Privacy Policy

1. Introduction

NeuraCore AI VN (“NeuraCore”, “we”, “us” or “our”) builds AI infrastructure for business digital transformation in Vietnam. This Privacy Policy explains what information we collect through our website at https://neuracoreaivn.com and the services and demonstrations offered there (together, the “Services”), how we use that information, who we share it with, and the choices you have. This Privacy Policy is effective and was last updated on September 9, 2026.

We have written this document to describe what our systems actually do, not what a privacy policy is usually expected to say. Where our Services offer integration with TikTok, this policy also explains what information we receive from TikTok, how we use it, and how you can disconnect your TikTok account. TikTok is a third-party platform: NeuraCore AI VN is not TikTok and is not affiliated with, endorsed by, or a partner of TikTok.

This Privacy Policy should be read together with our Terms of Service and our Data Deletion instructions. If you do not agree with this policy, please do not use the Services.

2. Information We Collect

We collect only what a specific feature needs in order to work. Most of the Services can be browsed and tried without giving us any information that identifies you.

• Consultation requests. When you ask us for a consultation — by email from the contact section, or through a consultation form where we offer one — we hold what you send: your name and email address, and where you provide them your company, phone number and the message you write. We keep it so that we can reply to you. Apart from this, the only things we write to server-side storage are the technical logs in section 6 and, if you connect a TikTok account, the tokens and connection record in sections 3 and 4.
• Business profile and demo answers. In the digital transformation journey, the business profile and the answers you type are kept in your own browser’s sessionStorage, on your device. They are sent to our AI model only for as long as it takes to produce the result shown on your screen. We do not copy this profile into a database on our side.
• Documents submitted to the analysis demo. PDF, XLSX, DOCX, CSV or TXT files (up to three files of 4 MB each) are read in memory by a short-lived process and are never stored. Only the file type, the size in bytes and the number of characters are recorded in our operational logs — never the content and never the file itself. The text and figures extracted from a document are sent to our AI model, as described below, so that it can produce the summary shown on your screen.
• Camera frames. An image submitted to the camera demo is held in memory for the duration of the request only. It is never written to disk and never written to logs.
• Prompts sent to our AI model. Text you enter in a demo is forwarded to an AI model that NeuraCore runs on its own GPU hardware behind a private gateway. Your prompts are not sent to a third-party AI vendor.
• TikTok information. If, and only if, you connect a TikTok account, we receive the information described in section 3.
• Technical information. Standard server information described in section 6.

The Services have no NeuraCore account and no NeuraCore password: there is nothing to register for and nothing to log in to. The only sign-in involved is TikTok's own authorisation flow, if you choose to connect a TikTok account — in that case we keep the connection record described in sections 3 and 4. We never ask you for a password, a date of birth, a government identifier or payment details, and we do not collect special categories of personal data.

3. Information Received from TikTok

Where our Services offer TikTok integration and you choose to connect a TikTok account, TikTok returns to us only the information covered by the permissions (scopes) you grant during authorisation. That may include:

• Basic account and profile information as returned by TikTok, such as your display name, avatar image and the open identifier and union identifier TikTok issues for your account;
• the account identifier we use to associate the connection with your use of our Services;
• the authorisation information and the list of scopes you granted, so that we know which actions you have permitted;
• the information needed to carry out a publishing action you have authorised, including any creator or account settings TikTok requires us to respect; and
• the status or identifier TikTok returns for a submitted post, so that we can show you whether the publish succeeded.

We do not request and do not receive your TikTok private messages, your contact lists, personal data about your followers, or any payment information. We receive only what your granted permissions allow, and if you grant fewer permissions we receive less. Revoking a permission stops the corresponding information from reaching us.

4. OAuth and Access Tokens

Access to a TikTok account happens only through TikTok’s official authorisation (OAuth) flow, and only after you have granted it. You authenticate with TikTok directly; we never see or handle your TikTok password.

• Access tokens and refresh tokens are held in server-side storage. They are never rendered into the page, never placed in a URL, and never exposed to your browser or to any third party.
• Tokens are used only to perform the actions you authorised — for example, reading your basic profile so we can show which account is connected, or submitting a post you asked us to publish.
• Tokens are refreshed and invalidated according to TikTok’s rules. A token that TikTok expires or revokes stops working immediately on our side as well.
• Tokens are deleted when you disconnect your TikTok account or when you ask us to delete your data.

Access is limited to the members of our team who need it to operate and support the Services.

5. Content and Media

If you use a TikTok-connected publishing feature, you may provide videos, images, captions, hashtags, titles, descriptions and similar metadata. We use that content for one purpose only: to carry out the publishing action you asked for, through TikTok’s official APIs. We do not repurpose your content, we do not publish it anywhere else, and we do not use it for advertising.

Media files are held only for as long as is needed to complete the upload to TikTok and to report the result back to you. Once the transfer to TikTok is finished, our copy is no longer needed and is removed. You remain responsible for the content you publish and you must hold the rights to the media you upload; please see our Terms of Service.

Content you submit to the on-site demonstrations is different and even simpler: documents and camera frames used in the demos are processed in memory only and are never stored.

6. Automatically Collected Information

Like any web server, ours records a small amount of technical information when your browser makes a request:

• your IP address, which we use for rate limiting (30 requests per 5 minutes, counted in memory) and to prevent abuse of the demos;
• the time of the request and the path requested;
• your browser’s user-agent string and comparable standard request headers; and
• ordinary server and error logs needed to keep the Services running and diagnose faults.

The website loads no third-party scripts, fonts, analytics or advertising. Its Content-Security-Policy is default-src 'self' with connect-src 'self', so your browser is not permitted to contact any other origin from our pages. There is no Google Analytics, no Meta Pixel and no advertising tracker of any kind.

7. How We Use Information

We use the information described above for a short, closed list of purposes:

• To provide and operate the features you asked for — running a demo and returning its result, keeping your journey in your own browser, and, where you have connected TikTok, performing the actions you authorised;
• To respond to your enquiry when you write to us, and to keep a record of that correspondence;
• For security and abuse prevention — rate limiting, blocking automated abuse, and investigating faults or misuse of the Services;
• For support, so that we can diagnose a problem you report to us; and
• To meet legal obligations under the laws of the Socialist Republic of Vietnam and to establish, exercise or defend legal claims.

We do not sell personal information, we do not use it for advertising or ad targeting, and we do not build advertising profiles about visitors.

8. TikTok API Data Usage

Information obtained through the TikTok APIs is subject to additional, stricter limits, in line with TikTok’s developer terms and policies. Information we receive from TikTok is:

• not sold to anyone;
• not rented or licensed to anyone;
• not shared with data brokers or any similar intermediary;
• not used for advertising or ad targeting, and not combined with advertising data;
• not used to train AI or machine-learning models; and
• used only to deliver the features you authorised, together with the security, support and legal-compliance purposes described in section 7.

Your use of TikTok remains subject to TikTok’s own Terms of Service, policies and Community Guidelines. TikTok functionality in our Services may change, be restricted or stop working if TikTok changes, restricts or disables its APIs.

9. How We Share Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We disclose information only in the limited situations below:

• Service providers strictly necessary to run the Services, principally our website hosting provider. They process information on our instructions and only to provide their service to us. Our AI model runs on our own GPU hardware, so demo prompts are not disclosed to a third-party AI vendor.
• TikTok, when we carry out an action you have authorised — for example, transmitting the video, caption and metadata you asked us to publish.
• Where the law requires it, in response to a valid legal request from a competent authority, or where disclosure is necessary to protect our rights, the safety of users, or the integrity of the Services.
• In a business transfer, such as a merger, acquisition or reorganisation, in which case the recipient will remain bound by this Privacy Policy or a policy that is at least as protective, and we will inform you of any material change.

10. Data Retention

We keep information only as long as we need it for the purposes described in this policy, for our legal obligations, for security, and for legitimate operational needs. In practice:

• Consultation form submissions are kept while your enquiry is active and afterwards for our business records; you may ask us to delete them at any time.
• TikTok tokens and connection details are deleted when you disconnect your TikTok account or ask us to delete your data.
• Demo documents and camera frames are never retained — they exist only in memory during the request and are gone when it ends.
• Media submitted for publishing is kept only for as long as the upload to TikTok requires.
• Your journey data in sessionStorage stays on your own device and is cleared when you clear it or when your browser session ends.
• Server logs are kept for a limited period for security and troubleshooting, and rate-limiting counters live in memory only.

11. Data Security

We take reasonable and appropriate measures to protect the information we handle:

• all traffic to the website is served over HTTPS/TLS, with HSTS instructing browsers to use a secure connection;
• a strict Content-Security-Policy prevents the page from loading or contacting third-party origins, which reduces the risk of data leaking through injected scripts;
• uploaded documents and camera frames are handled in memory only and are never written to disk or to logs;
• access tokens are kept in server-side storage and are never exposed in the browser or in URLs; and
• access to stored data is limited to the people who need it to operate and support the Services.

No method of transmission over the internet and no method of electronic storage is completely secure. While we work to protect your information, we cannot guarantee absolute security. If you believe you have found a security issue, please write to us at contact@neuracoreaivn.com.

12. User Choices and Controls

You are in control of what you give us and can withdraw most of it yourself:

• Decline the demos. You can browse the site without running any demonstration and without uploading a document or a photo. The site never asks for access to your camera; the operations demo works on an image file you choose yourself.
• Clear your journey. The business profile and demo results live in your browser’s sessionStorage; closing the browser session or clearing site data removes them. You do not need our help to do this.
• Ask us to delete a form submission. Write to contact@neuracoreaivn.com from the address you used, and we will delete the entry.
• Manage or revoke TikTok access, either through our disconnect control or in TikTok’s own app-permission settings, as described in section 13.
• Request access, correction or deletion of the information we hold about you, in accordance with applicable Vietnamese law.

You can reach us through the contact section at /#lien-he or by email. We may need to verify that a request genuinely comes from you before we act on it.

13. TikTok Account Disconnection

If you have connected a TikTok account, you can disconnect it at any time, in two independent ways:

• In our Services, using the disconnect control in the TikTok integration settings. This ends the connection and deletes the stored access and refresh tokens for your account.
• In TikTok, using TikTok’s own app-permission settings, where you can review the applications and services connected to your account and remove authorisation for ours. TikTok controls the exact location and wording of that screen and may change it.

After you revoke access, we can no longer read your TikTok profile information or publish on your behalf, and any TikTok-connected feature will stop working until you authorise it again. Content that was already published to TikTok stays on TikTok and is managed in TikTok, not by us. Disconnection removes the connection; if you also want us to delete other information, such as a consultation request, please follow section 14.

14. Data Deletion

There are three routes to deletion, and you can use whichever fits your situation:

• Delete it yourself. Clear your browser’s site data to remove the journey stored in sessionStorage on your device. Demo documents and camera frames were never stored, so there is nothing to delete.
• Disconnect TikTok. Disconnecting in our Services, or revoking authorisation in TikTok’s app-permission settings, deletes the tokens we hold for your account.
• Ask us. Email contact@neuracoreaivn.com with the details we need to find your record — for example the email address you wrote from, or the TikTok display name you connected. We will delete the information we hold, except where we are required by law to keep it, and we will confirm when it is done.

Full, step-by-step instructions are published at /data-deletion.

15. Cookies and Similar Technologies

Our website sets no cookies today. There is no cookie banner because there is nothing to consent to: we do not use advertising cookies, analytics cookies or any third-party tracker, and the site’s Content-Security-Policy would not allow one to load.

The only browser storage we use is sessionStorage, which holds the digital transformation journey (your business profile, the demo results and the analysis panels) on your own device so that the pages of the journey work together. The store itself is never uploaded: what a demo needs is sent with that one request and nothing more. It is not readable by other websites, and it disappears when your browser session ends or when you clear site data. We do not write anything to localStorage.

If we ever introduce a cookie or a similar technology, we will update this Privacy Policy and, where the law requires it, ask for your consent before setting it.

16. Third-Party Services

The Services rely on a small number of third parties, and we want you to know exactly which:

• TikTok, a third-party platform, where you connect an account and where authorised content is published. NeuraCore AI VN is not TikTok and is not affiliated with, endorsed by, or a partner of TikTok. Your use of TikTok is governed by TikTok’s own Terms of Service, Privacy Policy and Community Guidelines, which we encourage you to read.
• Our hosting and network providers, which serve the website and carry traffic to the private gateway in front of our own AI hardware.

Our own AI model runs on NeuraCore’s GPU hardware, so demo prompts are not passed to an external AI vendor. Any link on our site that leads to another website is outside our control, and this Privacy Policy does not apply to it.

17. International Data Transfers

NeuraCore AI VN operates its infrastructure from Vietnam, and our AI model runs on hardware we control. Some of the providers we use to host and deliver the website may process or route data through servers located in other countries, which means information covered by this policy can be handled outside Vietnam.

Where that happens, we use providers that apply appropriate safeguards, and we limit what they receive to what they need in order to deliver their service to us. TikTok, as an independent third party, processes data under its own policies and its own international transfer arrangements, which we do not control.

18. Children's Privacy

The Services are built for businesses and are not directed to children. You must be at least 18 years old to use the Services, and if you use them on behalf of an organisation you must be authorised to do so. TikTok applies its own minimum-age requirements to TikTok accounts, separately from ours.

We do not knowingly collect personal information from anyone under 18. If we learn that we have received such information, we will delete it promptly. If you are a parent or guardian and believe a child has provided us with personal information, please contact us at contact@neuracoreaivn.com.

19. Changes to This Privacy Policy

We may update this Privacy Policy as the Services develop, as our TikTok integration changes, or as the law requires. When we do, we will revise the “Last Updated” date at the top of this page and publish the new version here.

If a change materially affects how we handle your information — for example, a new category of data, a new recipient, or the introduction of any cookie or tracker — we will make that clear and, where the law requires it, obtain your consent before the change takes effect. Continuing to use the Services after an update means you accept the updated policy.

20. Contact Us

If you have a question about this Privacy Policy, want to exercise a right over your information, or wish to report a concern, please contact us:

• Email: contact@neuracoreaivn.com
• Website: https://neuracoreaivn.com, contact section at /#lien-he
• Related documents: Terms of Service and Data Deletion

We aim to answer every request without undue delay. This Privacy Policy is governed by the laws of the Socialist Republic of Vietnam, and any dispute that cannot be resolved between us will be submitted to the competent courts of Vietnam.