Privacy Policy

1. Who we are

The Trano AI service (trano.ai, app.trano.ai and the pages users create on sites.trano.ai or on their own domains) is provided by TRANO TECHNOLOGY AND DIGITAL SOLUTIONS COMPANY LIMITED (TRANO TECH CO., LTD) ("Trano", "we").

• Enterprise / tax code: 0319730113 — issued on 01/10/2026 by the Business Registration Office of Ho Chi Minh City
• Registered Vietnamese name: CÔNG TY TNHH CÔNG NGHỆ VÀ GIẢI PHÁP SỐ TRANO
• Address: B199A Dong Hung Thuan 13 Street, Quarter 25, Dong Hung Thuan Ward, Ho Chi Minh City, Vietnam
• Legal representative: Le Quoc Hoang — Director
• Personal data contact: [email protected]

2. Who this policy applies to

Trano processes data about two groups of people, in two different roles:

3. Data we collect from Trano users

Trano does not ask for or need sensitive personal data (health, religion, biometrics, personal finances…). Please do not enter such data in idea descriptions or page content.

4. How we use data

5. Artificial intelligence (AI)

• To create and edit pages, Trano sends your idea description, the business information you enter and your AI chat messages to AI model providers (section 8).
• Before anything is sent to an AI provider, phone numbers and email addresses are replaced with temporary placeholders; the AI never receives real contact details.
• Trano does not send your page visitors' data (form submissions, leads) to AI providers.
• Images you upload are checked automatically for prohibited content.
• Trano does not use your content to train AI models.
• Content generation is automated processing: the AI suggests content from the information you enter and makes no decisions affecting your rights. You can choose not to use AI (write content yourself or use ready-made templates), and you should not enter personal data in descriptions (Decree 356/2025/ND-CP, Article 10.3).
• AI-generated content may be inaccurate; you are responsible for reviewing it before publishing.

6. Cookies and browser storage

The Trano app and website do not use advertising cookies or third-party analytics tools. Trano uses:

You can delete or block this data in your browser settings; some features (signing in) will then stop working.

7. Data of visitors to pages created by users

This section is for people who view or fill in forms on pages created by Trano users (for example, a spa's page).

• Who is responsible: the page owner (the Trano user) is the controller of your data. Trano stores and forwards data on the page owner's instructions and does not use it for Trano's own purposes. To view, correct or delete your data or withdraw consent, contact the page owner; Trano will help the page owner do so. If you cannot reach the page owner, send your request to [email protected].
• Data stored when you submit a form: name, phone number, email, message, other form fields (e.g. booking date and time, branch, delivery address), the page and ad source you came from, the time and wording of the consent statement (if the form has a consent box), and your IP address as a one-way hash to prevent spam.
• When you only view a page: Trano counts daily views and sets no tracking cookies. To avoid double counting, a temporary code derived from your IP and browser is kept for up to 30 minutes and then deleted automatically. If the page owner runs an A/B test of two page versions, a _trano_ab_… cookie remembers the version you saw for 30 days.
• Information is sent to the page owner through the channels they choose: email, Telegram, Slack, Discord, Google Sheets, Zalo, Zapier / Make or another webhook. These channels are configured by, and the responsibility of, the page owner.
• Third-party services on the page: pages load fonts from Google Fonts (your browser sends your IP address to Google). Page owners may add their own measurement tools (Google Analytics, Google Tag Manager, Facebook Pixel, TikTok Pixel, Cloudflare Web Analytics), custom code or embedded content (maps, videos) — these services collect data under their own policies, and the page owner is responsible for informing you and obtaining consent where the law requires it. Trano provides a built-in option to ask for your consent before measurement tools are turned on (on by default when a page owner adds a new measurement tool): when enabled, the page shows a small bar at the bottom with Accept / Decline buttons, measurement tools run only after you accept, and your choice is remembered in your browser. This option does not cover custom code added by the page owner.
• Retention: decided by the page owner; data is deleted when the page owner deletes that information or deletes the page (section 10).

8. Recipients of data

Trano does not sell personal data. Trano shares data only with the service providers needed to run the service, under contract and only to the extent necessary:

When Trano adds a new provider that receives personal data, this policy is updated before the change takes effect (section 14).

9. Transfers of data outside Vietnam

Most providers in section 8 have servers outside Vietnam (United States, EU, China), so your data is transferred abroad for processing. Trano:

• transfers only the data needed for each purpose;
• chooses providers with contractual security commitments;
• prepares and files a cross-border personal data transfer impact assessment with the Department of Cybersecurity and High-Tech Crime Prevention (A05) — Ministry of Public Security within 60 days of the first transfer (Article 20, Law 91/2025);
• keeps a copy of account data and the sign-in log in Vietnam, updated daily and encrypted in transit and at rest (Decree 333/2026/ND-CP, Article 19.2).

Users in the EU / UK: see section 15.

10. Retention

11. Security

• All connections use HTTPS; data stored on Cloudflare's infrastructure is encrypted at rest to Cloudflare's standards.
• Sign-in goes through Google Firebase; every request to the system checks the sign-in session.
• IP addresses are one-way hashed where they must be kept longer (except the sign-in log required by law); rate limiting protects against password guessing and spam.
• Page content is filtered for malicious code before publishing; published pages run on a domain separate from the app.
• Internal admin access is limited per account; important admin actions (plan changes, credits, page status, templates) are logged.
• Data breaches: Trano notifies A05 — Ministry of Public Security no later than 72 hours after discovering a breach that may harm you, and notifies you when a breach affects you (Article 23.1, Law 91/2025).

No system is perfectly secure; if you find a vulnerability, please report it to [email protected].

12. Your rights

Under the Personal Data Protection Law (Article 4.1, Law 91/2025), you have the right to:

• be informed about the processing of your data (this policy);
• consent or refuse consent; withdraw consent at any time (without affecting earlier processing);
• access, view and correct your data;
• request deletion of your data; request restriction of processing;
• request a copy of your data;
• object to processing;
• request measures to protect your data;
• file complaints, denunciations or lawsuits; claim compensation for damage as provided by law.

How to exercise them: edit directly in the app (account, pages, Brand Kit); delete your account yourself under Profile → Danger zone → "Delete account" (all pages are taken down and deleted, customer information is deleted, remaining credits and paid plan time are cancelled; if your plan renews automatically, cancel the renewal first); or email [email protected] from your account email.

Trano responds within 2 working days. Time limits for carrying out requests: withdrawal of consent, restriction, objection — 15 days; viewing, correction, providing a copy — 10 days; deletion — 20 days; each may be extended once with reasons (Decree 356/2025/ND-CP, Article 5). Trano may refuse or keep part of the data where the law requires it to be kept (e.g. accounting records) and will explain why.

Turning off emails: every weekly report and guide email has an unsubscribe link; promotions are sent only if you have consented.

Complaints: if you are not satisfied with how Trano handles your data, you may complain to the Department of Cybersecurity and High-Tech Crime Prevention (A05) — Ministry of Public Security.

13. Age

Trano is a tool for businesses, intended for people aged 18 or over. Trano does not knowingly collect data from people under 18; if you become aware of such data, please let us know so we can delete it.

14. Changes to this policy

When we make significant changes (new purposes, new recipients abroad…), Trano notifies you by email and in the app before they take effect. The update date is shown at the top of this page.

15. Users in the European Union and the United Kingdom

• The GDPR / UK GDPR applies when you are in the EU / UK. Legal bases: performance of a contract (section 4), consent (promotions), legitimate interests (preventing abuse, improving the service), legal obligation (accounting).
• Data is transferred outside the EU / UK to the providers in section 8 on the basis of Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework, depending on the provider.
• You have the right to lodge a complaint with the data protection authority where you live.

16. Contact

TRANO TECHNOLOGY AND DIGITAL SOLUTIONS COMPANY LIMITED (TRANO TECH CO., LTD) — [email protected] — B199A Dong Hung Thuan 13 Street, Quarter 25, Dong Hung Thuan Ward, Ho Chi Minh City, Vietnam — trano.ai/contact