Privacy policy

Updated 30 October 2026

This page explains what data we collect when you read the website and use the workspace, what we use it for, and how you stay in control of it.

1. 1Who is responsible for your data

   Eurekanda, run by Minh Khang, decides the purposes and means of the processing described on this page. Contact us about your data by the email at the foot of the page.

2. 2When you only read the website

   You need no account to watch the videos or read the glossary and guides. We use no advertising trackers or behaviour analytics on these pages.

   Your browser may keep a cookie with your chosen language, and store a few choices on your device (localStorage), such as a ticked checklist. These are not sent to our servers.

3. 3When you create an account

   • Your name, email address and password. The password is stored as a one-way hash; we cannot read it.
   • A session cookie keeps you signed in; it expires after about a week without use.
   • Your email is used only for account matters: signing in, password resets and necessary notices.

4. 4When you use the workspace

   • Posts, videos, images and drafts you write or upload, stored on the service's servers so you can publish and manage them.
   • The YouTube channels and Facebook Pages you connect: their names, identifiers and the publishing permission you granted through Google's and Meta's official screens. We never ask for or store your social media passwords.
   • Post statistics (views, engagement) fetched from the platforms to show analytics and work out golden hours.
   • MCP access keys you create for AI assistants, stored encrypted.
   • Your credit top-up history: amount, transfer code and time. We never receive or store card numbers or banking passwords.

5. 5Third-party services we use

   Some work is done by outside services; each receives only the data its job needs:

   • Social media connection service: connecting social accounts, publishing and fetching post statistics for YouTube and Facebook.
   • SePay: confirming bank transfers when you top up credits.
   • An email delivery service: sending password reset and account emails.
   • Sentry: receiving technical error reports so we can fix them; it records no screens or sessions.
   • YouTube and Facebook: receiving the posts you publish, under their own terms.

6. 6Data leaving Vietnam

   The social media connection service, Sentry, the email delivery service, YouTube and Facebook run servers abroad, so the data each needs for its job may be transferred and stored outside Vietnam. We send only what is needed for what you asked us to do.

7. 7How we protect data

   • The website and workspace run over encrypted HTTPS connections.
   • Passwords are stored as one-way hashes; MCP access keys are stored encrypted.
   • Only the people operating the service can reach its servers and database.

8. 8If you do not provide data

   You can read every video, glossary entry and guide without giving any data. Without an email address you cannot create an account; without connecting a channel you cannot publish through the workspace.

9. 9How long we keep data

   Account data and content are kept until you ask us to delete your account. When you remove a social connection, it is removed from the workspace and from the social media connection service. Credit transaction records may be kept longer where accounting or tax law requires.

10. 10Your rights

    Under Vietnam's personal data protection law you may know what data is processed, view it, correct it, ask for it to be deleted and withdraw consent. Send requests to the email below; we reply within the legal time limit.

    You can also remove social connections in the workspace at any time, or revoke access in your Google or Facebook account.

11. 11Changes to this policy

    When the policy changes, the date at the top changes too.