Privacy Policy

•Account: name, email and profile picture from the Google account you sign in with, and when you agreed to the terms, and to which version, when you started using the account;

•Phone number, when you verify one to use free CPU or GPU time: we keep only a one-way hash of the number and its last 4 digits for display, never the full number;

•Payments: plan, amounts, payment status and history, the version of the terms you agreed to when subscribing, invoice details you give us (company or personal name, tax code or personal identification number, address), and a saved card's last 4 digits once card saving is available. We never receive or store full card numbers: cards are entered and stored at MoMo;

•Book orders: the recipient's name, phone number and address, the quantity, the amount paid in advance, the amount due on delivery and the delivery status;

•GitHub, when you connect GitHub for a group project: your GitHub account name and the GitHub App installations you can reach;

•Your content: chat messages, attachments, code, projects, run results and run logs;

•Usage: credits used, models, CPU boxes and GPU machines used, and when;

•Technical: IP address, browser type, and the cookies needed for sign-in.

•to provide what you ask for: chat answers, running code, saving projects, CPU and GPU boxes;

•to account for credits, take payments, issue invoices and send transaction emails;

•to deliver books and collect the rest of their price on delivery;

•to apply your plan's limits, prevent fraud and abuse (including making several accounts to collect free allowances), and keep our systems secure;

•to support you and handle complaints;

•to improve the service from aggregate statistics. We don't use your content to train AI models, and we don't sell personal data.

Only providers we need to run the service, under contracts that require them to protect it:

•Supabase (database, sign-in, file storage), on servers in Singapore;

•Google: authentication when you sign in with your Google account;

•SSD Nodes (Strasmore, Inc., United States): our server in Singapore, which runs the website; the code and files of your runs pass through it to the CPU or GPU box you start;

•Amazon Web Services (Amazon Web Services, Inc., United States): CPU boxes in Singapore, which run Code Studio’s code: your runs’ code, files and results are processed on the CPU box you start, for the length of the session, on an encrypted disk; connections to it go through Cloudflare’s encrypted tunnel. Results are sent back to your project; when the session ends, the box and its disk, including your files on it, are deleted;

•Anthropic and Moonshot AI: what you send to the AI chat and research assistant goes to the model you choose, to produce the answer;

•Voyage AI: the search queries the AI assistant writes from your question, to find relevant material on the site;

•GPU providers on the vast.ai marketplace: a GPU session's code and data run on their machines for the length of the session; connections to the machine go through Cloudflare's encrypted tunnel;

•GitHub: when a group's lead links a group project to a GitHub repository, the project's code is synced with it;

•MoMo (payments), an SMS provider (phone verification codes), Resend (email);

•Viettel Group (Military Industry and Telecoms Group, Vietnam), through its S-Invoice e-invoicing service: the invoice details you give us and the transaction's description and amount, to issue and send e-invoices;

•The tax authority: the e-invoice data, including the buyer details on the invoice, sent through Viettel so the tax authority can give the invoice its code, as invoicing law requires;

•Viettel Post Joint Stock Corporation (Vietnam): the recipient's name, phone number and address and the amount to collect, to deliver books and collect payment on delivery;

•competent authorities, when the law requires it.

Our website and database servers, and the CPU boxes your code runs on, are in Singapore. Some of the other providers above have servers outside Vietnam (such as the United States, the EU, and wherever a GPU machine is). By using the service you agree that the data needed may be transferred abroad for the purposes above. We complete the formalities the law requires for transferring personal data abroad.

•Chat history: for your plan's period (see Pricing), counted from a conversation's last activity, plus 30 days' grace after a downgrade;

•Projects and files: until you delete them or your account;

•Payment records and invoices: 10 years, as accounting law requires;

•A book order's delivery details: with the transaction records, at least 3 years as e-commerce law requires, then deleted;

•A verified phone number: its hash and last 4 digits are kept even after you delete your account, so each number unlocks free allowances only once;

•When you delete your account, other data is deleted within 30 days unless the law requires us to keep it longer.

When you sign up on the book page to hear when pre-orders open for "Quả táo, con mèo và chiếc máy tính":

•Data: your email address, the language you chose, your account if you were signed in, the version of the consent you gave, when you signed up and confirmed, when we emailed you, and the error message if an email could not be delivered;

•Purpose: to send the confirmation email, the email announcing that pre-orders are open, and news about this book's release. We use the address for nothing else. Admins see only how many have signed up, never the list;

•Legal basis: your consent, confirmed through the link in an email (double opt-in); until you confirm, you get no announcement. You withdraw it with the unsubscribe link in the emails, or by emailing us;

•Processors: Resend (USA) sends the emails for us; the list is stored on Supabase (sections 3 and 4);

•Retention: an unconfirmed address is deleted after 7 days; when you unsubscribe, we stop sending and delete your address within 24 hours; the rest are deleted 90 days after the email announcing pre-orders.

You have the right to be informed; to consent or withdraw consent; to access, correct and delete your data; to restrict processing; to receive a copy; to object; and to complain and claim compensation as the law provides. Withdrawing consent may mean we can't keep providing some services.

•Viewing and correcting: change your name in Account and your invoice details in Billing, and see your payment history and credits used there. Your chats, projects and files are in Studio. To see or correct other data, or to get a copy, email the address below;

•Deleting, destroying or restricting: delete chats, projects and files in Studio at any time. To delete your account, choose "Request account deletion" in Account or email us; to restrict processing or withdraw consent, email us. Data is deleted as set out in section 5;

•Complaints about your data: email the address below, or use the channels in the Complaints Policy.

We confirm we have your request within 72 hours and act on it within the time personal data protection law sets.

Data is encrypted in transit (HTTPS), access is limited per account, and only staff who need it can reach it. Every CPU or GPU session has its own secret key, and provider keys never reach your browser. If personal data is ever exposed, we notify you and the authorities as the law requires.

We use only the cookies needed to keep you signed in and remember your language and theme. We use no visit analytics, no advertising cookies, and nothing that tracks you across other sites.

Personal data protection contact: Identity Quantum Computing Technology Joint Stock Company, Room 14-15A, 7th floor, Charmvit Tower, 117 Tran Duy Hung, Yen Hoa Ward, Hanoi, Vietnam. Email: contact@identityoperator.com. Phone: 09864113791.