Privacy policy

Last updated: 31 Oct 2026

This page explains how COURSE (“we”) collects, uses, shares and protects your personal information when you learn, teach or otherwise use this online classroom. By creating an account or continuing to use the system you agree to this policy.

1. Information we collect

We only collect what is needed for learning, teaching and payment:

Account: your name, email, phone number (if you give one) and password. Passwords are stored hashed; we cannot read your password.
Third-party sign-in: when you sign in with Google, Microsoft (Outlook), Facebook or EngNote we receive that account’s identifier, your name and your email (if you allow it). We never receive the passwords of those accounts, post on your behalf, or read your friends list or content on those services.
Profile (optional): photo, date of birth, ID, insurance, health details and attachments where your class or institution requires them. Only you and administrators can see this part; class teachers see the basic part only.
Learning data: classes and courses you enrolled in, progress, quiz results, certificates, notes, submissions (for example handwriting photos and speaking tasks) and class messages.
Attendance photos and exam-proctoring video: only when your class turns these features on; your browser asks your permission before using the camera.
Teacher application: photos of your ID and the details you submit for review. ID photos are visible only to reviewers and administrators and are never public.
Payment: order contents, amount, transaction code and payment status. Your card and bank account details are entered on the payment provider’s own page (MoMo, VNPay, your bank); this system does not store them.
Technical data: IP address, browser and device type, access times and the administration audit log, used for security and troubleshooting.

2. How we use it

To create and protect your account, authenticate sign-ins and recover passwords.
To run classes: enrolment, assigning and marking work, attendance, issuing certificates and communication between learners and teachers.
To process payments, refunds and reconciliation, and to pay teachers or sellers where applicable.
To send emails about your account, schedule, reminders and important system notices.
To keep the system safe, detect abuse and improve it.

We do not sell your personal information and do not use it for third-party advertising.

3. Who can see your information

The teachers of classes you join: your basic details, progress, results and submissions in that class.
System administrators, within the permissions they have been granted.
Service providers the system needs: payment providers (MoMo, VNPay, banks), the email server, the Google / Microsoft / Facebook / EngNote sign-in services, and text-recognition or AI services if an administrator turns them on. They receive only the data needed for that task.
Speaking practice with the microphone: speech recognition is done by your browser (for example Chrome may send audio to the browser vendor) under their policy. Voice / video calls in class run directly between devices, and may be relayed through a server when the network blocks a direct link.
Competent authorities, when required by law.

Content you choose to make public (for example on the community page) is visible to others as you chose.

4. How long we keep it

Account and learning data: kept while the account is active and for as long as needed to keep payment records and resolve disputes as the law requires.
Attendance photos: deleted automatically 90 days after the class ends (the attendance log entry is kept, the photo is not).
Exam-proctoring video: deleted automatically 90 days after the class ends.
When you ask us to delete your account we delete or anonymise your personal data, except what the law requires us to keep (for example payment records).

5. Cookies and browser storage

We only use cookies the site needs to work: your sign-in session, a form anti-forgery token, short-lived state while you sign in with Google / Microsoft / Facebook, and your language and light / dark preferences. We do not use third-party advertising or tracking cookies. You can delete cookies in your browser, but you will then be signed out.

6. Security

We use encrypted connections (HTTPS), store passwords hashed, limit access by role (learner, teacher, administrator) and keep an audit log of administration actions. No system is perfectly secure; if an incident affects your data we will notify you as the law requires.

7. Your rights

Under Vietnam’s Decree 13/2023/ND-CP on personal data protection and related rules, you have the right to:

know about and view the personal data we process about you;
correct inaccurate data (most of it you can edit yourself in “Profile”);
withdraw consent, and ask us to restrict processing or delete your data;
object to processing and complain if you believe your rights were infringed.

To exercise these rights contact us as described in section 10. Some requests (such as deleting payment records) may be partly refused where the law requires us to keep the data.

How to ask us to delete your personal data

8. Children

People under 16 (children under Vietnamese law) need a parent’s or guardian’s consent to create an account. If you are a parent or guardian and believe a child gave us information without permission, contact us and we will delete it.

9. Changes to this policy

When something important changes we update this page and the “Last updated” date at the top; for big changes we will also tell you by email or inside the system.

10. Contact

For any question or request about your personal data please email admin@netbox.vn. We will reply as soon as we can.