Privacy Policy

We collect the following categories of information:

• Account information you provide directly, such as your name, email address, and profile details.
• Sign-in data when you authenticate via THECODEORIGIN ID or a third-party sign-in provider (such as Google or GitHub). We receive basic profile information (name, email, avatar, and user ID) subject to the permissions you grant. We do not receive or store your password with the provider.
• Phone number for account verification and customer support purposes.
• Billing and payment data such as top-up amounts, transaction references, invoices, and credit balance. Card or bank credentials are handled by our payment processor and are not stored by us.
• Content you create — data, files, and other information you enter or store on the Services. We process this content only to provide the Services to you.
• Usage and technical data such as pages visited, actions taken, usage, logs, device and browser information, and approximate location derived from IP address.
• Referral and ambassador data such as referral relationships, commissions, and withdrawal requests, if you participate in our referral program.
• Cookies used to keep you signed in, remember your preferences, and measure usage (see Section 5).

• To create and manage your account.
• To provide, operate, bill, and support the features you use.
• To verify your identity and prevent fraud and abuse.
• To provide customer support, including contacting you about your account, billing, or service issues.
• To maintain security, stability, and performance of the Services.
• To analyze usage patterns and improve the Services.
• To comply with legal obligations and enforce our Terms and Conditions.

We process your personal data in accordance with the laws of the Socialist Republic of Vietnam, including the Personal Data Protection Decree (PDPD), on the following bases:

• Consent — when you create an account, provide your phone number, or accept cookies.
• Contract performance — when processing is necessary to provide the Services you have engaged us for.
• Legal obligation — when we are required to process data to comply with applicable laws.

You sign in through THECODEORIGIN ID, which may be combined with third-party OAuth providers such as Google and GitHub. The provider shares limited profile information with us based on the permissions you approve. Your interaction with these providers is also governed by their own privacy policies.

We use cookies and similar technologies to keep you signed in, remember your preferences, protect against abuse, and measure usage. You can control cookies through your browser settings, but disabling them may affect functionality such as staying signed in.

We may use third-party services for analytics and security, such as:

• Cloudflare Web Analytics — to measure page performance and visitor metrics in a privacy-focused way. See Cloudflare's Privacy Policy .

Phone numbers you provide are used strictly for account verification and customer support. We do not sell your phone number or use it for unsolicited marketing.

We do not sell your personal information. We share it only in the following limited circumstances:

• Service providers that help us operate the Services, including our payment processor (to process top-ups), Cloudflare (network, security, and delivery), and the sign-in providers you choose (such as Google or GitHub). They may only process data as needed to provide their services to us.
• Authorities when required by law or to protect our rights, users, or the public.
• Business transfers in connection with a merger, acquisition, or sale of assets, with notice to you where required.

Your account data and content are stored on the cloud infrastructure of trusted providers and processed in accordance with Vietnamese personal data protection law.

Media is hosted on Cloudflare (Cloudflare Compute), which we use for compute, networking, security, and delivery. Cloudflare may process request metadata (such as IP address and request headers) at its edge locations as part of delivering traffic to you. We select providers for their compliance with industry-standard security practices.

We retain your account data and associated personal information for the duration of your account's existence.

If you request deletion or close your account, we will remove your personal data and content within a reasonable timeframe, subject to legal obligations that require us to retain certain records (for example, invoices and transaction records).

We apply reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS).
• Access controls limiting who can view your data internally.
• Data isolation between customers and organizations.

However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for securing your sign-in credentials and API keys.

In the event of a data breach affecting your personal information, we will notify affected users via email and/or a notice on our website within a reasonable timeframe, and notify the competent authorities, in accordance with applicable Vietnamese law. We will describe what information was affected and the steps we are taking to address the breach.

We do not knowingly collect personal data from children under the age of 16 without parental or guardian consent, in compliance with Vietnamese law. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it.

Under Vietnamese law and depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data and account.
• Data portability — request export of your data in a commonly used format.
• Withdrawal of consent — withdraw your consent to data processing at any time, which may affect your ability to use certain Services.

To exercise any of these rights, please contact us using the details below.

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or via email.

If you have questions about this Privacy Policy or how we handle your data, please contact us: