Fox40 AgencyHuman mind leads, AI assists

Privacy Policy

Which personal data Fox40 collects, why, who it is shared with and your rights under Decree 13/2023/ND-CP.

Last updated: 20/10/2026. This policy explains which personal data Fox40 (the Fox40 Agency brand operated by Mr. Phan Bảo) collects when you use fox40agency.com, why, who it is shared with and what rights you have, under Decree 13/2023/ND-CP on personal data protection.

1. Scope

  • It applies to the fox40agency.com website: the document library, member accounts, the consultation form, comments and the product pages. The website does not take payments; purchases happen inside the plugin (Freemius) or inside the app on Canva (PayOS, Freemius).
  • The RATA for Canva app has its own policy: RATA for Canva Privacy Policy.
  • The RATA – AI Text to Speech plugin runs on customers’ websites. Fox40 does not receive data about readers of those websites; each website owner controls their own data.

2. Data controller

Mr. Phan Bảo, the individual operating the Fox40 Agency brand, personal tax code 8559094628, 101 Xo Viet Nghe Tinh, Ninh Kieu Ward, Can Tho City, Vietnam. Personal data contact: support@fox40agency.com · +84 947 644 696.

3. Data we collect

  • Consultation form: name, email, phone / Zalo number, company name, topic and your request; plus the page you sent it from and the traffic source (referring page, UTM campaign parameters).
  • Member accounts (Google / Facebook sign-in): display name, email and account ID provided by Google or Facebook after you agree; the documents you save; your account level. We never receive your password, contacts or social media posts.
  • Purchases: purchase email, plan, amount, transaction ID, purchase date and licence expiry, sent by Freemius or PayOS after you pay. We never receive card numbers or bank details.
  • Comments: name, email, content and rating; IP address and browser information to fight spam.
  • Analytics: Google Analytics records pages viewed, device, browser, approximate region and actions such as button clicks; it uses cookies and random identifiers that do not contain your name or email.
  • Security log: IP address, sign-in times and failed sign-ins, to detect unauthorised access.
  • Form spam protection: when you send the consultation form, Google reCAPTCHA v3 receives your IP address and interaction signals on the page to score human versus bot; Fox40 only keeps the check result with the request.
  • In your browser: light / dark mode choice, language, listening speed and sign-in session (see section 9).

We do not collect sensitive personal data (health, finance, biometrics…) on the website.

4. Purposes and legal bases

  • Answering consultation requests, quoting and performing contracts: based on your request and the contract.
  • Creating and keeping your account, saving documents, unlocking documents by level: based on the consent you give when signing in.
  • Activating licences, issuing invoices, after-sales support: based on the sales contract and accounting and tax obligations.
  • Measuring to improve content and design; protecting the website from spam and attacks: based on consent and our legitimate interest in operating safely.
  • Sending news about new documents and products: only if you subscribe; you can unsubscribe at any time.

We do not sell personal data and do not use your data to train AI models.

5. Sharing

We only share the data needed with:

  • Website hosting provider (servers at Vietnix, Vietnam): hosting the website and database.
  • Google: Google sign-in; Google Analytics; Google reCAPTCHA (spam protection for the consultation form).
  • Meta (Facebook): Facebook sign-in.
  • Freemius: software licence sales, card / PayPal payments, invoices.
  • PayOS: VietQR payments.
  • Email delivery services: notifications, order confirmations, support replies.
  • Competent authorities: when legally required.

These parties process data under their contracts or terms of service and may only use it for the purposes above.

6. International transfers

Google (including reCAPTCHA), Meta and Freemius may store and process data on servers outside Vietnam. By using social sign-in, Google Analytics or Freemius payments you agree to this transfer. Fox40 prepares and keeps the cross-border transfer impact assessment required by law.

7. Retention

  • Consultation requests: 24 months from the last contact, or for the contract period if a contract is signed.
  • Member accounts and saved documents: until you delete your account or ask us to.
  • Comments: until the comment is removed or you ask us to delete it.
  • Orders and payment records: for the accounting retention period required by Vietnamese law.
  • Google Analytics data: for the retention period set in Google Analytics (14 months at most).
  • Security log: 12 months at most.

8. Your rights

Under Decree 13/2023/ND-CP you have the right to be informed; to give or withdraw consent; to access, view and correct your data; to ask for deletion; to restrict processing; to get a copy; to object to processing; to complain, report or sue; to claim compensation; and to protect your own data.

Send requests to support@fox40agency.com from the email linked to your account (so we can verify you). Fox40 acts within the time limits set by Decree 13/2023/ND-CP. Withdrawing consent does not affect processing lawfully carried out before.

9. Cookies and browser storage

  • Necessary: WordPress sign-in and security session; chosen language (pll_language); comment form prefill.
  • Convenience: light / dark mode and listening speed, kept in browser storage (localStorage) and never sent to the server.
  • Analytics: Google Analytics cookies (_ga, _ga_*).

You can delete or block cookies in your browser settings; if you block the necessary cookies you will not be able to sign in.

10. Security

Connections are encrypted (HTTPS); admin accounts have role-based permissions and a limit on failed sign-ins; third-party secret keys are never shown again after saving; data is backed up regularly. If a data breach occurs, Fox40 notifies the authorities and the people affected as required by law.

11. Children

The website is not intended for people under 16. If you are a parent or guardian and believe a child has sent us data, contact us and we will delete it.

12. Changes

When this policy changes we update this page and the date at the top. Important changes to processing purposes will be announced on the website or by email before they apply.

13. Contact

Fox40 Agency – Mr. Phan Bảo, personal tax code 8559094628 · 101 Xo Viet Nghe Tinh, Ninh Kieu Ward, Can Tho City, Vietnam · support@fox40agency.com · +84 947 644 696.