Privacy Policy

Last updated: 19 May 2026 · Effective date: 19 May 2026

1. Who we are

This privacy policy applies to the website vlink.asia and all subdomains, the WordPress plugin VLink Outline DLN, and related services operated by VLink Asia (the “Company”, “we”, “us”, “our”).

2. What information we collect

2.1 Information you provide directly

• Topic text — when you use the outline generator tool, the topic you type is processed to produce your outline.
• Purchase email — when you buy a PDF or subscribe, you provide an email address to Lemon Squeezy (our payment processor) to receive your receipt and download link.
• Support correspondence — emails you send to contact@vlink.asia for support or inquiries.

2.2 Information collected automatically

• Visitor cookie UID — a random UUIDv4 stored in a cookie named vlink_og_uid, valid for 1 year. Used only to count your free-tier usage across browser sessions. Contains no personal information.
• IP address — your IP is recorded against your UID for rate-limiting and abuse prevention. Stored only as long as the UID record exists.
• User-agent string — your browser identification, stored alongside the UID record for diagnostics.
• Usage counters — how many outlines you have generated, used to enforce the free quota.

2.3 Information from third parties

• Payment confirmation from Lemon Squeezy — when you complete a purchase, Lemon Squeezy notifies us via webhook with your order ID, paid status, and the email you provided to them.

3. How we use your information

4. Who we share your information with

We do not sell, rent, or trade your personal information. We share data with a small number of vetted service providers strictly to deliver the service you requested:

• Anthropic, PBC — when our AI fallback runs (only for industries not yet in our template library), we send your topic text and the list of existing industry slugs to Anthropic’s Claude API for processing. Anthropic processes this data per its own privacy policy and does not retain it for model training.
• Lemon Squeezy, Inc. — handles all payment processing as our Merchant of Record. They collect your billing details, payment method, and email directly on their hosted checkout page. We never see your full card number. See Lemon Squeezy’s privacy policy.
• Hosting provider — our website and plugin services are hosted on commercial infrastructure providers (cloud servers). Standard server logs may include IP addresses for security purposes.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of VLink Asia, our users, or others.

5. Third-party services — what they receive

6. Cookies and tracking

We use a single first-party cookie:

• Name: vlink_og_uid
• Type: Essential / functional (required for free-tier quota tracking)
• Lifetime: 1 year
• Value: A randomly generated UUIDv4. Contains no personal information.
• SameSite: Lax. Secure: set when site is served over HTTPS.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking script on the outline generator tool. The marketing pages of vlink.asia may use standard analytics — see the cookie banner there.

If you delete the vlink_og_uid cookie, your free quota resets, but our IP-level rate limit still applies to prevent abuse.

7. Data retention

8. International data transfers

VLink Asia is based in Vietnam. Our third-party processors (Anthropic, Lemon Squeezy) are located in the United States. Data sent to them is transferred internationally under:

• The respective processor’s own data transfer mechanisms (Standard Contractual Clauses, Data Processing Agreements);
• Your consent when you choose to use a paid feature or AI fallback.

If you are located in the EU, UK, or other jurisdictions with data protection laws, we comply with the transfer rules of those jurisdictions to the extent required.

9. Your rights

9.1 General rights (all users)

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate information
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Restriction — limit how we use your data
• Objection — object to processing based on legitimate interest

9.2 EU / UK GDPR specific rights

If you are in the European Economic Area or the United Kingdom, you have the rights above plus the right to lodge a complaint with your local data protection authority. We do not have a designated EU representative because we process EU personal data only in limited circumstances and on a small scale.

9.3 California (CCPA / CPRA) specific rights

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it (this policy)
• Request deletion of your personal information
• Opt out of the “sale” or “sharing” of personal information — we do not sell or share personal information for advertising
• Non-discrimination for exercising your rights

9.4 How to exercise your rights

Email contact@vlink.asia with your request. To prevent unauthorised access, we may ask you to verify your identity (for example, by sending the request from the same email used for purchase). We respond within 30 days as required by GDPR.

10. Data security

We implement reasonable technical and organisational measures to protect your information:

• All data transmitted over HTTPS (TLS 1.2+)
• Webhook authentication via HMAC-SHA256 signature verification
• API keys stored encrypted at rest in the WordPress database
• Capability-based access control on all admin functions
• Nonce-based CSRF protection on all state-changing actions
• Rate-limiting on public endpoints to prevent abuse

No system is ever 100% secure. If you become aware of any security issue, please contact us immediately.

11. Children’s privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this privacy policy from time to time. When we do, we update the “Last updated” date at the top. For material changes, we will provide additional notice (for example, a banner on the site or an email to recent purchasers). Continued use of our services after a change indicates acceptance of the updated policy.

13. Contact us

For any privacy-related questions or requests:

• Email: contact@vlink.asia
• Website: https://vlink.asia/
• Postal: VLink Asia, Ho Chi Minh City, Vietnam

© 2026 VLink Asia. This privacy policy is made available under CC BY 4.0 — feel free to adapt it for your own project.