Privacy Policy

Easytiger.vn is operated by UXBOX Co., Ltd.(“UXBOX”, “we”, “us”, “our”), an online professional directory. This policy explains what personal information we collect, how we use it, and your rights under applicable data protection law — in particular Vietnam’s Law on Personal Data Protection No. 91/2025/QH15.

For a professional listed on Easytiger, we handle limited business-contact and account-administration information, and the content of enquiries users send them, on our own behalf — to operate the platform, administer subscriptions, maintain security, transmit enquiries and comply with the law. We are not appointed as a listed professional’s data processor for their case files, client records or other datasets they control, and we do not process those datasets on their behalf. Professionals must not upload case files, identity documents, payment-card data or other sensitive material to a profile or account; substantive professional communications belong in an appropriate secure direct channel.

Visitors

• Browser and device type collected via analytics (no personally identifying data).
• Country-level location derived from IP address for aggregate analytics only.
• Cookies — see our Cookie Policy.

Using the AI assistant without an account

You can use the assistant at /chatwithout signing in. When you send your first message we set a cookie containing a random identifier for your browser. That identifier is not derived from anything about you and identifies no person — it exists so your conversation is still there if you reload the page, and so we can count the free questions included before we ask you to sign in. Clearing the cookie ends that conversation and starts a new allowance.

• A random browser identifier stored in a cookie (et_chat_guest).
• A one-way hash of your IP address, used only to limit automated abuse. We do not store the address itself and the hash cannot be turned back into one.
• The conversation itself, handled exactly as a signed-in conversation is — see Sections 5 and 6.

If you later sign in, the conversation you were having is moved to your account and the browser identifier is deleted.

Registered Clients

• Email address and display name provided at sign-up.
• Messages sent to professionals through the in-app messaging system.
• Contact form submissions (name, email, message).

Professionals

• Application data: full name, email, phone, firm name, license/registration numbers.
• Profile data: bio, photo, service packages, credentials, languages, location.
• Subscription and billing status (payment is processed off-platform).

• To operate and improve the Easytiger directory.
• To verify professional credentials during the application review process.
• To enable authenticated messaging between clients and professionals.
• To send transactional emails (account verification, enquiry notifications).
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal information. We do not use your data for targeted advertising.

We process personal data on the following legal bases: (a) contract — to provide the services you have requested; (b) legitimate interests — platform security, fraud prevention, and product improvement; (c) legal obligation — where required by Vietnamese or applicable international law; (d) consent — for any optional communications you opt into.

We share data only in the following limited circumstances:

• Supabase— our database and authentication provider. Data is hosted in Supabase's Japan (Tokyo) region.
• Brevo — transactional email delivery (e.g. account verification and enquiry notifications).
• AI assistant providers — when you use the assistant at /chat, the text of your messages and the structured details derived from them (for example the type of help you need, a city, a timeline or a budget band) are sent to service providers outside Vietnam. Writing the reply currently uses OpenRouter, Groq and NVIDIA; separately, Cloudflare converts your question into a numeric form so we can find the most relevant of our own published guides. If answering you needs a current external source, the question is also sent to Tavily, a search provider. We may change these providers as the service develops. We never send your name, email address, account identifier or any other identifier with those requests — the message reaches the provider with nothing tying it to you. Providers handle these requests under their own privacy policies, which can include keeping them for a time and using them to improve their services, including quality review. The assistant does not have access to professionals’ contact details. As always, please don’t enter passport, ID, bank or card numbers in the assistant.
• Law enforcement — when required by a valid legal process.

Affiliate links.When you follow a link marked “Affiliate link”, we count the click against that link and the day, with no name, account, IP address or other identifier stored with it. The link then takes you to the other company’s website, which may set its own cookies to record that you came from Easytiger. What happens on that website is covered by that company’s own privacy and cookie policies, not this one. If you have accepted analytics cookies, the click is also recorded in our analytics, as described in our Cookie Policy.

Client account data is retained while your account is active. You may request deletion at any time (see Section 8). Professional profiles remain visible while the subscription is active and for a 10-day grace period thereafter. Application data is retained for 12 months for fraud-prevention purposes.

AI assistant conversationsare retained by us for 90 days after the last activity and then deleted automatically; starting a new conversation clears the old one from view right away, and you can ask us to delete one sooner. (Requests sent to the model provider — without identifiers, as described above — are kept on the provider’s own schedule.) Checklists you choose to save are kept with your account until you remove them. If you report an assistant reply, our team may review that conversation; reported conversations that have not yet been reviewed are kept for up to 180 days. We record technical metrics about each assistant turn (timings, outcome codes, token counts, cost) without the text of the conversation.

Conversations held without an accountfollow the same 90-day rule, and the daily counters behind the free-question limit (the browser identifier and the hashed IP address) are kept only for the day they apply to. Because such a conversation is tied to a browser rather than to a person, we may not be able to identify it in order to action a request about it — if you want one deleted, the reliable way is to sign in first, which attaches it to your account.

We use industry-standard measures including encrypted connections (TLS), row-level security in our database, and role-based access controls. No transmission over the internet is 100% secure; we encourage you to use a strong, unique password and enable any available account security features.

Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to receive a portable copy of data you have provided to us. To exercise any of these rights, email us at privacy@easytiger.vn. We will respond within 30 days.

Easytiger is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

We may update this policy from time to time. Material changes will be communicated with at least 14 days' notice via the platform or by email where required.

Privacy questions or requests: privacy@easytiger.vn