✦ Legal

Privacy Policy

Updated: {{policyUpdatedDisplayEn}} · Applies to every transaction at https://sonvudev.com

We respect your data. This page sets out exactly what is collected when you buy from us, what each piece of it is used for, and how it is protected.

1. What we collect

Information you give us at checkout: your name, your email address and the name of the product you bought. We use that email to confirm the order, to send you a lookup code when you ask for one, and to support you after the sale.

Transaction data: the order id, the amount, the payment method, the payment status and the time it happened. For PayPal we receive the transaction id and the status from PayPal; we never store your card number or your bank account details.

Transactional email: we send notices about your order automatically to the address you gave us: the order confirmation with the payment window, a reminder before the window closes, a notice that an order has been cancelled, and a notice that payment went through. These messages are transactional rather than marketing, and they cannot be switched off while you still want to hear about your order.

Technical data: your IP address and your browser type are written into the server log to the extent needed to run and protect the service.

2. What we do not collect

We do not ask for and do not store credit card numbers, PINs, bank passwords, or screenshots. Payment is processed entirely on the systems of PayPal, banks, MoMo or ZaloPay, so that sensitive information never passes through SonVuDev's servers.

3. How it is used

The data is used for these purposes only: delivering the software you bought, verifying and reconciling payments, technical support, improving the content and quality of this site, and meeting the legal obligations of a service provider. We do not sell your data and we do not pass it to third parties for advertising.

4. The order lookup code

After payment the system generates a random lookup code and stores only the hash of it, never the original. A download link is issued only when you supply the correct code. That is the first layer of protection, next to the email check.

Live download links are not kept in the database; each link is created when you ask for one and expires shortly afterwards.

5. Sharing with third parties

We share only the minimum data needed with the partners below, each of them for its own part of the job. This list may change; the current version always lives on this page.

• Cloudflare — hosts the release files and hands out the download links. Your files sit in a private bucket, not a public one.
• Supabase — the database that stores orders and the product catalogue.
• PayPal, banks, MoMo, ZaloPay — takes the payment on their own schedules.
• Resend — sends the transactional email about your order. It only receives the email address, the name and the content of the message; we never hand it a customer list.
• Render — the platform the server runs on.
• Google Analytics, Cloudflare Web Analytics - traffic measurement (page views and the search terms used on this site) to improve the content. The IP address is anonymized when it is sent to Google Analytics; measurement data only improves this site, is not used for advertising and is not sold to third parties.

We may also have to disclose information when a competent authority makes a lawful request.

6. How long we keep data

Transaction data is kept for accounting and for handling complaints for as long as Vietnamese law requires, at least 12 months. Technical data in the server log is kept only briefly and is deleted automatically on a rolling cycle.

7. Technical security

Every connection goes over HTTPS. The admin area requires a passcode, order ids are stored hashed, and every secret lives in an environment variable rather than in the source code. Access to the data is limited to the people who need it for their work.

8. Your rights

You have the right to view, edit or request deletion of your personal information. For transaction data, we may anonymise identifying information while retaining accounting obligations, or delete it entirely if the law permits. Send requests to hello@sonvudev.com and we will respond within 5 business days.

9. Software security

The software you buy does not collect, send or upload anything to any server of ours. It runs entirely locally on your computer and needs no internet connection once it is installed. If you ever find that it does send data out, please tell us, because that would break the promise made here.

10. Changes to this policy

We may update this policy. An update takes effect as soon as it is published here; completed transactions stay governed by the policy in force when they happened.