking authority and protecting against fraud or misuse. We must consider your interests and rights alongside these purposes.
• Consent: optional website analytics and optional communications where consent is required. You can withdraw it through Cookie preferences, notification settings or by contacting us, without affecting the lawfulness of processing before withdrawal.
• Legal obligation: retaining or disclosing information where a specific legal duty requires it.

You can object to processing based on legitimate interests. A company’s agreement with us does not, by itself, make its employees personally parties to that contract. Outside the UK, we also apply the consent and other requirements that govern the particular processing.

Accounts and security

Supabase authenticates accounts and stores application records. Passwords are handled by its authentication service, not stored as readable passwords in business profiles. Optional passkeys use your device or security key; My Link Contact does not receive your fingerprint or face scan. Optional two-factor authentication adds an authenticator-code check. Cloudflare Turnstile helps protect account and contact forms from abuse.

Who can see your information

Private workspace data is available to authorised members of your business according to their roles. The platform owner can review checks and reports and make authorised support changes, with an audit record. Saving a private draft does not itself publish it.

Publishing makes the selected business profile information available through the network. Introduction contact details are disclosed to the other business only after mutual agreement. Information already downloaded, copied or emailed cannot be recalled by editing or withdrawing it on My Link Contact.

Service providers and external content

We use Supabase for authentication, database and private file storage, Cloudflare for website delivery and security, and Resend for transactional email. Self-hosted Rybbit at rybbit.prajescu.com provides optional public-website analytics only after you accept it. You can withdraw permission through Cookie preferences in the footer. OpenAI processes the business information described in the next section to provide personalised recommendations.

Business locations offer optional Google Maps. A map loads only when you select Show map; Google then receives the displayed address and technical information such as your IP address. Google's own privacy and cookie policies apply. Open in Google Maps takes you to Google's service.

External websites, images and optional video embeds may receive technical information when your browser loads them. Their own policies apply to their services. Our private company research server uses Google Places and Crawl4AI under owner control; member actions do not start searches or crawls. Preparing a record does not create a member or grant permission to contact a business.

OpenAI and personalised recommendations

When an eligible member requests personalised recommendations, we send OpenAI a limited selection of published business information: business identifiers, names, categories, locations, short summaries, product or service descriptions and business requests. This includes the requesting business and potential matches. Published descriptions may contain personal information, particularly for sole traders, so only include information suitable for this purpose.

The recommendation request does not include account passwords, authentication tokens, private contact records, support messages, claim evidence or uploaded images as separate fields. Information you write into a published description can nevertheless be included. We do not send the contents of your entire private workspace to the model.

OpenAI compares business offers and requests and returns possible connections, reasons and supporting quotations. We check returned business identifiers and evidence against the eligible profiles. We retain recommendation results, including those quotations, and records of the model, request status, time, token usage and cost for delivery, troubleshooting and accounting. Results may be reused for up to 24 hours; this reuse period is not a promise that the underlying record is deleted after 24 hours.

We request that OpenAI does not store recommendation responses as retrievable API response history. This does not disable its separate security and abuse-monitoring retention. OpenAI states that API inputs and outputs are not used for model training by default unless the API customer opts in. Its default abuse-monitoring retention is up to 30 days, with exceptions including legal and safety requirements. We do not promise zero retention. See OpenAI’s API data controls.

Recommendations are a form of automated matching, not a decision about your legal rights, creditworthiness or eligibility to trade. They do not approve checks, accept introductions or contact anyone automatically. You can use All businesses instead. Other members may receive suggestions based on your published profile. You can update or withdraw your published information, object to this use through our privacy contact, or ask us to explain a result. We rely on the lawful basis described above for the relevant business relationship, including legitimate interests in helping members find relevant business connections.

Messages, support and notifications

Contact-form submissions and support requests are recorded so the platform owner can respond, track progress and deal with spam or complaints. Resend processes recipient addresses and message content for acknowledgements, account emails, invitations and service notifications. Delivery records help us identify failures and prevent repeated messages. In-app notifications include events such as introduction requests and team activity.

Notification preferences control optional updates; essential security and service messages may still be necessary. Providing an email address for an enquiry or accepting an introduction does not subscribe you to unrelated marketing. Team invitations contain the information needed to join the inviting business. Only invite people you are authorised to contact.

International processing

Our hosting, authentication, email and AI providers may process information outside your country. Businesses you choose to connect with may also be overseas. We do not promise that information stays in your country. Contact us for information about the destinations and contractual safeguards relevant to your information, or before sharing information subject to a location restriction.

Where UK transfer rules apply, an overseas transfer must have a permitted basis, such as UK adequacy regulations or appropriate contractual safeguards with the required assessment. You can ask us which basis applies to a provider and how to obtain information about the relevant safeguards. Agreeing to an introduction is not blanket consent for unrelated transfers.

Retention and deletion

Account and workspace records are retained while needed to provide your account and business services. Retention after closure depends on unresolved enquiries or disputes, security and fraud-prevention needs, and applicable legal obligations. Support messages are assessed according to whether an enquiry is resolved and whether a continuing record is needed. Backup copies follow the hosting provider’s backup cycle rather than disappearing immediately when an active record is deleted. Contact us to request deletion or ask which retention criteria apply to a particular record. Clearing data on your device does not delete your account or business records.

Your choices and rights

We do not sell personal information or use it for cross-site advertising. You do not have to accept optional analytics to create an account. Required account and business details are needed to provide the requested service; optional profile fields can be left blank. Business checks and ownership disputes are reviewed by the platform owner. AI recommendations suggest possible connections and do not make legal or similarly significant decisions about you.

You can edit your profile, choose whether to publish, choose introduction contacts and manage optional notification preferences. You can ask us for access, correction or deletion and raise an objection or other applicable privacy request. We may need proportionate evidence of identity or authority. Rights, deadlines and exceptions vary by country; we will explain the outcome and any available review route.

Please do not put passwords, payment-card details, health information or identity documents in business profiles, introductions or ordinary support messages. If evidence is required for a particular check, we will explain what is needed and where to submit it. The account service is for adults acting for a business, not for children.

See Data Protection for country-specific information and independent complaint routes, and Cookies and privacy choices to manage optional analytics. Material changes will be dated here; where required, we will provide a separate notice.