Privacy policy

This English text is a translation provided for convenience. If it differs from the Vietnamese version, the Vietnamese version prevails.

Effective from: 23/10/2026

Last updated: 06/11/2026

1. Three things Vcil commits to

The first time you sign in, you read the notice "Your data at Vcil" and tick that you agree. This policy is built on that notice's three commitments, and explains what each one means in practice:

• What you tell us and what you do in the member space (profile, contributions, programmes joined, Lúa) is kept by Vcil to run the community and for internal reports. Vcil does not sell it or share it outside; only the technical services that run the website process it on Vcil's behalf.
• When you are no longer a member, your data is hidden from other members and is still kept for internal reports.
• You can ask to see it, get a copy, or have your personal data erased at any time. Write to us at vcil.group@gmail.com.

We ask only for what a feature really needs. Day to day, Vcil locks or hides rather than deletes, so the community's shared history (conversations, each person's Lúa) stays clear. When you ask for erasure, your personal details are removed from those records (section 11).

2. Who this policy is for

Vcil Community is a learning and social-innovation community based in Đà Nẵng. This policy covers vcil.community:

• the public pages: about, programmes, blog, courses, Chợ Tử Tế;
• the members' area (/members) and its apps;
• the Hành trình (journey) page for the participants of a programme;
• the event registration pages for people who are not members, once that feature opens.

It is about three groups of people: visitors to the public pages, members, and guests (people invited to a Hành trình, or registering for an event without an account). Your use of the website is also governed by our Terms of Service.

Some things happen on other services and follow their own policies: joining and paying the membership fee on Nas.io; event registration on Luma (until Vcil's own Events page opens); the Zalo group; the newsletter on Substack; Vcil's pages on Facebook, YouTube and LinkedIn.

3. If you only visit the public pages

• You need no account, and the public pages set no cookie in your browser.
• The website runs no behaviour analytics and no ads, and does not follow you to other sites.
• The site runs on Cloudflare's network. As with any website, Cloudflare receives your IP address and browser details to deliver the page to you and to block harmful traffic.
• Videos, maps and content embedded from elsewhere (YouTube, Vimeo, Facebook, Canva…) load only when you click them. That service then connects directly to your browser, under its own policy.
• The members map on the public pages shows only totals: no names, no dot for any one person, and groups under 5 people are merged.
• Search looks only through content that has a public page, such as posts, projects, programmes and courses. Members' profiles and contact details are never in search results.

4. Members: what Vcil keeps

Account and sign-in

• The email you joined with, your display name, member id, status (active, pending, ended, blocked) and roles (for example core team, Vcil's coordinating group). Every change of status or role is recorded, with who made it.
• When you agreed to the notice "Your data at Vcil", which version of it, and the language you read it in.
• The website has no passwords. You sign in with an email that holds a link and a 6-digit code, both valid for 15 minutes, or with a passkey on your device. Sign-in codes are never stored in readable form and are deleted as soon as they are used or expire.
• There is no self-sign-up on the site. After you join and pay, the core team adds you to the members list.

Membership fee

• You join and pay on Nas.io or by bank transfer. The core team records who paid, the amount, the date and how, to know who has access to the members' area. Only the core team sees these records.
• The core team sends reminder emails before and after a membership expires.

Your profile in Danh bạ (the member directory)

• What you fill in yourself: name, photo, where you live (province, city or country), work, introduction, dream, interests and ways to contact you.
• A new profile starts hidden. You choose whether it shows in Danh bạ, and switch on each contact way separately (email, phone, Zalo, Facebook, website, LinkedIn); a way you have not switched on is seen by nobody. A profile carried over from the old system keeps the choice you made there.
• Your photo is cropped on your own device and stripped of hidden data in the image (such as where it was taken). Only signed-in active members can see it, and only while your profile is shown; then it goes with your name in Cộng đồng, Events and Hành trình. While your profile is hidden, others see only your initials; you still see your own photo.
• Some details carried over from the old system, such as birth year or a note from when you joined, are never shown to anyone. Birth year is used only to count members by age group in totals.

Lúa wallet

• Lúa are the community's internal recognition points: they recognise what each person contributes to the community.
• Each member has one wallet: the wallet id, display name (and earlier names), the email that links the wallet to your account, the balance, and the history of what was sent and received: who sent, who received, how many Lúa, the note, and when.
• The Lúa history is only ever added to, never changed or deleted, so everyone's balance can always be explained.
• Sender and receiver see each other's names. Other members find your wallet by your display name to send you Lúa. The Lúa managers on the core team can see every wallet, the whole history and the list of Lúa emails sent.
• When your Lúa balance changes, Vcil emails you about it. From November 2026 you also get an email when Lúa in your wallet moves to the Community Fund under the monthly rule; these emails go out only once the core team has confirmed how many will be sent. The core team can pause each kind of Lúa email; the emails are then held, and sent later or cancelled. Vcil keeps a copy of each Lúa email sent to you.

Cộng đồng (forum and Góp ý)

• Your posts, replies, their earlier versions, and the name you wrote under. Every member can read posts that are visible.
• When you send a Góp ý (a request), you may add the device you use.
• You can withdraw your own posts, and download everything you have written ("Tải bài viết của tôi").
• An email telling you someone replied is sent only if you tick the box yourself, separately for each topic. Every email has a link that stops it in one click.

Chợ Cho & Nhận (Offers & Needs) and Chợ việc làm (Job Market)

• Your listing (its text, place, photo if any, and ways to contact you) is shown to every signed-in active member, and only they can see its photo. Photos are stripped of hidden data before they are stored.
• Anyone with a listing's share link sees its title and description, never its photo, contacts or the poster's name.
• When you press "Tôi quan tâm" (I'm interested), the poster sees your name, your message and the contact you leave (or your account email if you leave it empty), and gets an email about it.

Library

• Your borrow requests, returns, favourites and waitlist. Only you and the library managers know what you borrow.

Courses

• Your course enrolment (name, email, and phone and a note if you give them), your progress and your comments on lessons. Comments show with your name to the members who can open that lesson.
• For a paid course, you pay by bank transfer with a reference code. The course manager matches it against the bank statement, confirms it, and emails you a receipt. Only you and the manager can see the receipt.

Báo lỗi (bug reports)

• Your description, up to 3 screenshots, and technical details the page attaches: the page you were on and a few before it, your browser, language, time zone, screen size, network type, and errors the page ran into. You see all of it before sending, and nothing leaves your device until you press send. Email addresses, access codes and the part of a page address after "?" are filtered out.
• You and the core team can see your report. The core team uses the AI assistant Claude (by Anthropic) to read, reproduce and fix bugs, and to help the core team run the website technically, with aggregate figures and without using personal data for anything else; the assistant's messages are always marked as coming from the AI assistant.
• Screenshots are kept in the website's shared media library, which the site's content staff can see.
• Update emails are sent only if you ask for them, with a link to stop them.

Events (once Vcil's Events page opens)

• When you register: your name, email, answers to the host's questions, and your feedback after the event if you write some. The host, co-hosts and the core team see these to run the event; other people who register do not. The event page shows only how many have registered, never their names.
• When you host an event, your name shows on its page to everyone who can see the event, even while your Danh bạ profile is hidden.
• When you are no longer a member, the hosts of events you registered for see «Cựu hội viên» (former member) instead of your name, email and answers; the core team still sees everything.
• The name on feedback after an event is removed after 12 months.

Chợ Tử Tế

• The market is paused. When it reopens: an order holds the buyer's name, phone number, delivery address and note; a stall holds the seller's contacts, certificates and payout details.
• Buyers pay sellers directly; Vcil holds no money. A seller's payout details show only on the buyer's own order page. Certificates are never public.
• Lúa recognition for a buyer is sent by hand by the core team.
• The system flags some orders for a person to review first, for example when both sides share a phone number or an address.

Hành trình (journeys)

• For the people invited to a programme (for example the Vcil Travel School), members or not. Vcil keeps the email and name you registered with, when you last opened the page, the items you tick, and what you write and the photos you post.
• The people on your trip and the organisers can see your name, comments, moments and photos; nobody outside the trip can. Location data is removed from photos before they are stored.
• The map loads its background from OpenStreetMap when you open the Map tab.

5. Guests: if you have no account

• People invited to a Hành trình, and people registering for a public event once that opens, sign in with a 6-digit code sent to their email. The code works for 15 minutes.
• Once the code is right, your browser keeps a sign-in cookie: 30 days for Events, 60 days for Hành trình. The website stores only a one-way hash of it, never the cookie itself.
• Guests' details are kept as members' are: to run the activity and for internal reports, never sold, never shared outside.
• People outside Vcil who are invited to co-host an event (once that feature opens) confirm their email with a 6-digit code. Once you accept the co-host notice, your name and email are kept as a guest's are, even if you never registered for an event.
• Event guests, people who register and outside co-hosts, can download a copy of their own data or erase it at any time on their "Sự kiện của bạn" (Your events) page; the copy can be downloaded only after you have confirmed a code sent to your email in the last 24 hours. For Hành trình, write to vcil.group@gmail.com.
• If you leave your name and email on a members-only event to learn about joining Vcil, only the core team sees them, and they are deleted 90 days after the event.
• If you leave your name and email on a programme's page (such as Vcil Travel School or Ecoversity) to hear when a new cohort opens, only the core team sees them, and they are deleted after 12 months, or sooner once you are invited to a cohort.
• If you send a proposal to initiate an activity in a Learning City (the «Khởi xướng hoạt động» form), only that city's Learning City team and the core team see your phone number, email and what you write, to contact you; once the activity is published, your name, its title, description, time and place are public.
• If you come to an event without registering and the host adds you on the spot, they record your name and your phone number or email; only the host, the co-hosts and the core team see them, and Vcil sends you no email from these details.
• If you offer a space to a Learning City (the «Trao tặng không gian» form), that city's team and the core team see everything you send. Once the space is taken and shown in the festival, everyone sees its name, area, description, capacity and free times; the address only if you choose to show it, the giver's name only if you agree; email, phone and the contact person are never public.

6. Who can see your data

• Other members see what you choose to share: your profile when you switch it on, the contact ways you switch on, your posts and comments, your listings, and your name when the two of you send or receive Lúa. While your profile is hidden, your account name still shows on what you write, without your photo and without a link to a profile.
• The core team sees what it needs to run things: the members list, fee records, course and event registrations, bug reports, posts to review.
• The managers of the Lúa wallets, the library and the market see the data in the part they look after.
• The site's content staff can see the shared media library, which holds bug-report screenshots, listing photos and Hành trình photos. Profile photos are not in it.
• The public sees only public content and totals about members, never any member's profile or contacts. The Network page presents Vcil's advisors and partner organisations with their name, role, photo, introduction and one social link; their email and phone number, if Vcil has them, show nowhere, and only the site's editors and administrators can see them.
• The technical services in section 9 process data on Vcil's behalf, only so the website can run.

Vcil does not sell, rent or share your data outside.

7. Emails Vcil sends you

• Sign-in emails, with a link and a 6-digit code.
• An email when your Lúa balance changes (section 4).
• Emails about what you are doing: someone is interested in your listing, a course receipt, a Hành trình code, event confirmations and reminders; bug-report updates and Cộng đồng replies when you ask for them.
• Now and then, an important announcement to every member, for example when the website changes.

Emails are sent through Cloudflare's email service. When you reply to an email from the site, your reply usually goes to the shared inbox vcil.group@gmail.com. The site's technical logs never record who an email went to or its subject. When you are no longer a member, the apps stop emailing you, except sign-in emails and emails about events you registered for. Vcil sends no advertising.

8. Cookies and browser storage

The public pages set no cookies. When you sign in or use some features, the site uses:

• the astro-session cookie: keeps you signed in; the session itself is kept on Cloudflare's servers;
• the __Host-vcil_guest (Events) and __Host-vcil_journey (Hành trình) cookies: keep guests signed in;
• the vcil_passkey_later cookie: remembers for 30 days that you chose "Later" when asked to create a passkey;
• the browser tab's own storage, cleared when you close the tab: a draft post in Cộng đồng, the technical details for Báo lỗi (sent only if you send a report), a short message and where to return after an Events page reloads;
• the browser's storage: Hành trình remembers that you have seen its guide.

There are no advertising or tracking cookies. These cookies are needed for the site to work; if you block them, you cannot sign in.

9. Where data is kept and processed

• The website's databases and media storage are on Cloudflare, in the Asia-Pacific region. Sign-in sessions and some short-lived data are on Cloudflare's global network. Cloudflare is a US company; its network handles each visit at a data centre near the visitor, which may be outside Vietnam.
• Cloudflare also sends the site's emails.
• The shared inbox vcil.group@gmail.com uses Google's Gmail. Emails you send Vcil, data requests, and short notes to the core team about bug reports and Góp ý are kept there.
• Bug reports are read by Anthropic's AI assistant Claude when the core team works on them.
• Nas.io keeps what you give it when you join and pay there.
• Before moving to the current website in October 2026, Vcil used Webflow, Memberstack and its own apps on Cloudflare. Data on those old systems is kept read-only in case it is needed, and removed step by step as those systems are retired.
• The website's test version uses only made-up people, never members' real data.

10. How long data is kept

While you are a member: for as long as you are.

When you are no longer a member:

• Your account is locked and you can no longer use the member apps; your profile leaves Danh bạ, and the apps stop emailing you. To see or get a copy of your data, write to vcil.group@gmail.com.
• Your Lúa wallet can no longer be found and receives no more Lúa; its history stays as it is. As with every wallet, part of its balance still moves to the Community Fund each month under the shared rule (section 4).
• Your posts in Cộng đồng, and the replies in your topics, are hidden from other members.
• Your lesson comments stay, with your name and without your photo, so conversations stay whole, unless you ask for erasure. Your name also still shows in the Lúa history of the people you sent Lúa to or received it from, and on past events you hosted. On event attendee lists, hosts see «Cựu hội viên» (former member) instead of your name.
• Your data is kept for internal reports. If you come back, your profile and wallet return as they were.

Things with their own time limit:

• Sign-in codes: 15 minutes. Guest sign-ins: 30 days (Events) or 60 days (Hành trình).
• A name and email left to learn about joining: 90 days after the event. The name on feedback after an event: 12 months.
• A name and email left on a programme's page: 12 months, or until you are invited to a cohort.
• The name and contact details in an initiator's proposal: 12 months after the activity's day, or 12 months after the proposal is not taken or is withdrawn.
• The name and contact details of someone added on the spot: one year after the event.
• The email, phone and contact person of an offered space: 12 months after the festival season, or 12 months after the offer is not taken or is withdrawn.
• Fee records keep the payer's name until the core team has checked them.
• Automatic database backups are kept for up to 30 days, then expire.

11. Your rights over your data

You can do these yourself on the site:

• edit your profile, photo, where you live and each contact way; hide or show your profile;
• change your display name in your Lúa wallet (once every 90 days);
• withdraw your posts, and download what you have written in Cộng đồng;
• stop optional emails with the link in each one (sign-in emails and Lúa balance emails come with the account and cannot be switched off on their own);
• as an event guest (registering, or co-hosting from outside Vcil): download a copy of your data (after confirming a code in the last 24 hours) or erase it, on your "Sự kiện của bạn" page.

When you are no longer a member, you do these by email.

Write to vcil.group@gmail.com to:

• see the data Vcil keeps about you, or get a copy;
• correct details you cannot correct yourself;
• erase your personal data;
• ask about any way Vcil uses your data.

To be sure a request comes from you, we answer through the email linked to your account, or meet you in person.

When you ask for erasure:

• If you want a copy, we send it first.
• Your membership ends and your account is locked, so no new data is added and no more emails reach you.
• In each app, your name is replaced with "Cựu hội viên" (former member) and what you wrote with "[Nội dung đã được gỡ theo yêu cầu của tác giả]" (removed at the author's request); your email, phone, address and the copies of emails sent to you are blanked; the files you uploaded are taken down.
• Your email is removed everywhere, the members list included. If you come back later, you are added as a new member.
• The records stay but no longer point to you, so shared totals and other people's conversations stay whole.
• The Lúa ledger keeps its numbers and drops names and notes.
• Fee records keep the payer's name until the core team has checked them, then the name goes; the amount and the date stay.
• We tell you when it is done. Automatic backups expire after up to 30 days, and copies on the old systems are deleted when those systems are retired.

12. How Vcil protects data

• Every connection to the site is encrypted (HTTPS).
• Each time you use an app in the members' area, the site checks again who you are and whether you are an active member, before it returns any data. If it cannot check, it refuses rather than lets you through. Who is acting is always taken from your sign-in, never from what a browser claims.
• Each app runs on its own and can read only its own data.
• There are no passwords to leak. Sign-in codes and guest sessions are never stored in readable form.
• Photos are stripped of hidden data before they are stored.
• Every change to someone's membership is recorded, with who made it.
• Testing, test emails included, uses only made-up people.

No system is perfectly secure. If you notice anything wrong, tell us straight away at vcil.group@gmail.com.

13. Children

The members' area is for people aged 18 and over, as the Terms of Service say. Vcil does not knowingly collect children's data. If you know of such a case, tell us and we will remove it.

14. When this policy changes

The date at the top shows the latest change. If the notice "Your data at Vcil" changes in substance, every member is asked to read it and agree again at their next sign-in.

15. Contact

Vcil Community

Email: vcil.group@gmail.com

Website: https://vcil.community

Data controller: CÔNG TY TNHH ĐỒNG THỊNH VƯỢNG (COMPROS), enterprise code 0317604508.

Address: 9th floor, K&M Tower, 33 Ung Văn Khiêm, Thạnh Mỹ Tây Ward, Ho Chi Minh City, Vietnam.

For any question or request about your personal data, write to vcil.group@gmail.com.