Privacy Policy

1. Who we are

SOPAI is an AI enablement practice based in Ho Chi Minh City, Vietnam, and the operator of the website sopai.tech. For anything related to this policy or your personal data, write to contact@sopai.tech.

SOPAI is currently operated directly by its founders while the registration of its Vietnamese company is being completed. This policy will be updated with the registered legal name and address as soon as incorporation is finalised.

2. What we collect

We collect personal data in only two situations:

• Contact form and email — when you write to us, we receive your email address, your message, the enquiry type you select and, only if you choose to provide them, your company name and an attachment.
• Technical data — like every website, our hosting provider (Cloudflare) processes your IP address and basic request metadata to deliver the site, keep it secure and run the anti-spam check (Cloudflare Turnstile) on the contact form.
• Analytics data — only if you accept analytics cookies, Google Analytics records how you use the site: pages viewed, approximate location from your IP address, device and browser type, and interactions on the page. If you decline, none of this is collected.

That is all. There are no user accounts, no newsletter and no hidden collection.

3. Why we use it

We use this data for two purposes only:

• to respond to your enquiry and follow up on our exchange;
• to protect the website against spam and abuse;
• to understand how visitors use the site so we can improve it, when you accept analytics.

We rely on your consent (given when you submit the contact form, and when you accept analytics cookies) and on our legitimate interest in keeping the site secure. We never use your data for advertising, and we never sell or rent it to anyone.

4. Who processes it

Your data is handled by a small set of service providers acting on our behalf:

• Cloudflare — website hosting, anti-spam verification and email routing;
• Resend, on Amazon Web Services infrastructure — delivery of contact-form messages (servers located in Tokyo, Japan);
• Google — the mailbox where your message is received;
• Google Analytics (Google LLC) — measures how the site is used, only after you accept; this data is processed in the United States under the EU-US Data Privacy Framework.

These providers may process your data outside Vietnam. They are bound by their own contractual and security commitments, and we share only what is needed to deliver your message or, for analytics, to measure usage.

5. How long we keep it

We handle your enquiry, then keep the exchange for up to 12 months after our last contact so we can follow up if you come back to us. If we enter a working relationship, the correspondence is kept for the duration of that relationship and as required by law. Anti-spam verification data is processed transiently and is not kept by us. Analytics data collected by Google Analytics is retained for 2 months and then deleted.

6. Your rights

Wherever you are — and whether Vietnam’s Law on Personal Data Protection (Law 91/2025/QH15, in force since 1 January 2026, and its Decree 356/2025) or the EU GDPR applies to you — you can ask us to:

• give you a copy of the data we hold about you;
• correct inaccurate data;
• delete your data;
• restrict or object to its processing;
• withdraw your consent at any time.

Write to contact@sopai.tech. We aim to acknowledge every request within 72 hours and to resolve it as quickly as the law requires. You can also lodge a complaint with the data protection authority where you live.

7. Cookies and analytics

sopai.tech sets no cookies until you choose to accept analytics. We use Google Analytics 4 to understand how the site is used and to improve it. It loads only after you accept the consent banner: if you decline, or until you decide, no analytics cookies are set and nothing is sent to Google.

When you accept, Google Analytics sets cookies (for example “_ga” and “_ga_…”, which last up to two years) to recognise returning visits. We keep IP addresses out of our reports, switch off Google Signals and cross-device advertising features, and retain analytics data for 2 months. We never use this data for advertising and never sell it.

You can change your choice at any time through “Cookie settings” in the footer, or by installing Google’s opt-out browser add-on. Fonts and other assets are served from our own hosting, not from third-party CDNs that could profile you. For more on how Google processes this data, see Google’s privacy policy.

8. Links to other services

The site links to third-party platforms (Zalo, WhatsApp, Facebook, LinkedIn). If you contact us or follow us there, those platforms process your data under their own privacy policies, which we do not control.

9. Children

Our website and offerings are aimed at professionals and are not directed at children under 18. We do not knowingly collect their data.

10. Changes to this policy

We may update this policy as the website or the law evolves. The “last updated” date at the top always reflects the current version, and meaningful changes will be visible on this page. Questions about privacy: contact@sopai.tech.