Privacy policy
Who is responsible
The controller is Atenea Labs OÜ, registry code 16668881, VAT EE102677991, Sakala tn 7-2, Kesklinna linnaosa, 10141 Tallinn, Harju maakond, Estonia (“VITALINK”, “we”). Contact: [email protected].
1. People who search with VITALINK
What we receive
When you use VITALINK in ChatGPT, ChatGPT sends us only the parameters needed to answer: the country and city or region to search, the type of professional, specialty or service, an optional short search text or professional’s name, an optional online-booking preference and pagination data; or the identifier of a listing you asked to see. We do not require an account and we do not receive your ChatGPT conversation history. Please do not include symptoms, diagnoses or other health details; VITALINK does not need them.
What we keep
For each request we log the tool used, the country, the outcome, a result-count range, the response time and a random correlation id. We do not log search text, city, names, listing identifiers, IP address or user agent. To protect the service against abuse, your IP address is converted in memory into a one-way value for rate limiting and is never written to logs or disk. The search parameters themselves are processed only in memory to produce the answer.
Why, and on what basis
We process this data to answer your request, keep the service secure and measure its overall health, based on our legitimate interest in providing a reliable directory (GDPR Art. 6(1)(f)). We do not sell data, do not build user profiles, do not use it for advertising and do not share your searches with listed professionals.
How long
Operational logs are deleted automatically within 30 days. Aggregated metrics that cannot identify anyone may be kept longer.
Your conversation
Results are shown inside your ChatGPT conversation. OpenAI’s handling of your conversation is governed by OpenAI’s own privacy policy.
2. Professionals listed in the directory
VITALINK publishes professional information about health professionals: name, profession, specialties, services, city, public credential verification, whether online booking is offered and prices shown on their public listings. This information comes from publicly available professional listings and registries. We process it on the basis of our legitimate interest, and the public’s interest, in helping people find health professionals (GDPR Art. 6(1)(f)). We do not publish personal phone numbers, email addresses, licence numbers, patient reviews or ratings. See the information for listed professionals. Professionals can ask us to correct, update or remove their listing, or object to its publication, at [email protected]. Listings are refreshed regularly and removed when they are no longer current.
3. Processors
| Recipient | Role |
|---|---|
| Brida AI (wholly owned subsidiary of Atenea Labs OÜ) | Operates the VITALINK platform on our behalf |
| Hetzner Online GmbH | Server hosting in Helsinki, Finland (EU) |
| Cloudflare, Inc. | DNS, content delivery, encryption and protection against attacks |
| Hostinger | Email for support and privacy requests |
All processors act under written data-processing terms. Where data may be processed outside the European Economic Area (for example by Cloudflare), transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
4. Your rights
You can ask for access, correction, deletion, restriction, portability, or object to processing, by emailing [email protected]. We answer within one month. Because we do not store search text or IP addresses, we usually hold no data that identifies you as a user. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the data protection authority where you live.
5. Children
VITALINK is not directed at children under 13 and we do not knowingly process their data.
6. Changes
We will update this page if our processing changes and show the new date at the top.