This page explains what personal data Brothink collects, what it is used for and what rights you have over it. The policy applies to brothink.com, the free tools and the contact forms. Paid services also have a separate data processing agreement in the contract.
Brothink processes personal data under Vietnam's Personal Data Protection Law No. 91/2025/QH15 and its implementing regulations.
1. Data Brothink collects
- Information you enter in forms: name, phone number, email, shop or company name, industry, request details, and the time and version of the consent text.
- Content you enter into a tool once the tool is open, for example your shop name, products or questions.
- Technical logs: time of visit, pages viewed, browser type and referring source. IP addresses are only stored as a one-way hash, to fight spam and abuse.
Brothink does not ask for sensitive personal data. Please do not enter ID numbers, health information or bank account details into forms or tools.
2. Purposes
- Contacting you about the request you sent.
- Letting you know when a tool on the waitlist opens.
- Running tools and returning results to you.
- Preventing spam and abuse and keeping the system secure.
- Counting visits in aggregate to improve the site.
Brothink only sends information about other services when you have separately agreed to it.
3. Legal basis
The basis for processing is your consent for each purpose. You give consent by ticking the consent box on the form. Brothink records the time and version of the consent text. Brothink may also have to process data where the law requires it.
4. Processors
Brothink uses the following providers to run its services. They only process data on Brothink's instructions and for the assigned task.
| Provider | Assigned task |
|---|---|
| Cloudflare | Website hosting, storing form data, conversations and accounts, spam protection. |
| Anthropic (Claude API), OpenAI (ChatGPT API), Google (Gemini API) | Processing the content you enter into AI tools to produce results. Each tool states the model it uses; the AI advisor on the homepage currently uses Claude. |
| Resend | Sending email: your sign-in codes, and internal notices to the Brothink team about new requests. |
| Telegram, Lark | Internal notifications to the Brothink team about new requests or conversations (including your name, contact details and first question). |
Brothink does not sell your personal data.
5. Transfers outside Vietnam
The servers of the providers above may be located outside Vietnam, for example in the United States or Singapore. Your data may therefore be transferred abroad for the purposes in section 2. Brothink carries out the procedures for transferring personal data abroad as required by Vietnamese law.
6. Retention
- Contact details from forms and the chat: 24 months from when you submit them, unless you ask for earlier deletion.
- Conversations with the AI advisor: 12 months after the last message, then anonymised.
- Sign-in codes and sessions: up to 30 days.
- Content entered into tools: the retention period is stated on the tool page when the tool opens.
- Technical logs: kept briefly, only as long as needed for operations and abuse prevention.
When the period ends, the data is deleted or converted into a form that no longer identifies you.
7. Your rights
You have the right to:
- Know what data about you is being processed and for what.
- View and receive a copy of your data.
- Ask for incorrect data to be corrected.
- Ask for your data to be deleted.
- Withdraw your consent at any time. Withdrawal does not affect processing done before it.
- Object to or ask to restrict processing, and file a complaint as provided by law.
Send requests to support@brothink.com, stating the phone number or email you used. Brothink may ask for more information to confirm it is you, and will reply within the time limit set by law.
8. Cookies and analytics
- Brothink does not use advertising cookies and does not track you across other sites.
- Visits are measured with a cookieless tool that only produces aggregate numbers.
- The anti-spam tool may use the technical data needed to tell people from bots.
9. Security
Data is sent over an encrypted connection (HTTPS). Only people at Brothink whose job requires it can see contact data. If a data breach occurs, Brothink notifies the competent authority and the people affected as required by law.
10. Children
Brothink's services are for businesses and adults. Brothink does not knowingly collect data from children.
11. Changes to this policy
When the policy changes, the date at the top of the page changes accordingly. For significant changes to processing purposes, Brothink asks for your consent again.
12. Contact
Any questions about personal data: support@brothink.com · (+84) 39 405 1006.
