Landopa
Log inStart free

Privacy Policy

Last updated: 2026-10-09

This policy explains how Landopa collects, uses, stores, shares and protects personal data, and the rights you have over your data. It is written in accordance with the Vietnamese Law on Personal Data Protection No. 91/2025/QH15, Decree 356/2025/ND-CP, the Law on Network Information Security, the Law on Cybersecurity and other applicable Vietnamese laws, and is also meant to give users outside Vietnam the information that privacy laws such as the GDPR require.

1. Who is responsible for your data

HABIFY COMPANY LIMITED (CÔNG TY TNHH HABIFY, enterprise code 0319523808), the operator of Landopa, is the controller of the personal data of Landopa account holders and of people who visit landopa.com and app.landopa.com.

  • Registered address: 251D/4 Luu Huu Phuoc, Phu Dinh Ward, Ho Chi Minh City, Vietnam
  • Phone: +84 367 465 952
  • Email for personal-data matters: landopa@habifyhub.com
  • Contact form: landopa.com/contact

2. Two roles: your data and your visitors' data

Landopa handles two different kinds of personal data:

  • Data about you as a Landopa customer (your account, billing, support requests, how you use the dashboard). For this data we are the controller and this policy applies in full.
  • Data about the visitors of the landing pages you publish — form submissions (Leads), visitor analytics and A/B-test events. For this data the customer who owns the page is the controller and we act only as their processor, following their settings and instructions (see Section 6 and Section 11 of our Terms of Service).

If you submitted a form on a landing page built with Landopa, please contact the business that owns that page first; it decides how your data is used. We will help that business handle your request and, if you contact us directly, we will forward your request to it.

3. Personal data we collect

a) Data you give us

  • Account data received from Habify Hub Accounts when you sign in: your name, email address, avatar and account identifier. We never receive your password.
  • Profile and workspace data: display name, language, agency name and logo, team or client details you add.
  • Billing data: your billing country; for Vietnam billing, the e-invoice details you enter (individual or company name, tax code or citizen ID number if you provide it, address, email, phone); for PayPal subscriptions, the payer name and email returned by PayPal; the history of your payments, Credit top-ups and Plan charges.
  • Content you create: pages, text, images and media, templates, form settings, domain names, tracking codes and integration settings.
  • Access tokens for integrations you connect (Google Sheets, Zalo, Vercel, Netlify, Surge and similar), stored encrypted.
  • Messages you send to support, including attachments.
  • Text you enter into the AI copywriting assistant.

b) Data collected automatically: technical data such as IP address, browser and device type, operating system, pages and features used, time of access, error logs, and the country indicated by your connection (used to suggest your billing country). We store the IP address of dashboard visitors only in server and security logs for a limited time.

c) Data from payment providers: transaction identifiers, amount, status and time from PayPal, MoMo, ZaloPay, VNPay or PayOS. We do NOT collect or store card numbers, CVV codes, bank or e-wallet login credentials — these are handled directly by the payment provider.

d) Data about your page visitors (as a processor): the fields each form asks for, the visitor's IP address and browser user agent attached to each Lead, UTM parameters, and analytics events (page views, clicks, conversions, A/B variant) with the visitor's country and a one-way hashed IP address.

4. Why we process your data

We process personal data only for these purposes:

  • creating and managing your account and signing you in through Habify Hub Accounts;
  • providing the Service: building, hosting, publishing and deploying your pages, collecting and delivering Leads, analytics, A/B testing, AI suggestions and integrations;
  • billing: determining your billing region, processing payments and subscriptions, managing Credit, issuing e-invoices and receipts, sending renewal reminders and payment notices;
  • sending service emails: security notices, renewal reminders, failed-payment and downgrade notices, changes to the Terms or this policy;
  • customer support and handling complaints and disputes;
  • security: preventing fraud, abuse of free trials, spam and phishing pages, and attacks on the Service;
  • improving the Service through aggregated statistics that do not identify you;
  • complying with legal obligations on accounting, tax, invoices, cybersecurity and lawful requests from competent authorities.

We do NOT sell personal data, do NOT use it for third-party targeted advertising, and do NOT use your pages, Leads or AI prompts to train AI models.

5. Legal bases

We process your data on the basis of your consent, given when you create your account and accept our Terms of Service and this policy, and which you can withdraw at any time (Section 12). We also process data without consent where the Law on Personal Data Protection allows it, in particular:

  • to perform the service contract between you and us (providing the Plan you chose, processing payments);
  • to comply with legal obligations (keeping accounting records and invoices, responding to lawful requests from competent authorities);
  • to protect the life, health or property of you or others in an emergency.

6. Your visitors' data — how we act as a processor

For Leads and visitor analytics, we act on the page owner's instructions only. We:

  • use the data only to provide the Service to the page owner (storing Leads, sending them to the owner's Google Sheets, Zalo, email or webhook, and computing analytics);
  • never use visitor data for our own marketing and never sell it;
  • store analytics with a one-way hashed IP address, not the raw IP;
  • keep the data until the page owner deletes it or their account is deleted;
  • help page owners answer requests from visitors, and notify them of any personal-data breach affecting their data.

Page owners are responsible for giving visitors a privacy notice and obtaining any consent the law requires, including for tracking codes such as Google Analytics or Meta Pixel that they add to their pages.

7. Who we share data with

We do not sell, trade or rent personal data. We share only the minimum data needed with the following processors, each bound by confidentiality and allowed to use the data only to perform their function for us:

  • Habify platform services operated by our company: Habify Hub Accounts (sign-in), and our payment, e-invoice and email services, which connect Landopa to the providers below.
  • Payment providers: PayPal (USD subscriptions); MoMo, ZaloPay, VNPay and PayOS (VND top-ups) — order identifier, amount, description, and your name and email where the provider requires them.
  • E-invoice provider: Viettel S-Invoice — the invoice details you entered (name, tax code, address, email, phone) and the invoice content, as required by Vietnamese invoice law.
  • Hosting and network: Contabo (servers running the application and databases), a server provider in Vietnam (database copies and backups), Cloudflare (DNS, content delivery, protection against attacks, and R2 storage for the media you upload).
  • Email delivery: Amazon Web Services (Amazon SES) for service emails — your email address and the message content.
  • AI provider: Alibaba Cloud (Qwen models) — only the text you enter in the AI assistant and the page context needed for the suggestion; we do not send your name, email or account details.
  • Integrations you choose to connect: Google (Sheets), Zalo, Vercel, Netlify, Surge, the analytics or advertising tools whose codes you add, and the webhook endpoints you configure — only the data needed for that integration, sent on your instruction.

We may also disclose data when required by a written request from a competent authority following the procedure set by law, or when necessary to protect the rights, property or safety of you, us or others.

8. Where your data is stored and cross-border transfers

The application and its main database run on servers in Singapore. The database is copied continuously and backed up daily to a server in Vietnam, in line with Vietnamese rules on storing data in Vietnam. Media files are stored on Cloudflare's network. Some processors listed in Section 7 (PayPal, Cloudflare, Amazon SES, Alibaba Cloud, Google and the integrations you connect) process data outside Vietnam.

For these transfers we:

  • transfer only the data needed to operate the Service, and for the AI provider only the minimum described in Section 7;
  • prepare and keep an impact assessment dossier for the transfer of personal data abroad and file it with the Department of Cybersecurity and High-Tech Crime Prevention (A05) — Ministry of Public Security, as required by the Law on Personal Data Protection and Decree 356/2025/ND-CP;
  • require recipients to apply equivalent protection measures.

9. How we protect data

We apply appropriate technical and organizational measures, including:

  • HTTPS/TLS encryption for all connections to the dashboard, API and hosted pages;
  • no passwords stored by Landopa — sign-in is handled by Habify Hub Accounts;
  • encryption at rest of integration access tokens, webhook secrets and similar credentials;
  • one-way hashing of visitor IP addresses in analytics;
  • role-based access for staff, with administrative actions logged;
  • regular backups with restricted access, and monitoring of the infrastructure.

No system is perfectly secure. Protect your Habify Hub Accounts account with a strong unique password and two-factor authentication, and do not share access.

10. How long we keep data

We keep personal data only as long as needed for the purposes above:

  • Account data, pages, media and settings: while your account exists.
  • Leads: until you delete them or your account is deleted.
  • Raw analytics events: up to 180 days; after that only aggregated statistics are kept.
  • Deployment logs: up to 90 days.
  • Support messages: up to 24 months after the request is closed.
  • When you delete your account: data is kept for the restore window of Habify Hub Accounts (currently 15 days), then deleted permanently. Backups containing it are overwritten on their normal cycle.
  • Payment records, Credit ledger and invoices: for the period required by accounting and invoice laws (at least 10 years). After your account is deleted these records are kept in de-identified form.

When the retention period ends, data is deleted permanently or irreversibly anonymized.

11. Your rights

Under the Law on Personal Data Protection you have the right to:

  • be informed about the processing of your personal data;
  • give or refuse consent to processing;
  • access, view and correct your personal data;
  • withdraw your consent, even if this ends the Service;
  • have your personal data deleted;
  • restrict processing of your personal data;
  • receive a copy of your personal data;
  • object to processing, including for marketing purposes;
  • complain, denounce or bring legal action as provided by law;
  • claim compensation for damage caused by a breach of personal-data protection rules;
  • protect yourself by the means provided by law, or ask competent authorities to protect your civil rights.

If you are in the European Economic Area or the United Kingdom, you also have the rights given by the GDPR, including data portability and the right to complain to your local supervisory authority.

12. How to exercise your rights

You can exercise these rights as follows:

  • View and edit your profile, billing details and content: in the Landopa dashboard.
  • Change your name, email or password: in Habify Hub Accounts.
  • Withdraw consent and delete your account: delete your Habify Hub Accounts account in its account settings. We sign you out and cancel active subscriptions immediately; your data is deleted permanently after the restore window (Section 10). Remaining Credit is forfeited, as stated in our Terms of Service.
  • Export your data: export pages as static files and Leads from the dashboard; for a full copy of your personal data, email landopa@habifyhub.com.
  • Any other request (restriction, objection, copy of data): email landopa@habifyhub.com from the address of your account.

We handle requests within 72 hours of receiving a valid request, or within the longer period the law allows for complex requests, in which case we tell you why and when to expect an answer. Exercising your rights is free. We may need to verify your identity first to protect your account from impersonation.

13. Children

Landopa is intended for businesses and adults aged 18 or over. We do not knowingly collect personal data of children for our own purposes. If you believe a child has given us personal data, contact landopa@habifyhub.com and we will delete it.

Page owners must not use Landopa forms to collect data of children unless the law allows it and they have obtained the consent of a parent or guardian.

14. Cookies

We use cookies and similar technologies that are necessary to sign you in and keep the dashboard working, plus limited analytics on our own website. Details, and how cookies are used on the landing pages you publish, are in our Cookie Policy.

15. Personal-data breaches

If a breach leads to the disclosure, loss or unauthorized access of personal data, we will:

  • contain the incident and limit its impact as soon as it is discovered;
  • notify the Department of Cybersecurity and High-Tech Crime Prevention (A05) — Ministry of Public Security within 72 hours of discovery, as required by law;
  • notify you by email without undue delay if the breach is likely to affect your rights and interests, with the steps you should take; and notify affected page owners when their visitors' data is involved;
  • keep a record of the incident and the measures taken.

16. Changes to this policy

We may update this policy when our features, processors or the law change. The date at the top of this page shows the current version.

For material changes to the purposes of processing, the data we collect or the recipients of data, we will notify you in advance by email or in the dashboard and, where the law requires, ask for your consent again before continuing.

17. Contact and complaints

For any question, request or complaint about personal data, contact us:

  • Email: landopa@habifyhub.com
  • Contact form: landopa.com/contact
  • Phone: +84 367 465 952

If you believe your rights have not been respected and we have not resolved the matter, you may complain to the Department of Cybersecurity and High-Tech Crime Prevention (A05) — Ministry of Public Security, to your local data-protection authority, or bring a claim before the competent court.