Privacy Policy

1. What we collect

There are only two places where the website takes data directly from you: the demo request form at the bottom of the home page, and the chat panel of our assistant, Baby Dino.

• Demo request form: school name, contact person (name and role), email address, phone number. The hidden field named "website" is a bot trap — its content is discarded and never stored.
• Chat with Baby Dino: the website does NOT store the conversation. Messages exist only for the duration of the session so the assistant can reply, and are then gone — the website has no database at all.
• One exception: when you ask for a human (or the assistant hands over), up to the last 10 messages of the session are sent to DinoX’s internal admin system so a colleague has the context to answer — phone numbers in that excerpt are masked to the last three digits. Even so, please do not type sensitive information into the chat.
• If you choose to leave your details during the chat, the assistant also sends a contact record with: school name, contact person, email, phone number, size (number of students / campuses), preferred demo slot, and a short summary of your needs written by the assistant.
• Your IP address is used to cap how many chat messages can be sent per hour (spam protection). It stays in the server process memory only and is lost when the server restarts.
• The web server keeps standard access logs (IP address, timestamp, path, browser) for operations and troubleshooting.
• We do not collect location data and we do not buy personal data from third parties.

2. What we use it for

• Getting back to you, confirming a slot, and running the demo you asked for.
• For sessions handed to a human: reading the attached excerpt to answer in context and to correct wrong assistant answers.
• Not for targeted advertising. We do not sell, rent, or trade your data.

3. Who can see it and who processes it for us

• Internally: contact records are forwarded to the DinoX admin system (admin.dinox.vn) and only staff signed in there can read them. The website itself has no accounts and keeps no copy.
• The website runs on a private server that DinoX rents and administers. The channel to the admin system is signed with a shared secret so the receiving side can be certain the data came from this website.
• Email: each new contact triggers a notification email (containing what you submitted) to our sales inbox through the SMTP provider we configure.
• AI assistant: when AI mode is enabled, the messages of the chat session are sent to Anthropic (the Claude model) to generate replies. When AI mode is off, the assistant answers from a scripted knowledge base and no data leaves our server.

4. Cookies and browser storage

• The website sets no advertising or cross-site tracking cookies for visitors.
• Your browser stores one technical key in sessionStorage ("dino-badge-seen") so the Baby Dino badge does not reappear after you open the chat. It disappears when you close the tab.
• The website has no sign-in page and sets no session cookie for anyone.
• If our analytics tool (Umami, self-hosted by DinoX) is enabled, it counts page views without cookies and without building a personal profile; we use it only to see which content gets attention.

5. How long we keep it

The website itself keeps nothing: no database, no conversation logs. Once forwarded, your data lives in two places — our internal admin system and the sales inbox.

In those two places, contact records are kept until you ask us to delete them, or until we no longer need them for the sales conversation. There is currently no scheduled automatic deletion — we delete on request and during periodic reviews.

The admin system is backed up regularly, so deleted data may still exist in a backup until that backup expires.

6. Your rights

• Ask for a copy of the data we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete your contact record (and the attached excerpt, if your session was ever handed to a human).
• Withdraw your consent to be contacted at any time.

Send your request to the email address in the Contact section below; we handle it as soon as we can, usually within 7 business days. Please mention the email address or school name you used, so we can find the right record.

7. Security

• The whole website runs over HTTPS.
• The website has no database and no sign-in page, so there is no account on it to compromise.
• Both the form and the chat are rate limited to reduce spam and abuse.
• No system is perfectly secure. If an incident affects your data, we will notify you at the email address you provided.

8. Student data

This sales website is meant for adults working at schools and does not process student data. Student data lives only in the DinoX system operated by the school, under a separate agreement signed with that school.

9. Changes to this policy

When something changes we update the text and the date shown at the top of this page. Please review it before sending us new information.

10. Contact

For any question or data request, write to: