Privacy policy

Last updated 4 September 2026

Draft for launch — this is not legal advice. A qualified Vietnamese lawyer should review it before launch, in particular for compliance with the Personal Data Protection Law (Law No. 91/2025/QH15, effective 1 January 2026) and Decree 356/2025/ND-CP, including cross-border transfer paperwork and any data-processing impact assessment.

1. Who we are

HelpRent Da Nang (“we”, “us”) operates an online rental noticeboard for Da Nang, Vietnam. You can reach us through the HelpRent Da Nang bot on Telegram, the Mai chat on this site, or the feedback form — the form needs no account.

2. Scope and legal basis

This policy reflects Vietnam’s Personal Data Protection Law (Law No. 91/2025/QH15) and Decree 356/2025/ND-CP.

Where you use the bot or sign in, we process your personal data on the basis of your explicit, specific, and informed consent, which you give before using the service and can withdraw at any time.

Two other cases exist and we state them plainly rather than implying that consent covers everything. First, several forms on this site — feedback, “find me a place”, and the building report — are deliberately open and ask for no account, so whatever you type there is processed because you chose to send it, not because you passed a consent screen. Second, the listings in our catalogue are collected from public posts on Facebook, Telegram and Chợ Tốt, and the people who wrote them have not agreed to anything with us; see “Listings collected from public sources” below.

3. What we collect

Contact identity: your Telegram display name and @username — your verified contact for introductions.
What you tell Mai: your search criteria (city, area, budget, bedrooms, dates, pets) or, for Hosts, your listing details.
Activity: connection requests and introductions, and the messages you send to Mai (used to search; we do not store the renter–Host chat after contacts are exchanged).
Billing (Hosts only): the payment-proof image you send for a top-up, and your balance/ledger records.
Consent records: the fact, version, and time of your consent.
Analytics: events such as listing views, interest clicks, and connections, to operate and improve the service.
A hashed form of your IP address: stored with analytics events, form submissions and reports, and used to rate-limit abuse. We do not store the address itself.
What you send through the open forms: the text of a feedback message, a “find me a place” request or a building report, together with whatever contact you chose to leave in it.

We use Google Analytics to understand how the site is used (see Cookies below). We do not use advertising cookies.

3a. Listings collected from public sources

Most of the listings on this site were not posted by us or by their owners. They are collected from public posts in Facebook groups, public Telegram channels and the Chợ Tốt board, and they are shown together with the seller’s own public contact details, the address of the property and its photographs.

The people who wrote those posts have no account with us and have given us no consent. Photographs from Chợ Tốt are shown from Chợ Tốt’s own servers and are not copied to ours; photographs from Facebook and Telegram are stored on our server.

If one of these listings is yours and you want it taken down, tell us and we will remove it. Use the building report form or the feedback form — neither needs an account, and naming the listing or its address is enough. We do not require you to prove ownership before removing something at the request of the person whose contact details are on it.

4. Why we use it

To match renters with suitable listings, deliver mutual contacts when both sides agree, bill Hosts for delivered introductions, moderate listings and prevent fraud and abuse, provide the Mai assistant and translate listing text, and analyse and improve the service. We follow purpose limitation and data minimisation.

5. AI processing

We use third-party AI providers to power the Mai assistant, translate and rewrite listing descriptions, classify incoming posts and screen listing photographs. The text you send to Mai, the text of collected posts and the photographs attached to them may be sent to these providers for processing. They are:

DeepSeek — text: the assistant, translation, classification.
Google (Gemini API) — photographs of listings.
OpenRouter — a routing service used when the providers above are unavailable. It forwards the request to a model of its own choosing, so the final processor in that case is not fixed in advance.

6. Where your data is processed (cross-border transfer)

The site and its database run on a single server we rent in Lauterbourg, France (European Union). The AI providers named above and Google (analytics) process data on their own infrastructure. Your personal data is therefore transferred to and stored outside Vietnam. By consenting, you agree to this cross-border processing; we will complete the cross-border transfer requirements under the Personal Data Protection Law as applicable.

7. Sharing

Between a renter and a Host who both use this service, we share contact details only when both sides agree to connect.

Separately, for listings collected from public sources (section 3a), the seller’s own public contact is shown to a signed-in visitor who asks for it. The seller has not agreed to this with us; the contact is the one they published themselves in the original post. If that is you, see section 3a for how to have it removed.

We rely on the processors named above to run the service. We do not sell your personal data.

8. Retention

Analytics events are deleted after 365 days and reports after 180 days. Saved searches expire after 90 days of inactivity. Consent records are kept for compliance.

Listings and the seller contacts attached to them have no automatic deletion date: a listing stops being shown 30 to 90 days after it was posted, depending on the source, but the record stays in our database until it is deleted by hand. We would rather say this than imply a schedule that does not exist. If a listing is yours, section 3a is how to have the record removed.

You can ask us to delete your data (see your rights below).

9. Your rights

Under the Personal Data Protection Law you have the right to be informed; to give and to withdraw consent; to access, correct, and request deletion of your data; and to object to or restrict certain processing. To exercise a right, contact us through the bot, the Mai chat on this site, or the feedback form; if the data in question is a listing, the building report form reaches us fastest. None of the forms needs an account. Withdrawing consent may mean we can no longer provide the service to you.

10. Security

We apply reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure.

11. Children

The service is intended for adults and is not directed at children. Do not use it if you are under 18.

12. Cookies

The website uses functional cookies — a session cookie (to keep you signed in where applicable) and a language-preference cookie — and Google Analytics cookies (_ga, _ga_*), which help us measure how the site is used (pages visited, approximate location, device type). Analytics data is processed by Google under its own privacy policy. We do not show a cookie banner, so the analytics cookies are set when you open the site; you can block them in your browser settings or with a content blocker, and the site works fully without them. We do not use advertising cookies.

13. Changes

We may update this policy and will change the “last updated” date above.