Privacy Policy

1. Who controls your data

Controller: PB SaaS Ventures LLC, United States.

Privacy contact: privacy@selanori.com.

We have not appointed a formal Data Protection Officer. Privacy requests are handled by the privacy contact above.

2. What we collect

• Privacy requests: your name, email and the description you write.
• Concierge help requests: your email address and the preferences you chose.
• Profile claims and correction/removal requests: name, professional email, phone, licence number and message.
• Feedback after contacting a professional: four anonymous yes/no style answers. No name, no email.
• Technical data: standard server logs needed to deliver and secure the site.
• Usage events: page views and interaction counters such as profile view or contact click, without health details.
• Browser storage: your language choice and your cookie preference.
• Professional data: business contact details and professional information about listed professionals.

3. What we deliberately do NOT collect

We do not store your matching answers. The questions about what you are dealing with — anxiety, depression, trauma, ADHD and so on — are processed in your browser to rank the professionals shown. They are not written to our database, not placed in the page address, not written to logs and not sent to analytics or advertising systems.

We do not build advertising audiences based on mental-health interest, and we do not run session replay.

4. Why we process data

• Operate the directory and show accurate professional information — legitimate interest in publishing public professional data.
• Handle your privacy request — legal obligation under Ley 81.
• Respond to help requests, claims and complaints — your consent and our contractual/organisational interest.
• Keep the service secure and prevent abuse — legitimate interest.
• Measure aggregate usage — consent where required, always without health details.

5. Who receives data

We use the following service providers. Nothing is sold, and no health information is shared with any of them.

• Lovable Cloud (Supabase) — Application hosting, database, authentication (United States) · https://supabase.com/privacy
• Lovable Email (Postmark infrastructure) — Transactional email to listed professionals (United States) · https://postmarkapp.com/privacy-policy
• Firecrawl — Discovery of publicly available professional information (United States) · https://www.firecrawl.dev/privacy
• Google Search Console — Aggregated search performance statistics (United States) · https://policies.google.com/privacy
• Lovable Email (patient invitations) — Delivery of neutral patient invitation and reminder emails (United States)

6. International transfers

Our infrastructure is hosted outside Panama (United States (Lovable Cloud)). We do not claim that all data stays in Panama. We minimise what leaves the browser in the first place, and data-processing agreements with our providers are under review.

7. How long we keep data

• Matching answers: not retained — discarded when you close the page.
• Privacy requests: kept for the request plus the period needed to evidence compliance.
• Help requests: up to 12 months after completion.
• Anonymous feedback: up to 24 months, then aggregated.
• Claims and correction requests: while the relationship lasts plus a compliance period.
• Cookie preference: 12 months in your browser.

8. Security

The site is served over HTTPS only. Internal tables — privacy requests, verification evidence, claims, admin notes, consent records — are protected by row-level database rules and are not readable from the browser. Administrative access requires a separate account and role. Secrets are never included in the browser code.

9. Your rights

Under Ley 81 de 2019 you can ask for access, rectification, cancellation (deletion), opposition and portability, and you can withdraw consent at any time.

• Access: answered within 10 business days (Ley 81, art. 16).
• Rectification: answered within 5 business days (Ley 81, art. 17).
• Cancellation / deletion: answered within 5 business days (Ley 81, art. 17).
• Portability: answered within 10 business days (Ley 81, art. 16).
• Opposition and withdrawal of consent: applied immediately where legally required, and in any case answered within 10 business days.

10. How to exercise them

Use the privacy request form on this site or write to privacy@selanori.com. We ask only for what we need to find your data — we will not ask you to send identity documents unless it is genuinely necessary.

You may also complain to ANTAI, Panama's data-protection authority.

11. Children

Selanori is intended for adults. Users under 18 should have a parent or legal guardian handle contact or booking requests. We do not knowingly build profiles of minors.

12. Marketing

We never add you to a mailing list because you contacted a professional, claimed a profile or used matching. Any newsletter requires a separate, unticked opt-in and every message carries an unsubscribe link.

13. Changes

Version 1.1 · effective 2026-09-18.

Older versions are kept. Material changes are announced on the site.