1. Scope and who controls your data
This Privacy Policy explains how Vietpik (“Vietpik”, “we”, “us” or “our”) collects, uses, stores and shares personal data when you visit vietpik.com, create an account, save content, build a trip, publish or submit content, contact support, or use business-owner tools. Vietpik is the controller of personal data processed for operating the platform.
This policy applies to the public website, account features and AdminCP interactions that are made available to you. A third-party website, map, booking service or social platform linked from Vietpik applies its own privacy policy.
2. Data we collect
We collect only data reasonably connected to the service you use. Some information is provided by you; some is generated when the service operates; and some may come from an identity provider you choose.
- Account and authentication data: name, email address, password hash, sign-in provider, session and security records. Vietpik does not store your Google password.
- Profile and preference data: display name, avatar, biography, language and travel preferences.
- User content: reviews, ratings, comments, uploaded images, reports and related moderation records.
- Trip data: saved places and dishes, trip titles, dates, stops, notes, budgets, costs, templates and visibility choices. Private trips are not intentionally made public.
- Business data: place-ownership requests, proposed updates, business contact details and verification evidence.
- Communications: support messages, password-recovery requests and operational email delivery records.
- Technical data: IP-derived security information, browser and device information, request timestamps, error logs and cookie choices.
- Analytics data: page and interaction measurements collected by Google Analytics only after you grant analytics consent.
3. Why we process data
We use personal data to provide and secure Vietpik, personalize your experience, preserve your trips and saved items, moderate public contributions, verify business requests, answer support enquiries, send service messages, prevent misuse, maintain audit records and improve reliability.
Where applicable law requires a legal basis, processing is based on performing our agreement with you, complying with law, protecting legitimate interests such as security and service integrity, or your consent. Analytics is consent-based and optional. We do not sell personal data.
4. Public content and visibility
Your display name, public profile, approved reviews, comments, ratings, public trips and approved images may be visible to anyone who can access Vietpik and may be indexed after Vietpik enables public search indexing. Draft, rejected and moderation-pending submissions are not intended for public display.
Before publishing, remove passports, tickets, financial details, precise home locations and information about other people who have not agreed to publication. Changing a trip from private to public is your choice; review every note before doing so.
6. Service providers and recipients
We may disclose the minimum data needed to vendors acting for us, including infrastructure and hosting providers, Cloudflare for security/CDN/R2 media delivery, Google for optional sign-in and consented analytics, and Resend for transactional email. Providers process data under their own contractual and legal obligations.
We may also disclose data when required by law, to protect users or the service, to investigate fraud or security incidents, or as part of a merger, financing, restructuring or transfer of Vietpik. A successor must respect this policy for data received until it gives lawful notice of a change. We do not disclose private trips to destination businesses for reservations because Vietpik does not make reservations.
7. International processing
Vietpik and its providers may process data in countries other than your own. Those countries may have different data-protection rules. Where required, we use lawful transfer mechanisms and contractual, organizational or technical safeguards.
8. How long we keep data
We keep account and trip data while your account is active and for a reasonable period needed to provide recovery, resolve disputes, enforce agreements and meet legal obligations. Session records expire or are revoked; password-reset links are short-lived. Security, moderation and audit records may be retained longer when necessary to establish what action occurred and protect the platform.
Public content may remain after account closure in anonymized form when deletion would damage the integrity of discussions, legal records or legitimate moderation evidence, unless applicable law requires deletion. Backups are overwritten on a controlled schedule and are not used as active profiles.
9. Security
We use access controls, password hashing, server-side authorization, audit trails, encrypted transport, private object storage and moderation controls designed to protect data. No Internet service is completely secure. Keep your password confidential, use a unique password and contact us promptly if you suspect unauthorized access.
10. Your choices and rights
Depending on applicable law, you may ask to know whether we process your data, access or receive a copy, correct inaccurate data, delete data, restrict or object to processing, withdraw consent, or complain to a competent authority. You can also change trip visibility, remove saved items and edit profile information through your account where available.
- Cookie consent can be changed at any time from Cookie settings.
- Marketing consent, if introduced later, will be separate from service messages.
- A deletion request does not require us to erase records that law permits or requires us to retain, including security, fraud, dispute and audit evidence.
- We may verify identity before fulfilling a request and may refuse or limit a request where permitted by law, explaining the reason when required.
11. Children
Vietpik is not directed to children who cannot lawfully consent to online data processing in their jurisdiction. Do not create an account or submit personal data without the authorization required by applicable law. If we learn that data was collected unlawfully from a child, we may restrict the account and delete the data. Parents or guardians may contact us through the contact page.
12. Automated tools and recommendations
Vietpik may use rules or automated tools to sort, recommend, translate, detect spam or assist moderation. These tools support the service and do not make decisions with legal or similarly significant effects about you. Editors or administrators may review automated signals before moderation action where appropriate.
13. Applicable privacy law
Vietpik intends to operate consistently with applicable privacy and consumer-protection requirements, including Vietnam’s Law on Personal Data Protection No. 91/2025/QH15 where it applies. Additional rights may apply based on your location. Nothing in this policy limits non-waivable statutory rights.
14. Changes and contact
We may update this policy as the service, providers or law changes. Material changes will be given reasonable notice through the website, account or email when required. The effective date above identifies the current version.
For privacy questions or rights requests, use the Vietpik contact page. Include enough information to identify the relevant account or submission, but do not send passwords, full identity documents or payment-card details by ordinary email.