Privacy Policy

1. Scope

This policy explains how Solo Secret (“we”) collects, uses and protects your personal data when you use the website solosecret.com and when you interact with the Solo Secret Facebook Page and ads. We process personal data in accordance with Vietnamese law on personal data protection.

2. Data we collect

We only collect the data needed to run the marketplace:

• Account: the email, display name and password you set when you sign up. Passwords are stored only as a one-way hash (Argon2id); we cannot read the original password. We also store your role (buyer, seller) and whether your email is verified.
• Sellers: store name, store link, bio, products listed for sale, uploaded files (with their file names) and the activation codes you provide for delivery to buyers.
• Orders and payments: the products bought, prices, order IDs, order status, the request details you send when ordering a service, and the amount and transfer code of each payment. We do not collect or store card details, and we do not store your bank account number or the contents of your bank transactions.
• Product access: the products you are entitled to download, the license keys issued to you and the time of your latest download.
• Technical data: your IP address is used temporarily in memory to prevent abuse (rate limiting) and is not stored. Our servers do not store information about your browser or device; Meta Pixel and Google Analytics collect some of it separately (see section 3).

3. Cookies and browser storage

• Sign-in cookies: access_token (15 minutes) and refresh_token (30 days) keep you signed in; csrf_token protects your actions from being forged by other sites. Sign-in cookies cannot be read by JavaScript.
• Browser storage: your cart is stored right in your browser and is not sent to our servers until you check out.
• Measurement and advertising: the website uses Meta Pixel (by Meta) and Google Analytics 4 (by Google). They set cookies in your browser (such as _fbp and _ga) and send Meta and Google the pages you view and your shopping actions on the website: viewing a product, adding to the cart, starting checkout, a paid order (order ID, products, amount), creating an account and search terms, together with your IP address and browser and device information. We do not send your email, name, password or the brief you write with an order to these tools. You can block or delete these cookies in your browser settings or with an ad blocker; shopping keeps working normally.

4. How we use data

• To create and protect your account and verify your email.
• To process orders, confirm payments and deliver the digital products or services you bought.
• To review sellers and products, and to handle complaints and disputes.
• To prevent fraud and abuse, and to meet our legal obligations.
• Measure traffic and how our ads perform, and show Solo Secret’s ads on Meta’s and Google’s platforms to people who have visited the website.

We do not sell your personal data.

5. Data sharing

• Sellers receive the information they need to deliver their orders, such as the products you bought and the request details you sent with them.
• Service providers process data on our behalf: an email service (to send account verification emails) and SePay (to reconcile bank transfers into Solo Secret’s account). When you pay by bank transfer, your browser loads the QR code from VietQR.
• Meta and Google receive the measurement data from Meta Pixel and Google Analytics described in section 3 and process it under their own privacy policies. This data may be processed on servers outside Vietnam.
• Competent government authorities when required by law.

Servers, databases and file storage are operated by Solo Secret itself.

6. Facebook Page and ads

Solo Secret uses a Meta (Facebook) app only to manage its own Facebook Page and ad campaigns. This app does not offer Facebook Login and does not take any data from your Facebook account.

When you comment, message or otherwise interact with our Page or ads, we may see the content you send to the Page and the aggregated ad performance reports Meta provides. Meta’s processing of your data on its platform is governed by the Meta Privacy Policy.

7. Storage and security

We keep account data for as long as the account is active. Transaction records (orders, payments) are kept for the period required by accounting and tax law. Email verification links expire after 24 hours.

Connections are encrypted with HTTPS, passwords are hashed one way, product files can only be downloaded through short-lived links, and every time our staff access user data it is recorded in an audit log.

8. Your rights

You have the right to:

• know about and access the personal data we hold;
• ask us to correct inaccurate data;
• withdraw your consent and ask us to delete your data;
• complain about how your personal data is processed.

To exercise these rights, please email info@solosecret.com.

9. How to request data deletion

1. Send an email to info@solosecret.com from the email address you registered with, with the subject “Yêu cầu xoá dữ liệu” (data deletion request).
2. We confirm that the request comes from the account owner, then deactivate the account and delete or anonymize your personal data.
3. Transaction records that the law requires us to keep will be kept until the end of that period and will not be used for any other purpose.

If you want to delete data related to your interactions with the Solo Secret Facebook Page, send your request to the same email address or message the Page directly.

10. Children

Solo Secret is not intended for people under 16. We do not knowingly collect data from children; if we find any, we will delete it.

11. Changes to this policy

When this policy changes, we update the date at the top of the page. For important changes, we will announce them on the website before they take effect.

12. Contact

For any questions about personal data, please contact info@solosecret.com.

Address: 6th Floor, Muong Thanh Hotel, 115 Nguyen Van Linh, Hai Chau Ward, Da Nang City, Vietnam.