ViVuLesson Privacy Policy
ViVuLesson is committed to safeguarding your personal and learning data. This Privacy Policy outlines what information we collect, how it is used, how long it is retained, with whom it may be shared, and your statutory data subject rights.
1. Legal Basis & Data Controller Information
1.1. This Privacy Policy is established in strict compliance with Vietnam’s Personal Data Protection Law (2025), Decree No. 13/2023/ND-CP, Decree No. 356/2025/ND-CP, and relevant statutory regulations.
Personal Data Controller & Processor: Lê Phước Việt - Owner & Operator of ViVuLesson
Personal Tax ID: 064203006746
Permanent Contact Address: Ngũ Hành Sơn, Đà Nẵng, Việt Nam
Support Phone: 0764 390 124
Data Protection Officer (DPO): Lê Phước Việt, email: [email protected]
2. Mechanism & Your Consent to Data Processing
2.1. Active Explicit Consent: ViVuLesson solely collects and processes personal data after you actively confirm your consent by checking the explicit acknowledgment checkbox for our Terms of Use and Privacy Policy prior to sign in or account registration. We never assume or default consent based merely on site access.
2.2. Independent Marketing Consent: You retain full discretion to opt-in or opt-out of marketing emails, feature announcements, and study newsletters. Declining marketing communication in no way impedes your access to learning tools and core platform services.
2.3. Audit Trail of Consent: To ensure full transparency and regulatory compliance under Ministry of Industry and Trade standards, ViVuLesson securely logs the exact timestamp and policy version agreed to by the user.
2.4. Right to Withdraw Consent: You may withdraw your consent at any time as detailed in Section 9. Withdrawal does not affect the lawfulness of prior processing. However, if essential processing consent is revoked, ViVuLesson may be unable to maintain your account.
3. Data Collected by ViVuLesson
ViVuLesson solely collects the minimum categories of data strictly necessary to provide the service:
| Category | Contents | Source |
|---|---|---|
| Account Information | Email, display name, profile avatar | Your Google Account upon sign in |
| Learning Data | Lecture materials submitted for processing; generated study assets (outlines, summaries, transcripts, subtitles, translations, review questions); lecture metadata such as filename and duration | Provided directly by you |
| External Links | URLs or video IDs on Google Drive or YouTube that you voluntarily connect | Provided directly by you |
| Transaction Records | Purchased subscription plans, payment history, used duration quotas | Generated during service usage |
| Technical Metrics | IP address, browser and device type, access logs | Recorded automatically |
| Local Device Data | Recent lecture bookmarks and visual preferences stored in your browser storage | Your local browser |
Commitments on Passwords & Payments:
• ViVuLesson never collects your Google account password. ViVuLesson neither requests nor stores bank card numbers. All billing transactions are conducted directly through verified banking institutions or licensed payment gateways.
• Notice regarding lecture media: lectures may contain the voices, images, or likeness of third parties. You are responsible for ensuring that you have obtained lawful rights and required consent prior to submitting content. Do not upload materials containing sensitive third-party personal data.
4. Purposes of Data Processing
ViVuLesson processes data for the following specific purposes:
- Generating, displaying, and synchronizing study materials at your direction.
- Managing user accounts, subscription tiers, and duration quotas.
- Verifying payments, issuing invoices, and handling billing dispute inquiries.
- Delivering customer support and technical troubleshooting upon your request.
- Ensuring cybersecurity, mitigating fraud, preventing platform abuse and unauthorized account sharing.
- Improving overall service reliability using aggregate metrics.
- Complying with statutory reporting obligations under Vietnamese law.
5. Data Retention Periods
| Data Category | Retention Duration |
|---|---|
| Your Original Media | ViVuLesson never permanently stores original video files. Media is streamed solely to extract audio and immediately purged from temporary buffers. |
| Temporary Processing Buffers | Automatically purged from temporary processing servers immediately after completion (within 1 - 24 hours). No backup copies are maintained. |
| Generated Study Assets | Retained throughout your active account lifetime. You have full control to permanently delete any lecture asset at any time. |
| Account Information | Retained throughout your active account lifetime. Upon written account termination request sent to [email protected], data is deactivated and processed within 30 days. |
| Transaction Records | Retained for a minimum of 5 years pursuant to statutory Vietnamese accounting and tax administration laws. |
| Technical Security Logs | Up to 12 months for cybersecurity, troubleshooting, and anomaly detection. |
| System Backups | Rotated and overwritten automatically within a maximum 30-day lifecycle. |
6. Data Sharing & Third-Party Processors
6.1. ViVuLesson strictly does not sell, rent, or monetize personal data in any form. To maintain stable operations and deliver reliable services, we only share minimal necessary data with qualified enterprise technology providers under strict security and confidentiality safeguards:
• Cloud Infrastructure & Database Hosting Providers:
- Processed Scope: Hosting encrypted account credentials and study materials within enterprise-grade cloud environments featuring automated backups and rigorous access controls.
- Safety Guarantee: Strictly enforces industry-standard encryption at rest and in transit (HTTPS/TLS).
• Speech-to-Text & Artificial Intelligence (AI) Technology Providers:
- Processed Scope: Processing transient lecture audio streams and text transcripts to generate hierarchical outlines, concise summaries, translations, and interactive review quizzes.
- Safety Guarantee: Transmitted over secure enterprise channels under strict Zero Data Retention policies; customer academic content is never used to train or fine-tune foundation AI models.
• Payment Intermediaries & Banking Networks:
- Processed Scope: Receiving order parameters (order ID, billable amount, transfer memo) to generate dynamic QR codes and automate transaction reconciliation.
- Safety Guarantee: Neither ViVuLesson nor payment partners collect, access, or store payment card credentials, PINs, or online banking passwords.
• Transactional Notification & Delivery Services:
- Processed Scope: Receiving user email addresses and names to deliver account activation links, verification codes, payment receipts, and customer support responses.
- Safety Guarantee: Contact details are utilized solely for service-related communications and user benefits, never for unsolicited promotional messaging.
6.2. Data Security & Sovereignty Safeguards:
All data transmissions between ViVuLesson and technical processing systems are secured by modern encryption protocols (TLS 1.3 / HTTPS), in full adherence to Decree No. 13/2023/ND-CP on Personal Data Protection.
ViVuLesson reiterates: We never retain your original video files, and your academic study materials remain exclusively your intellectual property, never exploited for targeted advertising or unauthorized commercial purposes.
6.3. Legal Disclosures: ViVuLesson only discloses personal data when strictly mandated by Vietnamese law upon receiving official formal written orders from competent state authorities or judicial bodies.
6.4. Business Restructuring: In the event of platform restructuring, merger, or operational transfer, the successor entity remains bound by all commitments herein and advance notification will be provided to users.
7. Cross-Border Data Transfers
Certain cloud infrastructure partners engaged by ViVuLesson maintain servers outside of Vietnam. In such events, data strictly required to deliver the service may be routed cross-border. ViVuLesson executes transfers in full compliance with Vietnamese personal data protection laws, partnering exclusively with providers upholding rigorous privacy standards.
8. Google Account Data & API Compliance
8.1. When signing in with Google, ViVuLesson receives solely your primary email, public display name, and avatar image.
8.2. When you connect videos from Google Drive, ViVuLesson accesses only the specific files you individually select for playback and study generation. ViVuLesson never accesses any other files within your Google Drive.
8.3. ViVuLesson's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements. Such data is never sold, never used for surveillance or ads, and never employed to train generalized AI models.
8.4. You may revoke ViVuLesson's access at any time via your Google Account permissions dashboard: https://myaccount.google.com/permissions.
9. Your Statutory Rights
Under Vietnamese personal data protection laws, you possess the following statutory rights:
How to exercise your rights:
You can directly delete individual lectures and remove generated outlines in your workspace. For other data inquiries, please send an email to [email protected] titled "Personal Data Subject Request" from your registered account email. ViVuLesson resolves requests within statutory deadlines.
10. Data Security Measures
10.1. ViVuLesson implements reasonable technical and organizational measures: encrypted transmissions, principle-of-least-privilege internal access controls, and periodic secure backups.
10.2. No internet transmission is completely immune from risk. You are responsible for safeguarding your personal device and Google account credentials. Please notify ViVuLesson promptly if you suspect any unauthorized access.
10.3. In the event of a personal data breach, ViVuLesson shall notify relevant supervisory authorities and affected data subjects pursuant to legal timelines.
11. Children & Minors
Individuals under 16 years of age may only use ViVuLesson with the verified consent of a parent or lawful guardian. If we learn that personal data of a minor was collected without requisite consent, ViVuLesson will promptly delete such records.
12. Policy Revisions
ViVuLesson may update this Privacy Policy from time to time. For material modifications, ViVuLesson will provide at least 7 days advance notice via email or website announcements, soliciting renewed consent where required by law.
13. Contact Details
For any questions or privacy inquiries, please contact our team at: [email protected].