Mary · Document AssistantHome › Privacy
Privacy policy
What personal data Mary collects, why, where it is stored, for how long, who receives it and how you can access, export or delete it.
Mary is free forever for every user who registers and verifies their email. Data controller: ISA Vietnam (Southeast Asia Institute of Education & Economic Sciences), 249 Cộng Hòa, Tân Bình, Ho Chi Minh City. Contact: luongviethoang.hcm@gmail.com.
What we collect
| Data | Purpose and notes | Retention |
|---|---|---|
| Your documents | Not stored. A file is processed in memory to analyze and export, then discarded (an old .doc is briefly converted in a temporary file that is deleted at once). Your history lives only on your own device. | No retention on our servers |
| Email address | Account and one-time sign-in codes (no password). Required to download results. | Until you delete your account |
| Name, phone, job, organization, address (optional) | Only what you choose to add in your profile; used to pre-fill templates and, if you tick consent, to create your ProFind account. | Until you edit or delete your account |
| Usage counters, last seen, referral code | Badges, streaks and the "invited friends" count. No document content. | Until you delete your account |
| Organization membership | If you use an organization template set, your email is listed as a member so you can download its forms. | Until you stop using the set or delete your account |
| Feedback | The text and rating you send. An email is kept only if you type one in the contact box. | Until you delete your account (feedback with your email is removed with it) |
| Anonymous journey events | Page, flow and download counts without name, email or IP, to improve the product. | Aggregated, no personal data |
| Network address | Hashed and kept only as a short-lived rate-limit counter against abuse. | At most 24 hours |
Who receives data
- Hosting and data store providers (Render, Upstash Redis) that run the service for us.
- The email delivery provider, only to send your sign-in code.
- ProFind (ISA), only after you tick consent in the "Connect to ProFind" dialog: your email, name and phone number. Deleting your Mây account does not delete a ProFind account; delete that one at ProFind.
- We do not sell personal data or use it for advertising.
Your rights
You can view and edit your profile, download your data (Account, Profile and data, "Download my data"), withdraw consent and delete your account at any time. Deleting removes your profile, counters, referral code, organization membership and feedback tied to your email. You may also ask us by email to access, correct or erase data, or to object to processing; we reply within the period required by Decree 13/2023/ND-CP.
Security
Sign-in uses one-time codes; sessions use HttpOnly cookies; connections use HTTPS; access to administration is limited to named administrators.
Last updated: 2026-10-12.