1. Legal Basis

The collection, use, and protection of personal information on Weup is carried out in accordance with Vietnamese law, including but not limited to:

• Decree 13/2023/ND-CP on personal data protection.
• Decree 52/2013/ND-CP and Decree 85/2021/ND-CP on e-commerce.
• Cybersecurity Law, Electronic Transactions Law, and other related documents.

2. Scope of Application

This policy applies to all activities of collecting, using, storing, and sharing personal data of users when:

• Accessing Weup website/app.
• Creating an account, logging in (email/password, Google login).
• Purchasing/selling and using ebooks, physical books, online courses, and related services.

3. Information Weup Collects

3.1. Information You Provide

• Full name, email, phone number, password, profile picture, profile information (if any).
• Information related to transactions, invoices, delivery addresses (for physical books).
• Content you create, store, or share on the platform (comments, reviews, assignments...).

3.2. Automatically Collected Information

• Device data: device type, operating system, browser, application version.
• Log information: IP address, access time, pages/features viewed, your interactions with the system.
• Cookies and similar technologies.

Weup does not use cookies to track behavior for third-party advertising purposes.

3.3. Information from Third Parties

• Basic information when you log in with a Google account (e.g., name, email, photo) within the scope you allow.
• Information from partners providing payment services, storage, analytics, and other technical services to the extent necessary to operate the system.

4. Purpose of Using Information

Weup uses data to:

• Create, authenticate, maintain accounts and provide services (reading ebooks, online learning, purchasing physical books, value-added services).
• Process purchase transactions, payments, invoice issuance, goods delivery, and record learning/purchase history.
• Personalize experience (suggest appropriate content, display language/location-based information).
• Send notifications related to accounts, courses, ebooks, recommendations, technical support.
• Analyze, compile statistics to improve services; detect and prevent fraud, violations of terms, ensure system security.

5. Data Processing Basis and Consent

• Weup processes personal data based on: your consent; performance of service contracts; legal obligations; and other lawful bases.
• You may withdraw your consent (within the scope permitted by law); withdrawal may limit the ability to use some features/services.

6. Sharing Personal Data

Weup does not sell your personal data to any third party.

Weup only shares in the following cases:

• With service providers: cloud storage, payment gateways, email/SMS, data analytics... on the basis of confidentiality agreements and to the extent necessary.
• Upon lawful request from competent state authorities or to protect the legitimate rights and interests of Weup, users, and the community.
• When there is your separate consent in each specific case.

7. Data Storage and Security

• Data is stored on servers/cloud services that meet safety standards, with encryption measures, firewalls, access restrictions.
• Passwords are encrypted and not stored in readable form.
• Internal access is limited to authorized and necessary departments and individuals.
• Data is retained for the time necessary for processing purposes, unless the law requires otherwise.
• In the event of a serious data breach, Weup will apply remedial measures and notify as required.

8. Rights of Data Subjects

You have the following rights under personal data protection laws:

• Right to know and be informed about personal data processing.
• Right to access, edit, update personal information in your account.
• Right to request deletion, restriction of data processing (within the scope of law), except when Weup has a legal obligation to retain.
• Right to object, complain, sue when you believe data is processed in violation of regulations.

Contact to exercise rights:

support@weup.vn (or other official contact channels announced on website/app).

9. Cookies and Your Choices

Weup uses cookies with limited scope:

• Save login tokens to maintain login sessions, making it convenient when you return to the system.
• Record location information inferred from IP (e.g., country, region) to display appropriate content.

You can disable cookies in your browser; however, this may cause some features related to login and session saving to not function properly.

10. Privacy Policy Updates

Weup may modify and supplement the Privacy Policy to comply with service changes or legal regulations.

When there are significant changes, Weup will notify on the website/app or via email before implementation, and your continued use of the service thereafter is understood as agreement to the updated version.