- 1. What this policy is for
- 2. What we collect, what the product does with it, how it helps you
- 3. Sensitive data and AI - so you stay in control of your content
- 4. When information goes to someone else - still so your features run
- 5. Processing outside Vietnam
- 6. How long we keep it - so you can come back, then we delete it
- 7. How we protect your information
- 8. Your rights
- 8.1. If you live outside Vietnam
- 9. What you put in public yourself
- 10. Images and files you upload
- 11. Children
- 12. Cookies
- 13. Third-party links
- 14. When the law requires a disclosure
- 15. Changes
- 16. Contact - data controller
- 17. Related documents
Privacy Policy
The information you give us is how the product works for you - your account, Your Work, and a protected session.
1. What this policy is for
When you use Appifio (biolinks, websites, web apps, Creator, and related tools on appifio.com), some information is part of the product itself - your name on the account, a draft page, a signed-in session. Without it you cannot build a site, keep an edit, receive an invoice, or reset a password.
This policy explains what each kind of information lets you do, how we hold and protect it, and what rights you have. Operator: Hydros Co., Ltd. (Công ty TNHH HYDROS), tax code 0316193171.
We are the controller of account data, payment data, and data needed to run the Platform. Personal data your visitors submit on Your Work (End Users filling your forms): you are usually the controller; we store and display it the way you configure - see Terms Sections 14 and 22.
This policy follows Vietnamese law (including the decree on personal data protection). It is part of the Terms of Service and does not replace them. The product is mainly in English and is for customers in Vietnam and, where the law allows, abroad. We do not sell personal data.
If you are a consumer in the EEA, the UK, or another place with similar mandatory rules (for example the GDPR), those rights still apply - see Section 8.1. If you collect End User data in those places, you are the controller of that data and must comply yourself.
We also process data to operate lawfully (invoices, tax), to stop fraud, and to protect the Platform. Most of what follows is about how the information helps you in the product.
2. What we collect, what the product does with it, how it helps you
| Information | What the app uses it for | How it helps you | Legal basis (short) |
|---|---|---|---|
| Account: name / organisation name, email, password (stored as a one-way hash), phone (if you add one) | Create and recognise the account; send verification and password-reset messages; reach you about billing or a security issue | You land in your own workspace; you can get back in if you forget a password; someone else cannot register the same email and take Your Work | Performing the contract; legal duties for invoices / tax where they apply |
| Plan and payment: current plan, receipts, transfer or processor details | Turn on the right limits (AI, domains, paid features); issue invoices; refund when the rules allow | You get the plan you paid for; you have a record; you can track renewal or cancel; you can request a refund under the 7-day / 14-day policy (USD, VND, or the currency charged) | Contract; invoices and tax |
| Your Work: text, images, files, links, prompts, AI output, biolink / site / app settings | Save drafts, publish, preview, attach a domain, run operational backups, show what you built | This is your product on the Platform: visitors see the page you designed; you can edit it later; you do not start from scratch every time you sign out | Contract; consent when you upload or publish |
| Session and cookies: session ID, language / layout - see the Cookie Notice | Keep you signed in; send session data over HTTPS (encrypted in transit); reduce forged requests | You can edit, use AI, and check out without re-entering a password; the session is harder to snoop on public Wi‑Fi; signing out makes it harder for the next person to stay in | Necessary for the Service; consent for non-essential cookies where the law requires it |
| Technical logs: IP address, browser, OS, time zone, pages / actions, error codes | Spot unusual sign-ins, stop account takeover, find why your page failed to load, balance servers | Your Work and visitor forms are better protected; faults are fixed in the right place; you are less likely to lose a session mid-edit because the next request hit another machine | Operation and cyber-security; legitimate interests |
| Approximate location (country / region from IP, not GPS) | Flag a sign-in from an unusual country; show language / time zone if you have not chosen one | Earlier warning if the account is opened from a strange place; UI in a language that matches where you are | Operating the Service |
| Support: what you send through contact, chat, or a bug report | Understand the issue on Your Work, billing, or AI and reply | We can work on the right account and the right broken page, instead of asking you to start over each time | Performing the contract |
We do not use the information above for a new purpose unless we have a new legal basis (your consent or the law). You can opt out of product-news / promo email; we still need to send account, invoice, and security messages so you can run the Service.
3. Sensitive data and AI - so you stay in control of your content
Do not upload data that Vietnamese law treats as sensitive (health, biometrics, sex life, full payment-card numbers, state secrets) unless we have a separate processing agreement. That keeps Your Work - and visitor data on your forms - out of the wrong place.
When you use Creator or a chatbot, the prompt and output may be sent to a third-party model provider so the feature can finish the job you just asked for (Terms Section 11). That is how AI works for you - not a way to sell your content. We do not sell User Content.
We may use de-identified or aggregated data to make the tools less buggy. We do not use paid-plan private content to train a public model of our own unless you opt in or the law allows it. If the dashboard has an opt-out, use it if you do not want your content in shared improvements.
4. When information goes to someone else - still so your features run
The Platform does not run in a vacuum. Some steps you already use need a technical partner. They only receive what that job needs. They may not take your list and market to it on their own.
- Hosting, CDN, SSL: so your visitors can open the biolink / site / app quickly, with a lock in the browser.
- Payment processors / banks: so you can pay for a plan and get a refund when the rules allow.
- Email: so you receive account verification, invoices, and sign-in alerts.
- AI providers: so Creator / chatbots can return a result for your prompt.
- Error / performance analytics (when on): so the page you are editing is less slow and less broken.
- People inside the Company only look when they need to help you or run the system; lawyers / auditors when the law or a dispute requires it.
- Courts and public authorities on a lawful request.
- A buyer if the Company merges or sells assets - they must protect the data to a similar standard.
- The public: only what you choose to publish (a public page, a showcase). Drafts and private work stay private by default.
5. Processing outside Vietnam
Some servers (hosting, AI, email, payments) sit in Vietnam or in another country. When you register and use the Service, you are told about that transfer and you agree to it under this policy. The point is still: Your Work can run, AI can answer, email can reach your inbox. Vendors are required to use the data only for the job we gave them.
6. How long we keep it - so you can come back, then we delete it
We keep data while you have an account and still need Your Work, invoices, and support history, plus any period the law requires (tax, disputes, fraud prevention). After that we delete or de-identify it, except rotating backups that age out technically.
After you close an account: we keep the legal minimum, then delete or de-identify. You may ask for an export of what we can still retrieve within 30 days if you qualify (Terms Sections 11.4 and 18.3) - so you can take your content elsewhere instead of losing it.
7. How we protect your information
We use administrative, technical, and physical measures in line with common practice: account authentication, a recommendation to use multi-factor authentication, HTTPS in transit, encryption at rest where it fits, access control, and session cookies (Cookie Notice Section 3).
No system is 100% safe. Keep passwords, OTPs, and API keys secret; sign out on shared machines; back up important content off the Platform.
If a security incident leads to unlawful access to personal data, we notify as Vietnamese law requires (and we tell you when we must or when we think we should) so you can change a password, check Your Work, and warn people who used your forms.
8. Your rights
Under Vietnamese personal-data law you may:
- Be told what data is tied to the account; consent or withdraw consent (withdrawal does not undo lawful processing already done);
- See and correct inaccurate information (name, email, Your Work in the dashboard);
- Ask for deletion in some cases (some records must stay by law: invoices, fraud prevention);
- Restrict or object to processing in some cases;
- Ask for a copy or a transfer where the law allows;
- Complain, report, or sue; claim compensation if you have grounds.
How: edit the account, or write to appifio.com/contact / admin@appifio.com. We may ask you to prove who you are - so someone else cannot delete your site or take your data in your name.
8.1. If you live outside Vietnam
Vietnamese law is the main framework (the Company is established in Vietnam). If mandatory law where you live gives consumers stronger rights (access, deletion, restriction, a complaint to a local data authority), we honour those rights to the extent that law applies. Use the same contact channels. Handling times run on Vietnam time (UTC+7), unless your law requires otherwise.
9. What you put in public yourself
A public page, a showcase, a link you send: other people can view, save, and screenshot it. We do not control what they do with it. Only publish what you are willing to show the world. This policy does not apply to third-party sites you open from Your Work.
10. Images and files you upload
Photos, video, and documents are stored so they show correctly on Your Work, load faster for visitors, and can be restored operationally so you do not lose a file while editing. We do not use them for another purpose without a legal basis. We do not hand them to a third party except to make your page run (CDN, storage) or as the law requires. You warrant that you have the right to upload the file.
11. Children
The Service is not for children under 16. We do not knowingly collect data from children under 16. People aged 16-18 may use the Service only with a parent or guardian’s consent under the Terms. If you are a parent and know a child registered in breach of the rules, contact us so we can delete the data where the law allows.
12. Cookies
A session cookie is how the app remembers you are signed in and protects that session (HTTPS, expiry on sign-out). Types and how to turn off non-essential cookies: Cookie Notice.
13. Third-party links
Your Work or the Platform may link to sites we do not run (payments, social networks, AI). Read their policies before you type anything in. See also the Disclaimer.
14. When the law requires a disclosure
We may disclose data when Vietnamese law or a valid court / authority request requires it - for example to protect an attacked account or to deal with unlawful content. That is not sharing for marketing.
15. Changes
A new version is posted at https://appifio.com/page/privacy-policy and takes effect when posted unless we say otherwise. We will flag material changes by email or in the product when the law requires it. Keeping using the Service after the effective date means you have seen the new text; if you disagree, stop using the Service and ask us to close the account.
16. Contact - data controller
Hydros Co., Ltd. (Công ty TNHH HYDROS) - tax code 0316193171
25A Street 7, Tam Binh Ward, Thu Duc City, Ho Chi Minh City, Vietnam
appifio.com/contact - admin@appifio.com
Phone: +84 388 636 131
17. Related documents
- Terms of Service
- Acceptable Use Policy
- Payment & Refund Policy
- Service & Complaints Policy
- Cookie Notice
- Disclaimer
- Legal / IP reports: appifio.com/contact?subject=legal
- Abuse / content reports: appifio.com/contact?subject=abuse
