Privacy Policy

1. Scope

This policy applies to every individual or organization using dalathubai.com and the DALATHUB AI mobile app (the "Service"). By creating an account and using the Service, you agree to the terms below.

2. Information we collect

• Account info: email, hashed password, display name, avatar.
• User-provided content: images, videos, audio, and prompts you upload for AI processing.
• Payment data: VietQR/PayPal transaction references — we never store full card numbers; card payments are handled entirely by PayPal.
• Technical data: IP address, device type, OS, browser language, access logs.
• Cookies: login session, preferred language, Cloudflare-detected country code.

3. How we use it

• Authenticate and manage your account.
• Process the content you upload through AI models and return the result.
• Manage your Credit balance, transactions and payments.
• Detect fraud, abuse, and violations of law.
• Improve service quality and optimize performance.
• Send service notifications (job completed, errors, top-up success).

4. Sharing with third parties

We do not sell personal data. To operate the Service, certain data is forwarded to:

• AI providers (Google, OpenAI, 302.AI, AIVoices…) — receive prompts and media for processing.
• Cloudflare — CDN, DDoS protection, geo-detection.
• Cloudflare R2 — storage for output files.
• SePay / VietQR / PayPal — payment processing.

These vendors may only use the data to deliver the Service and may not redistribute it.

5. Retention

• AI output files: stored for 30 days from creation, then auto-deleted.
• Transaction and Credit history: retained long-term per Vietnamese accounting law (minimum 5 years).
• Original files you upload: temporary storage for processing only, not retained long-term.
• Deleted accounts: personal data is purged within 30 days.

6. Security

We apply technical and organizational safeguards including: HTTPS for every connection, bcrypt password hashing, rate-limiting against brute-force, CSRF tokens, and server access control. No system is perfectly safe — please keep your password private.

7. Your rights

You have the right to:

• Access and review the personal data stored in your account (see the Account page).
• Edit your personal information.
• Delete your account — personal data is removed within 30 days.
• Request a data export or file a complaint by emailing [email protected].

8. Children

The Service is not intended for anyone under 13. If you are under 18, you need a guardian's consent to use it.

9. Changes

We may update this policy. New versions take effect upon publication. Continuing to use the Service after a change means you accept the new policy.