This policy explains how EverAI collects, uses, stores and protects your personal data, and how you can exercise your rights over it.
This is a translation of the Vietnamese original. In case of any discrepancy, the Vietnamese version prevails.
Purpose and scope of collection
We collect information on https://everai.vn/ in two ways:
- Directly: the full name, email address, phone number and company name you use to register an account, purchase a plan or send feedback.
- Indirectly: IP address, operating system, demographic data and browser type, via cookies.
We collect this information in order to:
- Deliver our text-to-speech (TTS), voice cloning and voice dubbing services.
- Manage accounts and record orders and payment history so that your rights as a customer are protected.
- Contact you for business relationship development and to support you promptly when you raise a request or complaint.
- Send service updates, surveys or promotional offers, if you have agreed to receive them.
- Detect and prevent fraud and keep the system and other users safe.
- Comply with applicable Vietnamese law.
If you do not provide the necessary information, we may not be able to provide the corresponding features or support.
Scope of personal data collected
| Data category | Details |
|---|---|
| Account data | Full name, email address, phone number, password in hashed form, profile picture if you upload one. |
| Transaction data | Contact address, order history, bank transfer references, credit usage history. We do not collect or store your card number or banking credentials. |
| Content data | Voice samples you upload for cloning, text you enter for speech synthesis, audio and video files you upload for dubbing, and the output files the system generates. |
| Technical data | IP address, browser and operating system, access times, activity logs on the platform, cookie data. |
Scope of use
We take your privacy seriously and commit that we will never sell or trade customer information to third parties. Personal data is used only for the purposes set out above and is shared only in the following limited cases:
- With your prior consent.
- To protect the legitimate rights of EverAI and our partners, in accordance with Vietnamese law.
- In response to a lawful request from a competent Vietnamese state authority.
- In other necessary cases, such as a promotion sponsored by a third party; we will notify you beforehand so you can decide whether to take part.
The content you generate with the service belongs to you. We do not use it for promotional purposes without your explicit consent.
Retention periods
| Data category | Retention period |
|---|---|
| Account data | For as long as the account is active, and for up to 30 days after you request deletion. |
| Transaction records and invoices | For the accounting record retention period required by Vietnamese law, even after the account has been deleted. |
| Voice samples and output files | For as long as the account is active, or until you delete them yourself. Data is removed from our systems within 30 days of deletion or of an account deletion request. |
| Technical logs | Up to 12 months, for security, incident handling and complaint resolution. |
Once these periods end, or once the purpose of collection has been fulfilled, data is deleted or anonymised so that it can no longer identify you.
Who can access your information
- EverAI staff, with permissions assigned by role. Only staff directly responsible for operating the system and supporting customers can access data, and only to the extent their work requires.
- Server and storage infrastructure providers we contract to run the platform, at the technical level needed to keep the service running.
- Banks and payment service providers, to reconcile bank transfers.
- Transactional email providers, to send you confirmation and service notification emails.
- Competent state authorities, on a lawful written request.
These third parties may process data only on our instructions, for the agreed purpose, and are bound by contractual confidentiality obligations.
Security measures
We apply technical and organisational measures together:
Technical measures
- All traffic between your browser and the platform is encrypted with HTTPS/TLS. The platform forces redirection to HTTPS and enables HSTS, so browsers always use an encrypted connection.
- Passwords are stored as one-way Argon2 hashes, never in readable form. Not even our administrators can read your password.
- Session cookies are set with the
SecureandHttpOnlyflags; the platform applies cross-site request forgery (CSRF) protection, content type sniffing protection (nosniff) and framing protection (X-Frame-Options: DENY). - Data is stored on access-controlled servers, with production and development environments kept separate.
- The system is backed up regularly so that it can be restored after an incident.
- Access logs and activity logs are recorded and monitored to detect unusual access.
- Software libraries and components receive security updates on a regular basis.
Organisational measures
- Least-privilege access control: each staff member is granted only the access their duties require.
- Staff who handle personal data sign confidentiality undertakings and are briefed on their data protection obligations.
- Access rights are reviewed whenever staffing changes, and revoked immediately when someone leaves.
- Third parties that process data on our behalf are bound by contractual confidentiality obligations.
If an incident occurs
If we detect a personal data breach, we contain and remediate it immediately, notify you at your registered email address, and notify the competent state authority within the period required by personal data protection law.
No system is perfectly secure. You also have a part to play in protecting your account: use a strong password that you do not reuse elsewhere, do not share your account, and sign out when using a shared device.
Viewing and correcting your data
You can view and correct most of your data yourself at any time:
- Account details, name, phone number and profile picture: edit them directly on your profile page once signed in.
- Transaction and credit usage history: view them in the payment history section of your account.
- Voice samples, projects and output files: view, re-download or delete them directly in your account.
For data you cannot change in the interface, such as your registered email address, send a request to contact@everai.vn from your registered email address. We acknowledge within 24 working hours and complete the change within 3 working days.
Requesting deletion, destruction or restriction of processing
You may request deletion of your data, closure of your account, restriction of processing, or withdrawal of consent previously given, at any time.
How to submit a request
- To delete individual content items (voice samples, projects, output files): do it directly in your account. The data is removed from our systems within 30 days.
- To delete your whole account, restrict processing or withdraw consent: send a request to contact@everai.vn from your registered email address, or call +84 389 468 260.
Process and timescales
- We acknowledge your request within 24 working hours.
- We verify your identity so that nobody can have your data deleted by impersonating you.
- We tell you what data will be deleted, what data we are legally required to keep, and the consequences for your service and remaining credits.
- We carry out the deletion or restriction within 30 days of verifying the request, and confirm to you once it is done.
When we cannot delete immediately
- Transaction records and invoices must be retained for the period required by accounting and tax law.
- Data that is the subject of an unresolved complaint, dispute, or request from a competent state authority.
In these cases we restrict processing of the data, meaning we retain it without using it for any other purpose, and delete it as soon as the retention obligation ends.
Deleting your account invalidates any unused credits, and they are not refunded. If you still hold credits, consider using them up before submitting a deletion request - see Plan changes and refunds.
Complaints about privacy and security
If you believe your personal data has been processed improperly, disclosed, or used for the wrong purpose, you can complain through:
- Email: contact@everai.vn, monitored 24/7.
- Hotline: +84 389 468 260, Monday to Friday, 08:00-17:30 (GMT+7).
- In person: 108 Hoa Thach street, Phu Cat, Hanoi, Vietnam.
How we handle it
- We acknowledge receipt and issue a tracking reference within 24 working hours.
- We investigate using system logs and related records. If we need more information we contact you, and you have 5 working days to supply it.
- We notify you of the outcome and any remedial measures in writing by email within 7 working days of receipt. For complex cases requiring verification with a third party the period may be longer, but no more than 30 days, and we will explain why.
- If you disagree with the outcome, you may ask us to review it once within 7 days; we reply within 5 working days.
In addition to our own complaints channel, you always have the right to complain to the competent state authority for personal data protection.
Legal basis
This policy is built on and implemented in accordance with:
- Law on Personal Data Protection No. 91/2025/QH15;
- Decree No. 356/2025/ND-CP detailing a number of articles of the Law on Personal Data Protection;
- Law on E-commerce No. 122/2025/QH15;
- Decree No. 248/2026/ND-CP dated 30 June 2026 detailing a number of articles of the Law on E-commerce;
- The Law on Protection of Consumer Rights and other relevant legislation.
Changes to this policy
We may update this policy when the service or the law changes. Updates are published on this page together with the update date. For changes that materially affect your rights over your personal data, we notify you at your registered email address before they take effect.