Privacy Policy

Operator and contact

SkyTruong is operated by an individual under the SkyTruong brand. This policy covers skytruong.com, the customer App and the operations Console. Contact hello@skytruong.com for data-related requests.

Information we process

We process your name, email, profile and sign-in details; sessions, IP addresses, device/browser information and security logs; plan requests, payment reconciliation details, API keys, limits and usage. Password accounts store password hashes rather than original passwords.

When you use the tools, we process text, prompts, responses, generated images/audio and associated history to provide the service. Avoid including passwords, secret API keys or unnecessary personal data in your requests.

Google sign-in

If you choose Google, SkyTruong requests openid, email and profile to receive your account identifier, name, email/verification status and profile image. We use these details to authenticate, link your account and display your profile. We do not request Gmail, Drive or Contacts access.

Code exchange and profile retrieval happen on the server. The current sign-in flow does not store Google refresh tokens for offline access. You can manage SkyTruong access in your Google account; revoking Google access does not automatically delete your SkyTruong account or history.

Purposes and recipients

Information supports account operation, access/plan approval, requests, history, usage limits, reconciliation, support and system security. Security emails, service notices and daily usage reports support these activities.

Chat, Image and API content may be sent to configured model providers to process your requests. Storage, hosting and email infrastructure also process information needed for the service. Processing may occur outside Vietnam depending on the provider. Contact us before submitting data with special storage or processing requirements.

VieNeu speech generation runs on self-hosted infrastructure. WAV access requires authentication and ownership checks. Generated images may be accessible to anyone holding the corresponding CDN URL; consider this before sharing or generating images containing private information.

Cookies and access

Cookies maintain sign-in and verify Google OAuth state. Authentication cookies are host-only, Secure, HttpOnly and SameSite=Lax. Application sessions last up to 12 hours; OAuth state cookies up to 10 minutes. You can sign out and revoke sessions from your account.

Cookie expiry does not immediately delete logs or database records. Data access is limited by account and operational responsibilities; no security measure can guarantee protection against every risk.

Retention and deletion

Account information and history remain while needed to provide your account, tools and history features. There is currently no common automatic deletion period for all Chat, Image and Speech history.

Request access, correction, account closure or deletion at hello@skytruong.com. We verify ownership without requesting passwords or secret API keys. Our operational target is to complete verified deletion requests within 30 calendar days; any shorter legally required period takes precedence. Records needed for legal, accounting, dispute or security purposes are restricted in purpose and access, with an explanation where appropriate.

Deletion covers active data and stored files within the request's scope. Ordinary backups have a target rotation period of up to 90 days, managed manually. Copies needed for a specific obligation or incident are separately recorded and access-restricted. Deletions must be reapplied before restored data returns to service. We cannot retrieve copies already downloaded by others.

Updates and support

Send privacy questions or requests to hello@skytruong.com. Policy updates are published with a new effective date; significant changes are communicated appropriately. Mandatory rights under applicable law remain protected.