Privacy Policy

Introduction

VarenoAI is an AI product ecosystem for Vietnamese businesses — including solutions for sales, customer support, content production, and automation (such as ChatVareno and ContentAI). We understand that you care about your personal privacy, and we take that responsibility seriously. This Privacy Policy describes VarenoAI’s practices regarding the collection and use of your personal data, and sets out your privacy rights. We treat information security as an ongoing responsibility and will update this policy periodically as we adopt new data-protection measures.

Contact us about data protection

VarenoAI is headquartered in Vietnam and operated by VARENO CO., LTD. For any questions or concerns related to personal data policy, or if you wish to exercise your privacy rights, please contact our Security Team directly:

• Entity: VARENO CO., LTD. (VarenoAI)
• Headquarters: 566/94/2 Nguyen Thai Son, An Nhon Ward, Ho Chi Minh City
• BMT office: P17, Ton Duc Thang Street, EcoCity Premia, Tan An Ward, Dak Lak Province.
• Email: contact@vareno.vn

How we collect and use personal information

VarenoAI collects information about website visitors and customers. Typically, this information is limited to the following:

• User name
• Job title
• Company name
• Work address
• Work email
• Contact phone number

We use this information to provide services to prospective and existing customers. We do not sell personal information to anyone and only share it with third parties that facilitate the delivery of our services.

Using the VarenoAI website

Like most websites, the VarenoAI site automatically collects certain information and stores it in log files. This includes IP address, general device region or location, browser type, operating system, and pages you have viewed. We use this information to better design the website for user needs, diagnose server issues, and analyze demographic trends to improve our services.

Cookies and tracking technologies

VarenoAI provides a separate Cookie Notice that details the types of cookies and tracking technologies in use, and explains how users can accept or decline them.

Sharing information with third parties

Personal information collected by VarenoAI is stored in one or more databases hosted by third parties (such as cloud hosting providers). These third parties do not have the right to use or access your personal information for any purpose other than storing and retrieving data.

We do not disclose your personal data to individuals or businesses outside VarenoAI unless:

• You request or authorize it.
• The information is provided to comply with the law (for example, requests from Vietnamese authorities under Decree 13/2023/ND-CP).
• To protect the rights, property, or safety of our staff and systems.
• It is provided to agents or service providers performing functions on our behalf (for example, payment gateways, AI infrastructure).

Data subject rights

Under data protection regulations (including GDPR and Vietnamese law), you have the following rights:

• Right to be informed: Know how your data is processed.
• Right of access: Review the data we hold about you.
• Right to rectification: Request correction of inaccurate information.
• Right to erasure (right to be forgotten): Request deletion of personal data under certain conditions.
• Right to object: Refuse use of data for direct marketing purposes.

All requests to access your personal information are free of charge. If a request cannot be fulfilled within a reasonable timeframe, we will provide you with a specific expected response date.

Use of APIs (Google, Zalo, Facebook)

Products in the VarenoAI ecosystem may use third-party APIs to provide multi-channel integration features. We clearly affirm that data obtained through these APIs is not used to develop, improve, or train general AI/ML models. This data is used only to deliver specific service features for that customer’s own workspace and product environment.

Data protection mechanisms

We implement strong safeguards to ensure information security:

• Encryption: All customer data is encrypted with industry standards (AES-256) both at rest and in transit (SSL/TLS).
• Access control: Role-based access control (RBAC) ensures only authorized personnel can access necessary data.
• Rate limiting: Protective layers against abuse or denial-of-service (DDoS) attacks.
• Domain allowlist: Lets you specify exactly which domains an AI Agent or widget may be embedded on (when the product supports it).
• No AI training commitment: We do not use your data to train general AI models. Where applicable, we use a RAG mechanism to generate responses without compromising the privacy of source data.

Data storage and retention

Your personal data is stored on VarenoAI’s secure servers. We retain data for the duration of the business relationship with the customer and for a period thereafter to support historical records or internal analysis. All data can be deleted immediately upon a verified request from you.

Children

We do not knowingly collect or solicit personal information from children under 13 years of age.