Privacy Policy
This policy explains what personal data we collect on banicamp.com, why, and the choices you have. We keep it short and plain on purpose.
1. What we collect
- Account data: name, email, username, password (hashed), optional phone number, avatar.
- Order data: what you bought, price, order number, payment status. Card and PayPal details are entered on the merchant of record's checkout (Polar or Lemon Squeezy) and never reach our servers.
- Learning data: challenge progress, submissions, points, posts and comments you make on the platform.
- Interview answers: if you use the "find your challenge" quiz, your answers are stored with your contact details so we can recommend the right product and follow up.
- Technical data: IP address, browser, device, pages viewed, referral link, and cookies described below.
2. Why we use it
- To deliver the product you bought and keep your progress.
- To send order confirmations, access links and product updates (transactional email).
- To send educational emails and offers if you signed up for them; every such email has an unsubscribe link.
- To measure and improve the Site, including advertising performance (see cookies).
- To prevent fraud, enforce our Terms and meet legal obligations.
3. Cookies and tracking
We use strictly necessary cookies (login session, security). With your consent where required, we also use Meta Pixel and Google tags to measure sign-ups and purchases and to show relevant ads. Purchase events may also be sent server-side to Meta (Conversions API) using a hashed email so the same event is not counted twice. You can block these in your browser or via your ad-settings on Meta and Google.
4. Who we share data with
- Polar (payments, receipts, tax) — their privacy policy.
- Lemon Squeezy (payments, receipts, tax) — their privacy policy.
- Email delivery providers (Resend / Brevo) to send the emails above.
- Hosting and storage providers (our server and Cloudflare R2 for video and files).
- Meta and Google for measurement and ads, as described in section 3.
We do not sell personal data. We share it with authorities only when legally required.
5. International transfers
We operate from Vietnam and use providers in the United States and the EU. Where the law requires, transfers rely on standard contractual clauses or the provider's equivalent safeguards.
6. How long we keep it
Account and order records are kept while your account is active and for as long as tax and accounting rules require afterwards (typically up to 10 years for order records). Quiz answers that never led to an account are deleted after 24 months. You can ask us to delete your account at any time; we will remove or anonymise what we are not legally required to keep.
7. Your rights
Depending on where you live (including the EU/UK under GDPR, California under CCPA, and India under the DPDP Act) you may have the right to access, correct, export, restrict or delete your personal data, and to object to marketing. Email support@ymm.vn and we will respond within 30 days. You can also complain to your local data-protection authority.
8. Children
The Services are for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will remove it.
9. Security
Passwords are hashed, traffic is encrypted (HTTPS), and access to production data is limited to staff who need it. No system is perfectly secure; if a breach affects your data we will notify you as the law requires.
10. Changes
We may update this policy; the date at the top shows the current version. Material changes will be announced on the Site or by email.