Privacy Policy
Last updated: September 28, 2026
This policy explains how 10xStudio collects, uses, stores and protects your personal data when you use the 10xstudio.org website and its learning services. By using the service, you agree to the data practices described below.
1.Who we are
10xStudio is an AI training and consulting academy for individuals and businesses, run by its founder Phạm Quốc Hùng. 10xStudio is the controller of the personal data you provide through the website.
For any question about your personal data, email hello@10xstudio.org.
2.Data we collect
- Account: full name, email address, password (one-way hashed, we cannot read it) and a profile picture if you upload one.
- Sign in with Google: if you choose this option, see section 3.
- Workshop or consultation sign-up: full name, Zalo phone number, email and the topics you are interested in.
- Orders and payments: order code, course, amount, status, payment time and the bank transfer reference. We never collect or store card numbers, passwords or online banking credentials.
- Learning activity: courses you are enrolled in and lessons you have completed.
- Technical data: IP address, browser type and access time, recorded automatically in server logs to operate and secure the service.
3.Google user data
When you choose Sign in with Google, we only request basic scopes (openid, email, profile) and receive your name, email address, profile picture and Google account identifier.
We use this data only to:
- create your learner account and sign you in;
- show your name and profile picture in the learning area;
- send emails about your account and the courses you purchased.
We do not:
- access your Gmail, Google Drive, Calendar, contacts or any other Google data;
- sell your Google data or use it for advertising;
- transfer your Google data to third parties, except the infrastructure provider needed to operate sign-in (Supabase);
- allow humans to read this data, unless you give consent, it is needed for security purposes, or the law requires it.
10xStudio's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke 10xStudio's access at any time on your Google Account permissions page and request deletion of your data as described in section 9.
4.How we use your data
- Create and manage your account and give you access to the courses you purchased.
- Process orders, reconcile bank transfers and activate courses.
- Save your learning progress so you can continue where you left off.
- Contact you about workshops, courses you signed up for, or support you requested.
- Send transactional emails such as payment confirmations and course unlocks.
- Keep the service secure, prevent fraud and comply with the law.
We only send marketing messages when you have agreed to receive them, and you can opt out at any time.
6.Storage location and security
Data is stored on the servers of the providers listed in section 5, which may be located outside Vietnam (mainly in Singapore). By using the service, you consent to this cross-border transfer for these purposes.
We apply appropriate safeguards: HTTPS encryption in transit, one-way password hashing, row-level security so each learner can only access their own records, and access to order data limited to authorized administrators.
No system is perfectly secure. If an incident affects your data, we will notify you and the relevant authorities as required by law.
7.Data retention
- Account and learning progress: for as long as your account is active. When you request account deletion, we delete it within 30 days.
- Workshop sign-ups: up to 24 months after our last contact, or sooner if you ask.
- Order and payment records: for the period required by accounting and tax law.
- Server logs: for the default retention period of our infrastructure providers.
9.Your rights
Under Vietnamese personal data protection law, you have the right to be informed about processing; to give or withdraw consent; to access and obtain a copy of your data; to request correction or deletion; to restrict or object to processing; and to file a complaint.
You can edit your name and profile picture on your Profile page. For other requests, including account deletion, email hello@10xstudio.org from the address you registered with. We will respond within the time limits set by law.
10.Children
The service is intended for people aged 16 and over. Anyone under 16 should only use it with the consent and supervision of a parent or guardian. If we learn that we collected a child's data without such consent, we will delete it.
11.Changes to this policy
We may update this policy. The latest update date is always shown at the top of the page. For significant changes, we will notify you by email or on the website before they take effect.
12.Contact
- 10xStudio
- Email: hello@10xstudio.org
- Website: 10xstudio.org