Privacy Policy

1. Who We Are

MedProfile is a web service that enables medical professionals to create personal professional websites from their CV. By using MedProfile, you agree to the collection and use of information as described in this policy.

2. What Data We Collect

When you use MedProfile, we collect and store the following information:

• Your email address and authentication credentials
• The text content of your CV (extracted at upload time)
• Your profile photo, if provided
• The structured professional profile generated from your CV (name, specialty, education, experience, publications, etc.)
• Your published website content and chosen subdomain
• Basic usage data (e.g. number of CV analyses performed)

We do not store your raw CV file — only the text extracted from it and the structured data derived from that text.

3. How Your Data Is Stored

Your data is stored using Google Firebase (Firestore database and Authentication), a cloud platform operated by Google LLC. By using MedProfile, you acknowledge that your data is stored on Google's infrastructure in accordance with Google's Privacy Policy.

Your published website is hosted and served through Vercel, a cloud platform operated by Vercel Inc., in accordance with Vercel's Privacy Policy.

4. Third-Party AI Processing (Anthropic / Claude)

Your CV text is transmitted to and processed by Anthropic's Claude API, a third-party artificial intelligence service, for the purpose of extracting and structuring your professional information.

By uploading a CV and using the analysis feature, you explicitly consent to your CV content being processed by Anthropic in accordance with Anthropic's Privacy Policy.

Do not upload CVs or documents containing sensitive personal data beyond what is standard for a professional CV (e.g. do not include passport numbers, financial information, or medical history unrelated to your professional credentials).

5. Payment Processing (Stripe)

Payments are processed by Stripe, a third-party payment processor. MedProfile does not store your credit card number, billing details, or any other payment information on its own servers. All payment data is handled directly by Stripe in accordance with Stripe's Privacy Policy.

Stripe may collect and process personal data (such as your name, email, and billing address) as part of the payment process. Stripe is PCI-DSS compliant.

6. How We Use Your Data

We use your data exclusively to:

• Generate and display your professional website
• Allow you to log in and manage your account
• Process payments for your subscription or plan
• Enforce usage limits and prevent abuse
• Communicate with you about your account (e.g. receipts, important service notices)

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

7. Data Retention

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us. Upon deletion, your published website will be taken offline and your profile data will be permanently removed from our systems within 30 days.

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you
• Right to rectification — you can request correction of inaccurate data
• Right to erasure — you can request deletion of your data
• Right to portability — you can request your data in a structured, machine-readable format
• Right to object — you can object to certain types of processing

To exercise any of these rights, contact us at the address below.

9. Cookies

MedProfile uses minimal cookies required for authentication (via Firebase Authentication). We do not use tracking cookies or third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice on the platform. Continued use of MedProfile after changes constitutes your acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests, please contact us at: contact@medprofile.online