Privacy Policy

Introduction

This Privacy Policy explains how Dan Tech Academy (operated by Tran Huu Danh, an individual/sole proprietor based in Vietnam) collects, uses, and protects your personal data when you use our website and e-learning services.

Effective Date: January 25, 2026

This policy complies with Vietnam's Decree 13/2023/ND-CP on Personal Data Protection.

Information We Collect

Account Information

When you create an account, we collect:

• Email address (required for authentication)
• Display name (optional)
• GitHub username (optional, for course access verification)
• Telegram username (optional, for support communication)
• Profile avatar (optional)

Authentication Data

We use Supabase for authentication:

• Magic link tokens (sent via email)
• OAuth tokens (Google, GitHub - if you choose social login)
• Session cookies (to maintain your login state)

Payment Information

We use SePay (VietQR) for payment processing:

• Bank transfer reference number
• Transaction ID
• Order history and purchase records

Important: We do NOT store your bank account numbers, card details, or banking credentials. SePay handles all payment processing securely.

Automatically Collected Data

When you visit our website, we automatically collect:

Cookies and Local Storage

Essential (Required)

Analytics (Optional)

You can manage cookie preferences through your browser settings or our cookie banner.

How We Use Your Information

We use your information to:

1. Provide Services - Authenticate your account, grant course access
2. Process Payments - Complete transactions, send receipts via email
3. Communicate - Send purchase confirmations, course updates, important notices
4. Improve Experience - Analyze usage patterns, optimize content
5. Legal Compliance - Maintain records as required by Vietnam law

Legal Basis for Processing

Under Vietnam's Decree 13/2023/ND-CP:

Note: Unlike GDPR, Vietnam law does not recognize "legitimate interests" as a standalone legal basis. We rely primarily on your explicit consent.

Data Sharing

Third-Party Services

We share data with these service providers:

What We Do NOT Do

• Sell your personal data to third parties
• Share data with advertisers for targeted ads
• Transfer data outside Vietnam/Singapore without adequate protection

Data Security

We implement the following security measures:

• HTTPS encryption for all data transmission
• Supabase Row Level Security (RLS) for database access control
• No plaintext password storage - OAuth and magic links only
• Limited access controls - minimal staff access to personal data
• Regular security audits of our codebase

Data Retention

Your Rights Under Decree 13/2023

You have the following rights regarding your personal data:

1. Right to Access - Request a copy of your personal data
2. Right to Correction - Update incorrect or incomplete information
3. Right to Deletion - Request removal of your account and data
4. Right to Portability - Receive your data in a standard format (JSON/CSV)
5. Right to Withdraw Consent - Revoke consent at any time

How to Exercise Your Rights

• Email: danhtran.dev@outlook.com
• Response Time: Within 30 days
• Verification: We may require identity verification for security

Data Breach Response

In accordance with Decree 13/2023:

• 72-hour notification to the Ministry of Public Security's Cybersecurity Department
• Email notification to affected users promptly
• Incident report published on our website if significant

International Data Transfers

Your data may be stored in:

• Singapore (Supabase data center region)
• United States (Vercel CDN edge nodes, Google Analytics)

We ensure adequate protection through:

• Service provider compliance with international standards
• Data processing agreements with all third parties

Children's Privacy

• Our services are not intended for users under 13 years old
• We do not knowingly collect data from children
• If you believe a child has provided data, contact us immediately for removal

Changes to This Policy

• We will notify you of material changes via email (if you have an account)
• 30-day notice before significant changes take effect
• Continued use after changes implies acceptance
• You may delete your account if you disagree with changes

Contact Information

For privacy-related questions, data requests, or concerns:

Email: danhtran.dev@outlook.com GitHub: github.com/dantech0xff

By using Dan Tech Academy, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.