TỰ DO GLOBAL · duhoctudo.com

Privacy Policy

Tu Do International Services Co., Ltd. (“Tu Do”, “we”) — study-abroad consulting.
Headquarters: NO02-LK2, No. 22 Doc Bun 1, Van Khe, Ha Dong Ward, Hanoi, Vietnam · Phone: 0333.156.512 · Privacy contact: privacy@duhoctudo.com
Effective: 30/09/2026 · Version 1.3

1. Scope

This policy covers personal data we receive when you (a) use duhoctudo.com, (b) leave your details to request advice, or (c) comment on or send messages to Tu Do's TikTok channels, Facebook Pages (Messenger), Zalo Official Account (Zalo OA) and other social pages.

2. What we collect

• Information you give us: name, phone number, e-mail, Zalo, your study-abroad needs, and what you write to us.
• When you interact with Tu Do's TikTok channels: your public TikTok display name and username, the comments you leave on our videos and — if you message a channel — the content of those messages. We receive this data through the official TikTok API for Business, limited to what you made public or sent to our channel.
• When you message or comment on Tu Do's Facebook Pages: your public Facebook name, a Page-scoped ID (PSID — not your Facebook account ID), the content of the Messenger messages you send to the Page (including attached photos, stickers, videos, files and links) and the comments you leave on the Page's posts. See section 7.
• When you message Tu Do's Zalo Official Account “Du học Tự Do - Hàn Quốc & Đài Loan”: your public Zalo display name and avatar, an OA-scoped user ID (not your phone number or Zalo account ID), the content of the messages you send to the OA (including attached photos, stickers, files and links) and whether you follow / unfollow the OA. We receive this through the official Zalo Official Account API (Zalo Open API), only for conversations you started. See section 7.
• Website technical data: IP address, browser type, pages viewed (standard server logs).

We do not collect your TikTok / Facebook / Zalo password, cannot see your messages with anyone else, and do not knowingly collect data from children under 16.

3. How we use it

• To answer your comments and messages and provide the advice you ask for.
• To contact you when you leave your details.
• For internal statistics (e.g. number of comments answered) to improve our service.
• AI-assisted replies: some replies to messages / comments may be drafted by Tu Do's AI assistant using the company's admissions information; staff always monitor conversations and you can ask to talk to a person at any time.

We do not sell data, do not share it with third parties for advertising, do not use message content to train AI, and do not build advertising profiles.

4. Who can access it

Only Tu Do staff assigned to the specific channel you contacted can read and reply. Each staff member has an individual account with two-step sign-in; every reply is attributed to a named user (replies sent by the AI assistant are marked separately). Data is stored on the company's server in Vietnam; our hosting provider supplies infrastructure only and has no access to content.

AI assistant: to draft replies, the system sends the question text with personal information removed — full names reduced to a first name; phone numbers, e-mail addresses, ID and account numbers and links deleted; photos and files you send are never sent — to the AI service of Anthropic (United States). Anthropic processes it under its commercial terms of service and does not use it to train its models. Apart from this, data is not transferred outside Vietnam.

5. Storage and protection

• Data is stored on the company's server in a data centre in Vietnam; connections are encrypted (HTTPS); the database is not exposed to the Internet (only our own server can reach it); TikTok, Facebook and YouTube access keys are encrypted at rest.
• Retention: message content (including attached photos, stickers and files) is kept for as long as needed to handle the conversation and no longer than 90 days after the last message; the whole conversation is then deleted automatically. Public comments are kept while the video / post remains on the channel. Audit metadata (“who replied, when” — not the content) is kept 12 months.
• When a channel is disconnected, its access keys are deleted immediately and its message data within 7 days.

6. Tu Do's YouTube channels (YouTube API Services)

Our internal tool social.duhoctudo.com uses YouTube API Services to manage Tu Do's own YouTube channels. When a channel manager clicks “Connect YouTube” and grants access on Google's screen, we receive: the channel title, handle, channel avatar, subscriber count and an access token for that channel. We do not receive the Google account password. Tokens are encrypted at rest on the company server and are used only for the channel that granted access, to:

• upload videos, set thumbnails, upload captions, add videos to playlists and edit the title / description / tags of that channel's own videos (only when a staff member assigned to the channel does so);
• read the status and statistics of that channel's own videos (views, likes, comment count; when enabled: watch time, average view percentage, traffic sources — aggregated figures not tied to any viewer);
• when enabled: read public comments on that channel's own videos (the display name and text viewers posted publicly) so staff can reply to or hide them in our tool. Replies are sent by staff; an AI assistant may only prepare a draft (phone numbers, emails and links are masked before being sent to the AI) and never posts on its own;
• when enabled: read public information (channel name, videos, view counts) of a few public YouTube channels in the same field, for content research.

We do not read messages, do not collect any other personal data of viewers, do not sell or share YouTube data with third parties and do not display it publicly. Comments, statistics and public data obtained from YouTube are kept for at most 30 days (deleted automatically if not refreshed).

By using this feature you are also agreeing to be bound by the YouTube Terms of Service. Data on Google's side is processed under the Google Privacy Policy.

You may revoke access at any time through the Google security settings page: myaccount.google.com/permissions. When access is revoked — or when a manager clicks “Disconnect” in our tool — we revoke the token and delete the stored token and the data obtained from YouTube (channel avatar, subscriber count, video statistics, comments) within 7 days.

7. Tu Do's Facebook Pages (Meta Platform) and Zalo Official Account

Our internal tool social.duhoctudo.com uses the Meta Messenger Platform and Pages API so that Tu Do staff can read and answer messages and comments sent to Tu Do's own Facebook Pages. We only receive conversations that you started with our Page, and we use them only to answer your questions.

• Every reply is typed and sent by a real staff member — the tool never sends automated, bulk or promotional messages through Messenger.
• Following Meta's rules, the Page replies normally within 24 hours of your last message; when a question needs more time (for example at weekends, or when documents must be checked) a staff member may answer for up to 7 days (Meta's Human Agent feature). After 7 days replies are locked.
• Data received from Meta is not sold, not shared with other parties (other than question text with personal information removed, sent to the AI assistant as described in section 4), not used for advertising or profiling, and not used to train AI.

Zalo Official Account: our internal tool uses the Zalo Official Account API (the “Tu Do Social OS” application registered by the Company with Zalo) to receive the messages you send to the OA “Du học Tự Do - Hàn Quốc & Đài Loan” and to reply to you from that same OA. Under Zalo's rules the OA can only reply within 48 hours of your last message; after that the system locks and does not message you again. We do not send bulk or advertising messages, do not use Zalo data for profiling or AI training, and messages are deleted after 90 days as in section 5. You can unfollow or block the OA at any time in the Zalo app.

Data on Facebook's side is processed under the Meta Privacy Policy.

Data deletion instructions

Standalone page: social.duhoctudo.com/data-deletion

1. E-mail privacy@duhoctudo.com with the subject “Data deletion request”, stating the Facebook name / TikTok username / Zalo name (or phone number) you used and the Page / channel / OA you contacted.
2. We confirm the request and delete all messages, comments and related information about you from our system within 30 days (usually sooner), then reply to confirm.
3. Even without a request, messages are deleted automatically 90 days after the last message (section 5). Deleting a conversation in the Messenger app only removes it on your side — send a request as in step 1 to have it deleted on Tu Do's side.

8. Your rights

You have the right to be informed, to consent or withdraw consent, to access, correct, request deletion, restrict or object to processing, and to complain under Vietnamese law. Send requests to privacy@duhoctudo.com (state the Facebook name, TikTok username, Zalo name or phone number you used). We answer within 30 days. How to request deletion: see section 7. You can also delete your own comments in the TikTok / Facebook app.

9. Incidents

If an incident exposes personal data, we will contain it immediately, notify affected persons and the competent authority within the period required by law, and notify TikTok, Meta and Google as required by each platform's developer terms.

10. Changes

When this policy changes we update this page and state the new effective date.

Terms of Use →