Hifunnel

Privacy Policy

Last updated: April 27, 2026

1. Data Processing Roles

To ensure compliance with global privacy regulations (including Decree 13/2023/ND-CP in Vietnam), we clearly define the roles as follows:

  • For Creator Data: Hifunnel acts as the Data Controller. We collect and manage your account information (securely hosted on Viettel IDC servers in Vietnam) to provide the SaaS service.
  • For Student Data: The Creator acts as the Data Controller, while Hifunnel acts as the Data Processor. We only store and process student data on behalf of and under the instruction of the Creator.

2. Information We Collect

  • From Creators: Name, email, phone number, business/individual identification, SaaS subscription billing details, and system activity logs.
  • From Students: Name, email, payment history, course progress, access IP, and device information.

3. Cookies & Tracking Technologies

Hifunnel uses Cookies and similar tracking technologies to:

  • Securely maintain your active login sessions.
  • Remember personal preferences and display languages.
  • Collect anonymized analytics data to optimize performance and improve the platform experience.

4. Data Usage & Sharing

Collected information is used to operate our services, send system emails, and prevent fraud. Hifunnel absolutely does not sell user data. We only share data with core infrastructure partners (Payment Processors, Cloud Hosting, Email Delivery like SendGrid) that adhere to the same strict security standards.

5. Data Retention & Deletion

  • Your data is securely stored for the duration of your active account.
  • Upon Cancellation: If you request account deletion or if your account is suspended due to violations/expiration, the system will retain your data for 30 days (for backup and recovery purposes). After this 30-day period, all data (including course content and student lists) will be permanently deleted from our servers and cannot be recovered.

6. Data Security & User Rights

We implement SSL/TLS encryption, firewalls, and password hashing to protect data. Users have the right to request the extraction, modification, or complete deletion of their personal data from our systems at any time by contacting our support team.