Privacy policy
This policy explains what personal data Chatbot AI Bán Hàng (chatbotaibanhang.com) collects, why we collect it, who processes it, how long we keep it, and how to delete it. Last updated: 18 October 2026.
Who we are
Chatbot AI Bán Hàng is operated by HỘ KINH DOANH PHAN HỮU CHÍ, a household business registered in Ho Chi Minh City, Vietnam. For any privacy question or request, email support@chatbotaibanhang.com.
Shops and their customers
Shop owners and their staff create accounts and use the dashboard; for that account data we decide how it is used. Shoppers chat with a shop's assistant on the shop's website or its Facebook Page; the shop is responsible for those conversations, and we process them only to run that shop's assistant.
Data we collect from shop owners
Your email address, name, password (stored only as a hash) or Google sign-in identifier, two-factor and passkey settings, sign-in times with IP address and browser, the store details and knowledge you add (website pages, files, products and prices), billing and invoice records, and the settings of the channels you connect. When you connect a Facebook Page we store the Page ID, the Page name and the Page access token Meta issues to us.
Website traffic
For visits to this website, we record the IP address, approximate country, region and city supplied by Cloudflare, visit time, landing page and traffic source. Administrators use these records to count repeat visits and distinguish their own connection from other traffic. An IP address can be shared by several people, and the location is approximate. When you chat with the demo assistant on this website, we also keep with that chat your IP address (for an IPv6 address, only its first half, which identifies your network), a one-way keyed hash of it and of the random device ID described under Cookies and local storage, and, when you connect through Viettel, VinaPhone, MobiFone, Vietnamobile or Gmobile, that provider's name, but never the device ID itself. Administrators use these to tell whether several demo chats came from the same network or device, including our own team's test chats, and we keep them as long as the demo chat itself.
Data we collect from shoppers
The messages and images a shopper sends to a shop's assistant, the replies, and the time of each message. From Facebook Messenger we receive the shopper's Page-scoped ID and public profile name. On the website chat widget we keep an anonymous visitor ID in the browser, and a name or email only if the shopper provides one. If a shopper places an order through the assistant, we store the order details they give, such as name, phone number and email, for that shop.
How we use Facebook data
Data from Facebook is used only to show each conversation in the shop's inbox, to generate the assistant's reply, to send that reply and the typing and seen indicators through Meta's Messenger Platform, and to let the shop's staff reply by hand. We never use it for advertising, never sell it, and never share it with data brokers.
How we use personal data
To run and secure the service, answer shoppers, send the emails and alerts you ask for, count usage against your plan, bill you, and investigate problems. We do not sell personal data, and we do not use shop or shopper conversations to train AI models of our own.
Who processes data for us
Cloudflare hosts the service, its database, uploaded files and short-lived logs, and sends our emails. Meta Platforms delivers Messenger messages. Google handles sign-in if you choose Sign in with Google. OpenAI provides the AI models that read the conversation and the knowledge excerpts needed to write each reply. Our own answering server in Vietnam stores each shop's knowledge, catalog and orders. Microsoft provides Clarity, which records how this website, the dashboard and the chat widget are used unless analytics is turned off. Google provides Google Analytics, which counts visits to this website and the dashboard and the sign-ins and signups they lead to, also unless you turn analytics off. Some of these providers process data outside Vietnam and keep it under their own security, privacy and retention terms.
How long we keep data
We keep account, knowledge and conversation data while the account is active. After a verified deletion request we delete it from our systems within 30 days, and copies in our backups and logs expire within a further 30 days. Invoices and payment records are kept, linked to an anonymized account, for as long as Vietnamese accounting law requires.
Your choices and rights
Shop owners can view and edit their account and store data in the dashboard, download any conversation transcript, delete conversations from the inbox, and disconnect a Facebook Page at any time under Channels. Anyone can ask us to access, correct or delete their personal data by emailing support@chatbotaibanhang.com. Shoppers can also ask the shop they messaged. The data deletion page lists the exact steps.
Security
All traffic uses HTTPS and our hosting provider encrypts stored data. Page access tokens are never shown in the dashboard, store connector secrets are encrypted, and only the operator can reach production systems.
Cookies and local storage
Analytics are enabled by default so we can see how this website, the dashboard and the chat widget are used and fix what gets in the way. Unless you turn them off, we load Microsoft Clarity, which records page views, clicks, scrolling and a replay of the visit, and sets the first-party cookies _clck and _clsk once you accept cookies. We also load the Google tag for Google Analytics, which counts visits to this website and the dashboard, the pages and buttons that lead to a signup, and each sign-in and signup, and sets the first-party cookies _ga and _ga_992JNH4CW4 on chatbotaibanhang.com, so a visit here and a later sign-in to the dashboard can be linked to the same visitor; it is never used to show you personalised ads. In the dashboard and in the chat widget, Clarity records the text the screens show, including your shop's and your customers' data and the messages in a chat, but hides passwords, API keys, one-time codes and everything you type into a field before anything leaves your browser, so a chat message shows only once it is sent. In the demo chat on this website the widget follows your analytics choice here, and in the chat widget on a shop's website Clarity runs unless the shop turns analytics off for its visitors. You can turn analytics off at any time under 'Cookie preferences' in this website's footer or the dashboard's account menu; turning analytics off deletes Clarity's and Google's cookies at once, and neither loads from your next page load. Apart from that, this website stores your theme and cookie choice in your browser, the dashboard stores your sign-in, language, layout and cookie choice, and the chat widget keeps an anonymous visitor ID so a conversation continues after the page reloads. While we compare two versions of the Vietnamese home page, your first visit to it also sets the first-party cookie aichatbot_home_exp, whatever your cookie choice, so you keep seeing the same version; it holds only the name of the test, your version and a random ID, nothing that identifies you, and expires after 30 days. The page sends that version and random ID to our server once so we can count how many visitors saw each version, and when you sign up through a link on this website your version is saved with your new account so we can count sign-ups per version. The dashboard's sign-up and sign-in pages and the chat widget also keep a random device ID in your browser: at sign-up it limits how many accounts one device can create, the demo chat on this website keeps only a one-way hash of it, and the chat widget anywhere else, such as on a shop's website, sends it when a chat starts but we do not store it. We use no advertising cookies.
Changes to this policy
We post every change on this page with a new date. For important changes we also tell shop owners in the dashboard or by email.