Privacy Policy
Last updated 1 October 2026
This policy explains how Identity Quantum Computing Technology Joint Stock Company ("we") collects, uses, shares and protects your personal data when you use the site and services, under Vietnamese personal data protection law. We are the controller and processor of your personal data. The Vietnamese version governs; this is a translation.
1. What we collect
Account: name, email and profile picture from the Google account you sign in with, and when you agreed to the terms, and to which version, when you started using the account;
Phone number, when you verify one to use free GPU time: we keep only a one-way hash of the number and its last 4 digits for display, never the full number;
Payments: plan, amounts, payment status and history, the version of the terms you agreed to when subscribing, invoice details you give us (company name, tax code, address), and a saved card's last 4 digits once card saving is available. We never receive or store full card numbers: cards are entered and stored at MoMo;
GitHub, when you connect GitHub for a group project: your GitHub account name and the GitHub App installations you can reach;
Your content: chat messages, attachments, code, projects, run results and run logs;
Usage: credits used, models and GPU machines used, and when;
Technical: IP address, browser type, and the cookies needed for sign-in.
2. Why we use it
to provide what you ask for: chat answers, running code, saving projects, GPU machines;
to account for credits, take payments, issue invoices and send transaction emails;
to apply your plan's limits, prevent fraud and abuse (including making several accounts to collect free allowances), and keep our systems secure;
to support you and handle complaints;
to improve the service from aggregate statistics. We don't use your content to train AI models, and we don't sell personal data.
3. Who we share it with
Only providers we need to run the service, under contracts that require them to protect it:
Supabase (database, sign-in, file storage), on servers in Singapore;
Google: authentication when you sign in with your Google account;
SSD Nodes (Strasmore, Inc., United States): our server in Singapore, which runs the website and Code Studio’s code; your runs’ code, files and results are processed on it;
Anthropic and Moonshot AI: what you send to the AI chat and research assistant goes to the model you choose, to produce the answer;
Voyage AI: the search queries the AI assistant writes from your question, to find relevant material on the site;
GPU providers on the vast.ai marketplace: a GPU session's code and data run on their machines for the length of the session; connections to the machine go through Cloudflare's encrypted tunnel;
GitHub: when a group's lead links a group project to a GitHub repository, the project's code is synced with it;
MoMo (payments), an e-invoice provider (once in place), an SMS provider (phone verification codes), Resend (email);
competent authorities, when the law requires it.
4. Transfers outside Vietnam
Our website and database servers are in Singapore. Some of the other providers above have servers outside Vietnam (such as the United States, the EU, and wherever a GPU machine is). By using the service you agree that the data needed may be transferred abroad for the purposes above. We complete the formalities the law requires for transferring personal data abroad.
5. How long we keep it
Chat history: for your plan's period (see Pricing), counted from a conversation's last activity, plus 30 days' grace after a downgrade;
Projects and files: until you delete them or your account;
Payment records and invoices: 10 years, as accounting law requires;
A verified phone number: its hash and last 4 digits are kept even after you delete your account, so each number unlocks free allowances only once;
When you delete your account, other data is deleted within 30 days unless the law requires us to keep it longer.
6. Your rights, and how to use them
You have the right to be informed; to consent or withdraw consent; to access, correct and delete your data; to restrict processing; to receive a copy; to object; and to complain and claim compensation as the law provides. Withdrawing consent may mean we can't keep providing some services.
Viewing and correcting: change your name in Account and your invoice details in Billing, and see your payment history and credits used there. Your chats, projects and files are in Studio. To see or correct other data, or to get a copy, email the address below;
Deleting, destroying or restricting: delete chats, projects and files in Studio at any time. To delete your account, choose "Request account deletion" in Account or email us; to restrict processing or withdraw consent, email us. Data is deleted as set out in section 5;
Complaints about your data: email the address below, or use the channels in the Complaints Policy.
We confirm we have your request within 72 hours and act on it within the time personal data protection law sets.
7. Security
Data is encrypted in transit (HTTPS), access is limited per account, and only staff who need it can reach it. Every GPU session has its own secret key, and provider keys never reach your browser. If personal data is ever exposed, we notify you and the authorities as the law requires.
8. Cookies
We use only the cookies needed to keep you signed in and remember your language and theme. We use no visit analytics, no advertising cookies, and nothing that tracks you across other sites.
9. Contact
Personal data protection contact: Identity Quantum Computing Technology Joint Stock Company, Room 14-15A, 7th floor, Charmvit Tower, 117 Tran Duy Hung, Yen Hoa Ward, Hanoi, Vietnam. Email: contact@identityoperator.com. Phone: 09864113791.