Privacy Policy
Last updated: 5 Oct 2026
LAMVI only collects what it needs to sell and deliver lanterns, carry your greetings and support you. This page explains what we collect, why, and your rights.
Information we collect
- Account: name, email, phone number, preferred language. If you sign in with Google we receive your name and email from Google, never your Google password.
- Orders: products, recipient details (name, phone, delivery address), notes, payment method, coupons used.
- Greetings: the text, voice recording or video you attach to a gift.
- Chats with Mây (AI assistant): what you type. When signed in, history is saved so you can review it; guests are not saved.
- Usage data: pages viewed, device and browser (via Google Analytics 4), and technical logs used to detect errors and abuse.
How we use it
- Process orders, payments and delivery, and provide after-sales care.
- Let gift recipients see your greeting through the QR code on the card.
- Send order emails (confirmation, payment expired, shipped, cancelled, refunded) and password-reset emails.
- Answer questions through Mây; improve the website and its reliability; prevent fraud and account probing.
Third parties that process data for us
- Supabase: database and file storage (batch videos, voice and video greetings).
- payOS: online payments. We never store your card or bank details.
- Resend (or Brevo): transactional email.
- OpenAI: processes questions sent to Mây on servers outside Vietnam. Before sending, we mask phone numbers and emails in your message; we never send addresses or anyone else’s order data.
- Google Analytics 4: visit statistics. The site shows no cookie-consent banner; you can block it in your browser settings or with a tracking blocker.
- Google: if you choose to sign in with Google.
How long we keep it
- Text greetings are kept with the order. Voice and video greetings are deleted automatically 30 days after the recipient confirms receiving the gift, or 90 days after the order is delivered if nobody confirms.
- Account and order data are kept while you use the service and for the period the law requires for records.
- Technical error logs are kept briefly and have personal information masked.
Your rights
- View and edit your personal information in your Account page.
- Ask us to delete or stop processing your data through the support channel on the website; we keep only what the law requires.
- Gift recipients view a greeting only through the private link on the card, without creating an account.
Security
- Connections are encrypted (HTTPS). Passwords are never stored in plain text and are checked against lists of leaked passwords.
- Sessions use secure cookies; administrators only access data needed for their work and important changes are logged.
Changes to this policy
- When the policy changes we update the date at the top. If translations differ, the Vietnamese version prevails.