Privacy notice

This notice explains how Sonant Consulting Group ("Sonant", "we") handles personal data on this website and in the YCbot chat assistant. We collect as little as we can, and YCbot itself runs on servers in Vietnam. Our approach is designed around Vietnam's Law on Personal Data Protection (Law 91/2025/QH15) and Decree 356/2025/ND-CP.

Two different roles

• On this website, we decide what happens to the details you send us, so we are the data controller.
• In the YCbot chat on a customer's website, the organization that runs that website is the controller. Sonant processes the conversation on its behalf, only on its instructions, under a written data processing agreement. For questions about a conversation on a particular website, contact that website's owner. Their privacy policy has the details.

This website

What we collect. When you request access, we receive your work email, your website address, anything you choose to tell us about your site, and your confirmation that we may contact you.

Cookies. We set one cookie that remembers the language you chose. It is not used for tracking. We use no analytics, advertising or tracking cookies.

Where it is stored. This website and its request form are hosted by Netlify, Inc. What you submit through the form, and the standard server logs our host keeps for security (such as IP address and browser type), are stored on Netlify's servers outside Vietnam. This is the only part of our service not hosted in Vietnam, and it holds nothing from the YCbot chat.

Why we use it. To answer your request and arrange a demo, based on the consent you give by ticking the box on the form. You can withdraw that consent at any time by writing to us.

How long we keep it. For as long as we need it to respond and follow up, and no longer than two years.

Sharing. We do not sell personal data or share it with anyone for marketing.

The YCbot chat

• Before the first message, visitors see who handles their messages and why, how long they are kept, and a reminder not to share personal details. The chat opens only after they agree.
• What is kept: the questions and answers of the conversation, the language used, the time, and any "helpful" or "not helpful" rating. No name, email address or IP address is stored with a conversation.
• Where: on servers in Vietnam, including the language model that writes the answers. Visitor messages are not sent to foreign AI providers.
• Protection: conversations are stored encrypted.
• How long: 90 days by default, or the period the website owner sets. Conversations are then deleted automatically.
• Summaries: after a conversation ends, the website owner's staff see a one-sentence summary written without personal details.
• Visitors' control: a visitor can copy or delete their conversation at any time from the chat menu. Each conversation shows a short reference code the visitor can quote to the website owner later.
• Our use: we do not use conversations for our own purposes, such as training AI models. Sonant staff access a website's conversations only to run the service for that website's owner.

If a visitor includes sensitive details such as ID numbers, health or financial information despite the reminder, those details are treated as sensitive personal data and protected accordingly. The chat is not intended for children under sixteen.

Your rights

Under Law 91/2025/QH15 you may ask to know what personal data we hold about you, to receive a copy, to correct it, to delete it, to restrict or object to its processing, and to withdraw your consent. You may also complain to the competent authority.

• About this website: write to hello@sonant.vn. We acknowledge requests within two business days and act on them within the time limits set by Decree 356/2025/ND-CP.
• About a chat conversation: delete it yourself from the chat menu, or contact the website's owner and quote the conversation's reference code. Without the code, no one, including us, can tell which conversation is yours. It is deleted at the end of the retention period in any case.

Security and incidents

How we protect data is described on our security page. If an incident affects personal data, we inform the affected customers without delay so they can meet their duty to report it to the authorities within 72 hours, and we report it ourselves where the law requires.

Changes

If this notice changes, we update the date at the top of this page.

Contact

Sonant Consulting Group, hello@sonant.vn.