Privacy Policy

This privacy policy describes how A&D Technology Joint Stock Company (A&D Tech), , the operator of the quydinh.vn, platform, collects, uses, stores, and protects your personal information when you use the quydinh.vn app and website.

This policy is built in compliance with the Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/ND-CP detailing the implementation of the Personal Data Protection Law.

By registering and using quydinh.vn, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the service.

We collect the following types of data:

2.1. Contact & Account Information

• Email address — used for login and account-related communication
• Display name — set by you or retrieved from your Google account during OAuth sign-in
• Profile picture — retrieved from Google if you sign in with Google (optional)

2.2. User-Generated Content

• Legal questions you ask — saved to display your conversation history
• Chat history — stored on our servers and linked to your account

2.3. Identifiers & Usage Data

• User ID — an internal identifier used for authentication and access control
• Subscription plan & history (subscription tier, start date, expiry date)
• Number of queries made per day / month (to enforce plan limits)
• App interactions: features used, work sessions

2.4. Technical Data

• Error logs & performance data — used to detect and fix technical issues (not linked to identity)
• IP address — temporarily recorded by Vercel infrastructure (infrastructure logs, not retained long-term)

We use your data for the following purposes:

• Account operation: login authentication, access control based on subscription plan
• Service delivery: processing legal questions, displaying conversation history, content suggestions
• Plan management: tracking query limits, processing plan upgrades/downgrades
• Analytics & improvement: measuring performance, detecting bugs, optimizing experience (aggregated, anonymized data)
• Service notifications: sending sign-up confirmation emails, policy change notices (no spam)

We do not sell your data. Data is only shared with service providers necessary to operate quydinh.vn:

We apply technical and organizational measures to protect your data:

• Transport encryption: all connections use HTTPS/TLS
• Encryption at rest: database data is encrypted at rest
• Row-Level Security (RLS): each user can only access their own data
• Access control: only authorized staff can access production data
• Automatic backups: data is backed up daily and securely stored across multiple geographic regions

6.1. Retention Period

• Account data: retained for as long as the account is active
• Conversation history: retained for up to 2 years from creation date; can be manually deleted at any time
• Technical logs: retained for up to 90 days
• After account deletion: all data is permanently erased within 30 days

6.2. How to Delete Your Data

You can delete your data in the following ways:

• Delete individual conversations: in the app → conversation menu → Delete
• Delete your entire account: Settings → Account → Delete Account (processed within 30 days)
• Submit a request: email support@quydinh.vn with the subject "Data Deletion Request"

Under the 2025 Personal Data Protection Law (No. 91/2025/QH15) and Decree 356/2025/ND-CP, you have the following rights regarding your personal data:

• Right to access: request to view all personal data we hold about you
• Right to rectification: request correction of inaccurate information
• Right to erasure: request deletion of personal data ("the right to be forgotten")
• Right to restriction: request a temporary halt to data processing while a complaint is pending
• Right to data portability: receive a copy of your data in a readable format
• Right to withdraw consent: withdraw consent at any time (does not affect prior processing)
• Right to object: object to data processing for marketing purposes

To exercise these rights, send an email to support@quydinh.vn. We will respond within 72 hours.

Your data is processed on servers located abroad (Singapore, India, United States) by the service providers listed in Section 4. This data transfer activity has undergone an impact assessment and has been registered with the Ministry of Public Security (Department A05) in accordance with the 2025 Personal Data Protection Law (No. 91/2025/QH15) and Decree 356/2025/ND-CP.

We only transfer data to organizations that have signed a legally binding Data Processing Agreement (DPA) , ensuring your data is protected to a standard equivalent to or higher than Vietnamese regulations.

quydinh.vn uses certain cookies and local storage (localStorage) necessary to:

• Maintain your login session (session token — required to use the service)
• Save interface preferences: light/dark mode, language, preferred AI model
• Security: CSRF authentication token

In addition to the essential cookies listed above, quydinh.vn does use third-party measurement and marketing tools: Google Analytics 4 for traffic statistics, and Meta Pixel (IDs 1346580380151769 and 4460814154177758) to measure the performance of our fanpage content and to support Facebook advertising. These tools may set cookies and collect your IP address, device and browser information, and browsing behaviour. We do not use these tools to read the content of your legal conversations.

10.1. Data Protection Officer (DPO)

For any questions, requests, or complaints related to personal data, please contact:

10.2. Operating Entity

10.3. Complaints to State Authorities

If you are not satisfied with how we handle your complaint, you have the right to submit a report to the Ministry of Public Security — Department of Cybersecurity and High-Tech Crime Prevention (A05) at baovedlcn.gov.vn.