← Dmind

Chính sách dữ liệu cá nhân

Áp dụng cho Dmind tại https://dmind.vn, bot Dmind trên Zalo và Telegram. Cập nhật 19/10/2026. English version

1. Ai chịu trách nhiệm

Dmind là trợ lý làm việc bằng AI do DND Group phát triển và vận hành ("Dmind", "chúng tôi"). Dmind dành cho người từ 18 tuổi. Chính sách này nói Dmind thu thập dữ liệu gì, dùng vào việc gì, lưu ở đâu, chia sẻ với ai và bạn kiểm soát dữ liệu của mình thế nào.

Dữ liệu định danh lưu trữ và xử lý tại Việt Nam; nội dung việc được xử lý trên hạ tầng AWS theo hợp đồng bảo mật.

2. Dữ liệu Dmind thu thập

3. Dữ liệu người dùng Google

Dmind chỉ xin quyền Google khi bạn bấm kết nối, sau một màn đồng ý của Dmind ghi rõ đọc gì, ghi gì, không làm gì. Từng quyền và mục đích:

Dmind không xoá, sửa, chuyển tiếp hay đánh dấu email; không sửa, xoá hay chia sẻ tệp có sẵn trên Drive; không sửa, xoá lịch có sẵn. Dmind không làm theo yêu cầu nằm trong nội dung email hay tệp (ví dụ chuyển tiền, gửi tệp, đổi người nhận).

Việc Dmind sử dụng và chuyển giao thông tin nhận được từ Google API tuân theo Chính sách dữ liệu người dùng của Google API Services, bao gồm các yêu cầu Sử dụng giới hạn (Limited Use). Cụ thể:

4. Dmind dùng dữ liệu vào việc gì

Nội dung bạn gửi và nội dung Dmind đọc qua kết nối được xử lý tự động bằng mô hình AI trên Amazon Bedrock (máy chủ ngoài Việt Nam). Dmind không dùng dữ liệu của bạn để huấn luyện mô hình.

5. Chia sẻ với bên thứ ba

Dmind không bán dữ liệu cá nhân.

6. Lưu trữ, bảo mật, thời hạn

7. Quyền của bạn

8. Thay đổi chính sách

Khi đổi cách dùng dữ liệu, Dmind cập nhật trang này và ngày cập nhật. Nếu thay đổi ảnh hưởng tới quyền đã cấp, Dmind hỏi lại đồng ý của bạn trước khi áp dụng.

9. Liên hệ

DND Group, đơn vị phát triển và vận hành Dmind. Liên hệ qua kênh hỗ trợ trong ứng dụng Dmind (Tài khoản, Hỗ trợ).

Privacy Policy (English)

Applies to Dmind at https://dmind.vn and the Dmind bots on Zalo and Telegram. Last updated October 19, 2026. If the two versions differ, the Vietnamese version prevails.

1. Who we are

Dmind is an AI work assistant developed and operated by DND Group ("Dmind", "we"). It is intended for users aged 18 and over.

2. Data we collect

  • Account data: phone number or email used to sign in, display name, age confirmation.
  • Profile data you enter: how to address you, occupation, assistant name, background profile, memory notes (only if you turn memory on).
  • Content you send: messages, files, images, transcribed voice, and the results Dmind creates.
  • Mind wallet and plan data: balance, grants, charges, refunds, current plan.
  • Technical data: time, channel, task type, token count and Mind charged per turn. These records contain no message content.
  • Data from connections you enable: Google (section 3), Odoo or accounting software (MISA, Bravo), Zalo, Telegram. Read only when a task you give needs it.

3. Google user data

Dmind requests Google permissions only when you choose to connect, after a Dmind consent screen that explains what is read, what is written and what is never done. Scopes and purposes:

  • openid, email, profile (Sign in with Google): Read your verified email address and display name to create or open your Dmind account.
  • gmail.readonly: Search and read the emails related to a task you give (sender, recipients, subject, body, attachment names), only when you ask for that task. Dmind does not scan the whole mailbox.
  • gmail.send: Send an email from your Gmail address only after you enable permission level 3 and press Approve for that email (cancellable within 30 seconds).
  • drive.file: Open only the files you pick with "Choose file on Drive" for the task you give, and save a result file created by Dmind as a new file in your Drive when you press "Save to Google Drive". Dmind cannot see any other file in your Drive.
  • calendar.events: View events in the date range a task needs (title, time, location) to detect conflicts, and create a new event on your primary calendar only after you enable permission level 3 and press Approve. Events have no guests.

Dmind never deletes, edits, forwards or labels your emails; never edits, deletes or shares your existing Drive files; never edits or deletes your existing calendar events; and never follows instructions found inside emails or files.

Dmind's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • Google user data is used only to provide the features you request and to show you the results.
  • It is not sold, not used for advertising, and not used to determine creditworthiness or for lending.
  • It is not used to train or improve general AI models.
  • It is not transferred to third parties, except the infrastructure providers needed to run the feature (section 5), to comply with law, or at your request.
  • Dmind staff do not read it, unless you give explicit permission for a specific task, it is needed for security or abuse investigation, it is required by law, or the data is aggregated and anonymized for internal operations.

4. How we use data

  • To perform the tasks you give: answers, drafts, reading files, tables, Word, Excel and slide files, reminders.
  • To remember how you like things done, if you turn memory on.
  • To charge Mind, manage plans and prevent fraud.
  • To keep the service secure, fix errors and measure quality with aggregated data without content.

Your content and the content Dmind reads through connections are processed automatically by AI models on Amazon Bedrock (servers outside Vietnam). Dmind does not use your data to train models.

5. Sharing

  • Amazon Web Services: Dmind servers (Singapore region) and the Amazon Bedrock AI service.
  • Google: when you connect Gmail, Drive, Calendar or sign in with Google.
  • Zalo, Telegram: when you link a bot; messages on those channels are stored by them under their own policies.
  • VNPT: to register, renew and bill plans and to send verification codes.
  • Competent authorities, when required by law.

Dmind does not sell personal data.

6. Storage, security and retention

  • Data in transit is encrypted (HTTPS). Connection secrets (Google tokens, Odoo and accounting keys) are encrypted at rest with AES-256-GCM.
  • Only assigned operators can access the servers, and only to operate and troubleshoot the service.
  • Chat history and files: kept until you delete them.
  • Connection log (each read or write through Gmail, Drive, Calendar): 90 days.
  • Drafts awaiting confirmation: 7 days.
  • Google tokens: until you disconnect; disconnecting revokes Dmind's access with Google immediately.
  • Mind wallet, transaction history and consent records: kept for the period required by accounting and data protection law.

7. Your choices and rights

  • Download all your data: Account, Settings, Privacy, Download my data.
  • Delete memory notes, chat history, or all your data: same Privacy section.
  • Disconnect any connection and withdraw consent on the Connections page, or revoke Dmind at https://myaccount.google.com/permissions.
  • Turn memory off at any time in Settings.
  • To request account deletion, correction, or ask about your data, contact us via the support channel inside the Dmind app (Account, Support).

8. Changes

We update this page and its date when our data practices change. If a change affects permissions you granted, we ask for your consent again before applying it.

9. Contact

DND Group, developer and operator of Dmind. Contact us via the support channel inside the Dmind app (Account, Support).