Privacy policy

1. Data we collect

Contact form: name, email, phone, brief, budget/project type (if provided), attachments (if any).

Newsletter: email address and locale.

AI chat: message content, session id, IP, user-agent, locale.

Funnel analytics: interaction events (CTA, form, Zalo) tied to a session id — not to your real name unless you submit a form.

2. Purpose & retention

Purpose: respond to quote requests, customer care, product improvement, AI chat operation and anti-spam.

Leads and chat transcripts are stored in MySQL managed by Ocean Labs for as long as needed for contracts/warranty and legal duties; earlier deletion is available on a valid data-subject request.

3. Third parties

Cloudinary: image storage (public or authenticated).

Google Gemini: chat replies and knowledge embeddings.

Cloudflare: Turnstile (bot protection) and Web Analytics (traffic).

n8n (HMAC webhook): email notifications for new leads — leads are saved to our database before the webhook fires.

4. Rights under Decree 13/2023

You have rights to be informed, consent, access, correct, delete, restrict, object and complain under Vietnamese personal-data law.

Ocean Labs does not sell personal data to third parties for advertising.

5. Feedback / proof images on the site

Bills, chat screenshots or identifying content are published only when: (a) fully redacted (FULLY_REDACTED), or (b) the client consents and evidence is stored (CLIENT_CONSENT).

Original sensitive images are admin-only via short-lived signed URLs — never published by transforming the original URL.

6. Deletion requests

Email hello@oceanlabs.pro.vn or the published Zalo hotline with identifying details and the scope to delete.

Ocean Labs will respond within a reasonable period under applicable law.