Privacy Policy

Last updated: 21 April 2026 · Effective immediately

1. Who We Are

VIMO Financial Intelligence (vimo.cuthongthai.vn) is operated by Cú Thông Thái (cuthongthai.vn), based in Vietnam. We provide financial data and AI-powered analysis for the Vietnamese stock market via our website, REST API, MCP Server, and GPT Actions.

Contact: support@cuthongthai.vn

2. What Data We Collect

2.1 API Users

Email address (for API key registration)
API usage logs (endpoint called, timestamp, response time, error codes)
IP address (for rate limiting and security)

2.2 GPT Action Users (via OpenAI)

Tool call parameters (stock tickers, query parameters you send)
We do NOT receive your OpenAI account info, conversation history, or personal identity
We only see the API requests made on your behalf by the GPT

2.3 MCP Server Users

API key used (to authenticate and track usage)
Tool calls and parameters (for service logs and rate limiting)
No portfolio data is stored — Execute Layer processes and immediately discards input

2.4 Website Visitors

Anonymous analytics (page views, session duration) via privacy-friendly tools
No tracking cookies without consent

3. How We Use Your Data

Provide and improve the VIMO API and MCP Server services
Enforce rate limits and detect abuse
Send transactional emails (API key confirmation, usage alerts)
Generate anonymized, aggregated usage statistics
Comply with legal obligations

We do NOT:

Sell your personal data to third parties
Use your data for targeted advertising
Store portfolio or financial data you submit to the API
Share individual usage data with third parties without consent

4. Data Retention

API logs: Retained for 90 days for security and debugging, then deleted
Account data: Retained until account deletion request
Portfolio data (Execute Layer): Processed in-memory, never written to disk — deleted immediately
Marketing data: Until unsubscribe

5. Data Security

All data transmitted over HTTPS/TLS 1.3
API keys are hashed before storage (we cannot recover your plain key)
Database access restricted by Row-Level Security (Supabase)
Regular security scans and anomaly detection

6. Third-Party Services

We use the following third-party services that have their own privacy policies:

Supabase — database hosting (GDPR compliant)
Vercel — web hosting and edge functions
OpenAI — when accessed via GPT Actions (OpenAI handles user data)
Anthropic — when accessed via Claude MCP integration

7. Your Rights

Access: Request a copy of your data
Deletion: Request deletion of your account and data
Portability: Export your API usage logs
Correction: Update inaccurate personal data

To exercise any right: email support@cuthongthai.vn. We respond within 30 days.

8. Governing Law

This Privacy Policy is governed by the laws of the Socialist Republic of Vietnam, including the Law on Cybersecurity 2018 and Decree 13/2023/NĐ-CP on Personal Data Protection.

9. Contact

Email: support@cuthongthai.vn

Website: vimo.cuthongthai.vn