Privacy Policy

Who we are

House of Abyss is a fashion brand of the individual trader Nguyễn Hoàng Long (personal tax code 001098040173), residing at 1518, CT5-X2, Bắc Linh Đàm, Hoàng Liệt, Hà Nội. Nguyễn Hoàng Long decides how and why your personal data is processed and is responsible for it. You can contact us about anything in this policy at customers@houseofabyss.com or 0903458686.

What we collect

• Account: your name, email address, phone number, profile photo, username and bio, and the delivery addresses you have used (saved to your account so you can pick them next time). You sign in with Google or Apple; we never see your password.
• Orders: the recipient's name, phone number and address, delivery notes, your account email, what you ordered, the payment method (cash on delivery or bank transfer; we don't process card details), your order and return history, and the source that brought you to the website (for example an ad campaign), if any.
• Bank transfers: details of transfers into our account (amount, note, reference, bank), sent to us by SePay to match payments to orders.
• What you share in the app: posts and the feelings and moods you attach, replies, friends, the person you connect with as a couple, groups, messages and voice messages, and couple features such as shared memories, map pins, time capsules, events and challenges, including photos you upload.
• Check-in and Tarot: what you write when you use the mood check-in and Tarot in the app.
• Calls: call details (who called whom, and when). The content of voice and video calls isn't recorded.
• Abyss Meet (if you use it): your Meet profile, free times and meetups; for dating, your gender, the genders you're interested in, your birth year and what you're looking for; and, if you choose to verify, a verification selfie our moderators look at to confirm it.
• Reports and blocks: reports you send and the people you block.
• Location: only when you use the couple map, pins or place features, and only with your permission. We keep the places you choose to pin, not a continuous trail. We do not track your location in the background.
• NFC garments: the tag in a garment you adopt, its link to your account, and the history of scans and connections made through it.
• Device and usage: your push notification token; crash reports and app usage statistics, only if you allow them; and your IP address, used to protect the service from abuse (rate limiting).
• Website: cookies and browser storage to keep you signed in and remember your cart, language and traffic source; analytics and advertising cookies only with your consent. See "Cookies" below.

Sensitive personal data

The moods and feelings you share (including in check-in and Tarot), information about your relationships, the genders you're interested in on dating (which can reveal sexual orientation) and precise location can be sensitive personal data. We process them only with your explicit consent and only to provide the features that use them. You can stop at any time by not using those features, deleting the content or deleting your account.

How we use your data

• To create and run your account and provide the app features you use (performing our agreement with you).
• To take, deliver and support your orders, returns and refunds (performing our agreement with you).
• To send order confirmations, delivery updates and, if you allow them, app notifications.
• To keep the service secure, prevent fraud and abuse, and fix problems (our legitimate interest and legal obligations).
• To measure and improve the store, the app and our advertising, only with your consent.
• To keep accounting and tax records as the law requires (legal obligation).

Who we share it with

We don't sell your personal data. We share it only with the service providers below, each receiving only what it needs for its job, and with other users as you choose.

• Google (Firebase and Google Cloud): sign-in, database, file storage, server functions, backups, sending push notifications (Firebase Cloud Messaging), and, with your consent, crash reporting and analytics.
• Apple: Sign in with Apple, delivering push notifications to iPhone, and maps on iPhone.
• Vercel: website hosting and website traffic statistics (Vercel Analytics).
• Viettel Post: delivers orders and collects returns. Viettel Post receives the recipient's name, phone number, address, the items, the declared value, the order number, delivery notes, any cash-on-delivery amount, and for returns the return reason and notes.
• SePay: matches bank transfers; receives the details of transfers into our account.
• VietQR (vietqr.app): makes the payment QR image; receives the account number, amount and order code.
• Resend: sends order, return and account emails, contact form messages, and your data file when you ask to download your information.
• Anthropic: writes the replies for the mood check-in and Tarot in the app; receives what you write in those features.
• LiveKit: carries voice and video calls in the app.
• Expo: delivers app updates.
• Google Maps: shows maps in the app on Android.
• Google Analytics and Meta (Facebook): measure website traffic and advertising, only after you accept analytics cookies. With your consent, purchase events are sent to Meta: value, items, order number, hashed email and phone number, IP address, browser details and Meta's cookie identifiers.
• Other users: what you choose to share, such as your public profile, posts to the audience you pick, messages to their recipients and couple content with your partner.
• Authorities: when Vietnamese law requires it.

Where your data is stored

Our providers store and process data outside Vietnam: the database is in Taiwan, server functions run in Singapore, and files and uploaded photos are stored in the United States; the website runs on Vercel in the United States; Apple, Expo, Google Maps, Resend, Anthropic, LiveKit, Google Analytics and Meta process data abroad. Our providers are contractually bound to protect your data, and we complete the cross-border transfer procedures the law requires.

How long we keep it

• Account and app content: until you delete the content or your account. Posts older than 12 months are removed automatically (their photos are deleted when you delete the post or your account), and read notifications older than 30 days are deleted automatically.
• Orders: delivered and cancelled orders move to an archive after 90 days and are kept for accounting and tax; a cancelled order not yet archived is deleted after 6 months. If you delete your account, your name, phone number, street address and email are removed from your orders, archived ones included.
• Bank transfers: kept for accounting reconciliation.
• IP addresses in rate-limit records: deleted automatically once they expire, usually within 1–2 days.
• Backups: orders, accounts, products and posts are backed up daily on Google Cloud; deleted data may remain in older backups until those backups are deleted.
• Analytics data: no longer than 14 months. Your cookie choice is remembered for 6 months, after which we ask again.

Deleting your account

You can delete your account at any time in the app (Settings → Account center → Delete account) or on our website at houseofabyss.com/delete-account. Deletion takes effect immediately and cannot be undone. Your profile, posts, friends, messages, couple data, photos and other personal data are deleted; orders are kept for accounting with your personal details removed, as described above.

Your rights

Under Vietnamese law you may, at any time:

• be told how your personal data is processed;
• give or withdraw your consent;
• access your data and get a copy of it;
• have it corrected;
• have it deleted, or its processing restricted;
• object to processing, including for marketing;
• complain, or bring a claim, if your data is misused. You can complain to us, and to the personal data protection authority, the Department of Cybersecurity and High-Tech Crime Prevention of the Ministry of Public Security.

Privacy tools in the app

In the app you can download a copy of your data (Settings → Account center → Your information and permissions → Download your information; the file is emailed to your verified address, at most once every 24 hours), choose whether strangers see your photo or only your name, pause the NFC tag on your garment, and block people. For anything else, email us; we'll respond within the time the law allows.

Cookies

On the website, cookies and browser storage keep you signed in and remember your cart, language, cookie choice and the traffic source that brought you (which is recorded on your order). Google Analytics and the Meta Pixel set cookies only if you accept them in the banner; if you decline, they aren't loaded. Vercel Analytics counts website visits without cookies. You can change your choice by clearing this site's cookies. The app doesn't use cookies; crash reports and usage statistics in the app are controlled in Settings.

Age

Our app and accounts are for people aged 18 and over. We do not knowingly collect personal data from anyone younger; if we learn we have, we delete it.

Security

We protect your data with encrypted connections, access controls that limit each person to their own data, and restricted administrative access. If a breach puts your data at risk, we will notify the authorities and, where required, you, within the time the law sets.

Changes to this policy

We will post any change here with a new date, and tell you in the app or by email if the change is significant.