THECODEORIGIN logo

Privacy Policy

Effective April 12, 2026

This Privacy Policy describes how THECODEORIGIN CO.,LTD ("THECODEORIGIN", "we", "our", or "us") collects, uses, and protects your information across all websites, applications, and services we provide. By using any of our services, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

  • Account information you provide directly, such as your name, email address, password, and profile details. Passwords are securely hashed and never stored in plain text.
  • Sign-in provider data when you authenticate via Google or GitHub (OAuth). We receive basic profile information (name, email, avatar, and provider user ID) subject to the permissions you grant. We do not receive or store your password with the provider.
  • Phone number for account verification and customer support purposes.
  • Usage data such as pages visited, actions taken, device and browser information, and approximate location derived from IP address.
  • Cookies used to keep you signed in, remember your preferences, and measure usage (see Section 5).

2. How We Use Your Information

  • To create and manage your account.
  • To verify your identity via phone number and prevent fraudulent activity.
  • To provide customer support, including contacting you about your account or service issues.
  • To operate, maintain, and improve our services.
  • To analyze usage patterns and improve user experience.
  • To comply with legal obligations and enforce our Terms and Conditions.

3. Legal Basis for Processing

We process your personal data on the following legal bases, in accordance with the laws of the Socialist Republic of Vietnam, including the Personal Data Protection Decree (PDPD):

  • Consent — when you create an account, provide your phone number, or accept cookies.
  • Contract performance — when processing is necessary to provide the services you have engaged us for.
  • Legal obligation — when we are required to process data to comply with applicable laws.

4. Third-Party Sign-In (Google, GitHub, and others)

Our services allow you to sign in using third-party OAuth providers such as Google and GitHub. When you do so, the provider shares limited profile information with us based on the permissions you approve. We do not receive or store your password with the provider. Your interaction with these providers is also governed by their own privacy policies.

5. Cookies and Analytics

We use cookies to keep you signed in, remember your preferences, and measure usage. You can control cookies through your browser settings, but disabling them may affect functionality such as staying signed in.

We use the following analytics services:

  • Google Analytics — to understand how users interact with our websites and products. Google Analytics may collect data such as your IP address, browser type, and pages visited. For more information, see Google's Privacy Policy.
  • Vercel Analytics — to measure page performance and visitor metrics. For more information, see Vercel's Privacy Policy.

6. Phone Number Use

Phone numbers you provide are used strictly for account verification and customer support. We do not sell your phone number or use it for unsolicited marketing.

7. Sharing of Information

We do not sell, publish, or share your personal information with any third parties, except in the following limited circumstances:

  • Analytics providers (Google Analytics, Vercel Analytics) receive anonymized usage data to help us understand and improve our services.
  • Authorities when required by law or to protect our rights, users, or the public.

8. Data Storage and Cross-Border Transfers

Your data is stored securely in our product databases hosted in Vietnam and Singapore. By using our services, you acknowledge and consent to the transfer and storage of your data in these locations. All hosting providers we use are selected for their compliance with industry-standard security practices.

9. Data Retention

We store your account data and associated personal information in our database for the duration of your account's existence. Data is retained permanently unless you request deletion. Upon receiving a valid deletion request, we will remove your personal data within a reasonable timeframe, subject to any legal obligations that require us to retain certain records.

10. Data Security

We apply reasonable technical and organizational measures to protect your information, including:

  • Secure password hashing.
  • Encrypted data transmission (HTTPS/TLS).
  • Access controls limiting who can view your data internally.

However, no system is completely secure, and we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users via email and/or through a notice on our website within a reasonable timeframe, in accordance with applicable Vietnamese law. We will provide details about what information was affected and the steps we are taking to address the breach.

12. Children's Privacy

THECODEORIGIN does not have a general age restriction for its services. However, certain products may impose their own age or eligibility requirements. We do not knowingly collect personal data from children under the age of 16 without parental or guardian consent, in compliance with Vietnamese law. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.

13. Your Rights

Under Vietnamese law and depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data and account.
  • Data portability — request export of your data in a commonly used format.
  • Withdrawal of consent — withdraw your consent to data processing at any time, which may affect your ability to use certain services.

To exercise any of these rights, please contact us using the details below.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or via email. The effective date above shows when this policy was last updated.

15. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us: