Privacy Policy

1. Information we collect

Information you provide

• Account data: name, email address, password hash, profile photo.
• Billing data: billing address, last four digits of payment method, invoices. Card details are handled by our PCI-compliant payment processor and never touch our servers.
• Content: posts, images, captions, drafts, brand voice settings, and any files you upload.
• Support communications and survey responses.

Information collected automatically

• Device and log data: IP address, browser type, operating system, referring pages, timestamps.
• Usage data: features used, posts scheduled, AI credits consumed, click and view events.
• Cookies and similar technologies (see our Cookie Policy).

Information from third parties

When you connect a social account (Instagram, X, LinkedIn, TikTok, etc.) we receive profile data, audience metrics, and the tokens needed to publish on your behalf — strictly within the scopes you authorize.

2. How we use your information

• Provide, maintain, and improve the T & A Vong service.
• Process payments, subscriptions, refunds, and prevent fraud.
• Send transactional emails (receipts, security alerts, product updates).
• Train and fine-tune our AI features on aggregated, anonymized data. We never train models on your private content without explicit consent.
• Comply with legal obligations and enforce our Terms of Service.

3. Legal basis (GDPR)

We process your data under one or more of the following legal bases: performance of a contract, your consent, our legitimate interests (e.g. service security, analytics), and compliance with law.

4. Sharing of information

We share data with: (a) service providers (hosting, analytics, customer support, payment processors) bound by confidentiality and data-processing agreements; (b) social platforms when you publish content; (c) authorities when required by law; (d) acquirers in the event of a merger or acquisition, with notice. We never sell your personal data.

5. International transfers

T & A Vong is operated from the EU and the United States. Data may be transferred and processed outside your country. Where required, we rely on Standard Contractual Clauses approved by the European Commission.

6. Data retention

We retain account data while your account is active and for up to 24 months after closure to comply with legal and accounting obligations. You may request earlier deletion at any time.

7. Security

We use TLS encryption in transit, AES-256 at rest, role-based access controls, audited backups, and continuous monitoring. No system is 100% secure, but we work hard to protect your data.

8. Your rights

• Access, correction, deletion, restriction, portability, and objection (GDPR).
• Right to opt out of the sale or sharing of personal information (CCPA / CPRA).
• Right to lodge a complaint with your local supervisory authority.

Submit any request to [email protected]. We respond within 30 days.

9. Children

T & A Vong is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to this policy

We will notify you of material changes by email or in-app at least 14 days before they take effect.

11. Contact

T & A Vong, Data Protection Officer — [email protected].