How we protect
your data

Better Work is an AI Agent platform for Vietnamese students and professionals. We take your privacy seriously and are committed to transparency about how your data is collected, stored and used.

This policy applies to all users who register and use services at betterwork.id.vn.

2.1 Account information (via Google OAuth)

When you sign in with Google, we receive:

• Display name (full name)
• Email address
• Profile photo (avatar URL)
• Google Account ID (unique identifier)

This is stored in Supabase (our database) and used only to authenticate you.

2.2 Your Gemini API Key

Better Work lets you provide your own Gemini API Key from Google AI Studio. This key:

• Is encrypted with AES-256-GCM before being stored in our database
• Cannot be read by anyone on the Better Work team in its original form
• Is only decrypted transiently in server memory when you send an AI request
• Is never logged or sent to any third party other than the Google Gemini API

2.3 Application data (quizzes, vocabulary, tasks…)

That means you fully own your data. You can access, edit and delete it directly from Google Drive even without using Better Work.

2.4 Technical data

We may collect basic technical information, including:

• IP address (used to detect abuse and for rate limiting)
• Browser and device (user-agent)
• Access times and pages viewed
• Technical errors (to improve the service)

This is the area where we invest the most to protect you:

• API Keys are encrypted with AES-256-GCM (bank-grade encryption) before being stored
• The encryption key lives in a separate secure environment variable on Vercel — fully isolated from the database
• Database connections require SSL/TLS
• All traffic is protected with HTTPS and HSTS (1-year enforcement)
• The API Key exists in server RAM only for the few milliseconds a request takes; it is never written to logs
• Every AI request requires a valid signed-in session before the key is decrypted

We do not sell, rent, or share your personal data with any third party for commercial purposes.

To operate the service, we use the following technical partners:

Retention

• Account information: kept until you delete your account
• Encrypted API keys: removed immediately when you delete them from Settings
• Application data (Drive/Sheets): owned by your Google Drive — Better Work has no control over its deletion
• Technical logs: purged after 30 days

Account deletion

To delete all data associated with your Better Work account, please contact support@betterwork.id.vn. We will process the request within 7 business days.

After account deletion, the data in your Google Drive is not affected — all your files and Sheets remain intact.

You have the following rights over your personal data:

• Right to access: view the data we hold about you
• Right to correct: update your personal information
• Right to delete: request deletion of your account and related data
• Right to withdraw consent: revoke Drive/Sheets access at any time at myaccount.google.com
• Right to complain: contact us if you believe your data has been mishandled

Better Work uses:

• Session cookies (Supabase Auth): required to keep you signed in
• localStorage: temporarily stores your Drive folder ID and UI preferences
• No tracking or advertising cookies

If you have questions about this policy or want to exercise your rights:

• Email: support@betterwork.id.vn
• Website: betterwork.id.vn

We commit to responding within 3 business days.