1. Who we are
Huy Hanh Marketing operates digital marketing and automation services at huyhanhmarketing.io.vn. This policy applies to our website; the Google OAuth application identified on the consent screen as n8n OAuth; and authorized marketing, reporting, publishing, lead processing and automation integrations with Google, Facebook and Instagram. Different apps process only data relevant to their enabled features and approved permissions. Product-specific notices, including the Nha Si Ech Dental privacy notice, may provide additional details.
2. Google information we may process
Depending on the Google services and permissions that you explicitly authorize, the application may process:
- Basic Google account information such as name, email address, and account identifier.
- OAuth authorization credentials and tokens required to maintain an authorized connection.
- Google service data only within the OAuth scopes displayed to you and approved by you.
- Workflow inputs, outputs, timestamps, technical logs, and error information needed to operate, secure, or troubleshoot the service.
The exact permissions requested are shown by Google before access is granted. We do not access Google user data outside the permissions you approve.
3. Meta Platform data we may process
When an authorized user or business connects a Meta account, Facebook Page, Instagram professional account or advertising account, we may process the following information, only as relevant to the enabled functionality and permissions granted:
- Basic profile data, app-scoped account/user IDs, usernames and login status when provided through authorized Meta login.
- Facebook Page and Instagram professional account IDs, names, settings, metadata and connected-account status.
- Advertising account, campaign, ad set and ad IDs, settings, delivery information, insights, spend and performance metrics.
- Authorized Page or Instagram content: posts, media, captions, comments, publishing selections and post status.
- Messages, sender IDs and conversation metadata when an authorized messaging workflow requires them.
- Meta Lead Ads responses, such as names, telephone numbers, email addresses and answers submitted to lead forms, when a business authorizes lead retrieval.
- Access tokens, webhook event metadata, technical errors, timestamps and logs necessary for operating or securing integrations.
These categories describe the range of supported integrations; not every app processes every category. Some data is processed temporarily and is not saved. We do not access Platform Data outside the relevant permissions and the features authorized by the account or business.
4. Use of Meta Platform data
We use authorized Meta Platform data to authenticate accounts, provide campaign monitoring and reporting, manage approved publishing workflows, route leads to the business and its chosen CRM or personnel, support permitted customer communication, maintain account connections, and diagnose and secure the service.
When working for a client business, that business may determine the purpose and recipients of its customer data. We do not intentionally transfer one client's account data to unrelated clients. We do not sell Meta Platform data, use it for unrelated advertising profiling, or use it to train general-purpose AI models. If an authorized workflow uses an AI or third-party processor, its use must comply with applicable platform requirements and the business's authorization.
5. How Google user data is used
Google user data is used only to provide or improve user-facing functionality requested by the authorized user. This can include retrieving or processing information needed by an automation, creating or updating information through a Google service when explicitly configured, generating reports or alerts, maintaining the authorized connection, and diagnosing failures.
6. Data sharing and disclosure
We do not sell Google user data or Meta Platform data. Information may be transferred only when needed to provide an authorized function: to hosting and infrastructure providers acting on our behalf; to an approved CRM, messaging recipient, or connected service selected by the authorized user or business; or as required by applicable law and service security. We restrict third-party disclosures to the information reasonably needed for that purpose. Client businesses remain responsible for relevant legal bases and notices for personal data they authorize us to process.
7. Data storage and security
We apply reasonable technical and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction. OAuth credentials and access tokens are treated as confidential authentication information and are used only for authorized connections. We aim to minimize access to records, limit exposure of credentials, and protect operational logs. No storage or transmission mechanism is entirely risk-free.
8. Data retention and deletion
Information is retained only for as long as reasonably necessary to operate authorized workflows, maintain security, troubleshoot technical issues, comply with legal obligations, or resolve disputes. Users may request deletion of personal information controlled by Huy Hanh Marketing through our Data Deletion Instructions or by contacting huyhanh.hum@gmail.com or admin@huyhanhmarketing.io.vn.
After authorization is revoked or an integration ends, we stop using that authorization for future access. Revocation alone may not erase data already stored. We delete or de-identify information when no longer needed, when a verified request applies, or as required by platform terms or law. Limited technical records or backups may remain where necessary for security, disputes or legal compliance, subject to appropriate restrictions.
9. Your choices and control
You may decline requested OAuth permissions, disable a workflow, disconnect an integration, revoke the application's Google Account access through your Google Account security settings, or contact us to request access, correction, or deletion of personal information that we control, subject to applicable law.
10. Third-party services
Automation workflows may interact with third-party services selected by the user, including Google, n8n, messaging platforms, advertising platforms, CRM systems, and hosting providers. Those services operate under their own privacy policies and terms.
11. Children's privacy
The service is not directed to children under the age required to independently consent to online services in their jurisdiction, and we do not knowingly collect children's personal information through our applications and integrations.
12. Changes to this policy
We may update this Privacy Policy when our apps, permissions, platform API scopes, legal requirements, or data practices change. The effective date shown above will be updated when material revisions are published.
13. Website data and cookies
Standard website infrastructure may process request metadata such as IP address, browser type, device information, pages requested and access times for delivery, troubleshooting and security. Cookies or similar technologies may be used when required by website features or installed third-party tools. Any analytics or advertising technologies must follow applicable notices and consent rules.
14. Contact
For privacy questions, data requests, or data deletion requests, contact huyhanh.hum@gmail.com or admin@huyhanhmarketing.io.vn.