Skip to main content
Hedra Up

Privacy policy

Effective date: 10/10/2026

This policy explains how Hedra Up (hedraup.com) processes your personal data, in line with Vietnam’s Law on Personal Data Protection No. 91/2025/QH15 and Decree 356/2025/ND-CP guiding its implementation.

1. Data controller and processor

Hedra Up is operated by an individual who owns the hedraup.com domain. Official contact details for the data controller will be published in this section before the service opens to the wider public.

2. Data we collect

  • Account information: name, email address and profile picture provided by Google when you sign in with Google, or your email when you use an email sign-in link.
  • Content you create: post text, attached file details (name, type, size), scheduled times, your channel list and channel display names.
  • Media source settings: Google Drive folder link/ID, Cloudflare R2 Account ID, bucket name and public URL. We do not collect R2 access keys through the browser.
  • Technical data: sign-in session cookies; anonymous, cookie-less page view and load-speed statistics (Vercel Web Analytics, Speed Insights); and only if you consent to “Analytics”: visit data via Google Analytics 4 cookies.

We do not collect sensitive personal data.

3. Purposes and legal basis

We process data to: create and maintain your account; store and display your channels, posts and schedule; secure the service; and improve the product through anonymous statistics. The legal basis is your consent when you sign up/sign in and the performance of the service you request.

4. Retention

Data is kept while your account is active. When you delete a post or channel, it is removed from the primary database. When you ask to delete your account, data linked to it is deleted unless the law requires retention.

5. Sharing and cross-border transfer

We do not sell personal data. Data is processed by the following infrastructure providers, which may host servers outside Vietnam:

  • Supabase (database and authentication; servers in Singapore).
  • Vercel (website hosting and operation; anonymous analytics).
  • Cloudflare (DNS and network protection).
  • Google (Sign in with Google, when you choose it; Google Analytics 4, only if you consent to “Analytics”).

Transfers abroad are made to provide the service and follow the cross-border transfer rules of Law 91/2025/QH15 and Decree 356/2025/ND-CP.

6. Security measures

Connections are encrypted (HTTPS). Every data table enforces row-level access control: an account can only read and edit its own data. System admin keys stay server-side only.

7. Your rights

You have the right to be informed, to consent or withdraw consent, to access, correct and delete your data, to restrict or object to processing, to request a copy of your data, to complain and to claim damages as provided by law. You can delete posts and channels yourself in the app; for other requests, use the contact details in section 1 once published.

8. Cookies

Hedra Up uses cookies needed for the sign-in session. Google Analytics cookies are only set if you consent; you can withdraw at any time via “Cookie preferences” at the bottom of the page. See the Cookie policy.

9. Effective date and updates

This policy is effective from 10 October 2026. When it changes, we update the effective date on this page and notify you in the app for important changes.