Privacy Policy

Last updated: 13 October 2026

This Privacy Policy explains how Dilaca Project Investment and Development Company Limited ("Dilaca", "we", "us") collects, uses and protects personal data when you use the website dilaca.com and the Dilaca Studio AI platform at ai.dilaca.com (together, the "Service").

1. WHO WE ARE

Dilaca Project Investment and Development Company Limited is a company registered in Vietnam (enterprise code 0402159262). Contact: [email protected].

2. DATA WE COLLECT

Account data: name, username, email address, phone number and password hash when you create a Brand Workspace.

Business data you provide: brand information, products, campaign goals, knowledge documents, customer messages and comments that you connect from social channels (Facebook, Instagram, Zalo, TikTok) so that the Service can plan, draft and support your marketing work.

Usage data: pages visited, features used, approximate location derived from IP address, browser language, device and log data, used for security, analytics and product improvement.

Payment data: when you buy a plan or AI credits, payments are processed by licensed payment providers (for example bank transfer via VietQR / SePay). We store the transaction reference and amount; we do not store full card or bank credentials.

3. HOW WE USE DATA

To provide the Service: operate your AI Marketing Department, generate drafts, schedule publishing and support customer-care conversations that you review and approve.

To process data with AI models: content you submit may be sent to third-party AI model providers (including Anthropic, OpenAI and similar providers) through the Dilaca Model Gateway strictly to generate the outputs you request. We do not permit these providers to use your data to train their models where the provider offers that control.

To secure and improve the Service: fraud prevention, abuse detection, debugging and product analytics.

To communicate with you: service notices, billing and support. Marketing emails are sent only with your consent and can be unsubscribed at any time.

4. HUMAN CONTROL AND AUTOMATED DECISIONS

Dilaca Studio AI prepares work; it does not publish posts, send customer replies or run advertisements without an explicit approval action by the workspace owner or an authorised member. AI-generated outputs are drafts and may contain errors; you remain responsible for what you approve.

5. SHARING

We share data only with: (a) sub-processors needed to run the Service (hosting in Vietnam, AI model providers, payment providers, email delivery, analytics); (b) social platforms you connect, in order to act on your behalf under the permissions you grant; (c) authorities when required by law. We do not sell personal data.

Cross-brand learning: aggregated and anonymised patterns (for example what content styles perform well) may be used to improve the Service for all customers. Identifiable brand or customer data is never shared between workspaces.

6. INTERNATIONAL TRANSFERS

Our servers are located in Vietnam. AI model providers and some sub-processors operate outside Vietnam (for example in the United States). Transfers are made under contractual protections consistent with Vietnamese Decree 13/2023/ND-CP on personal data protection.

7. RETENTION

Account and business data are kept while your workspace is active and for up to 12 months after closure unless a longer period is required by law (for example accounting records). You can request deletion earlier; see section 8.

8. YOUR RIGHTS

You may access, correct, export or delete your personal data, withdraw consent, and object to processing, by emailing [email protected] from your account email. We respond within 72 hours for most requests and within the periods required by law.

9. SECURITY

We use TLS encryption in transit, hashed passwords, role-based access, audit logs and append-only credit ledgers. No system is perfectly secure; please use a strong password and keep your social-platform tokens private.

10. COOKIES

We use strictly necessary cookies (session, language preference, consent) and, only with your consent, analytics and marketing cookies (Google Analytics, Meta Pixel, TikTok Pixel). You can change your choice from the cookie banner at any time.

11. CHILDREN

The Service is intended for businesses and users aged 18 or older.

12. CHANGES

We will post updates on this page and notify active customers of material changes before they take effect.

13. CONTACT

Dilaca Project Investment and Development Company Limited Enterprise code: 0402159262 · Vietnam Email: [email protected] · Phone: +84 898 655 255