Privacy Policy | Danang.Beauty

1. Who we are

danang.beauty is a catalog of spas in Da Nang and Hoi An with an AI chat assistant, Lily. We take no bookings and no payments: guests book with the spa and pay the spa directly. The chat is for adults (18 and over), as our terms say. For any question about your data, write to hello@danang.beauty.

2. What we collect and why

Your chat with Lily. The messages you write, Lily's replies, the language, and an id of your chat session that your browser keeps. With the chat we also record what it needs to run and to be checked: your choice in the consent window, which button and type of page opened the chat, whether you came through one of our own demo or outreach links, whether a message was typed or a pre-filled spa name, how Lily's reply went (answered or failed) and requests for a person. Purpose: to answer you, help you choose a spa, check how Lily works and count how the chat is used (numbers only, no text). Basis: your consent in the window before the first message. If you choose “Not now”, the chat does not start and none of your messages are recorded; you can write to us by e-mail instead.
Health details (only if you mention them). If you tell Lily about pregnancy, an injury, an allergy or another health matter, this is sensitive data: it stays in the conversation, with the recipients in section 5, and is not passed to spas. Lily does not ask for it, and you do not have to share it.
Demand analysis (optional, a separate box). If you tick it, we link counts of booking intentions — for example, “a guest asked how to book this spa” — to your chat session, to understand what guests look for. Without it, the count itself carries no link to your chat and our team's alert about it does not point to your conversation; the conversation, which our team can read (section 3), still shows the question. The chat works either way. To withdraw this consent, clear this site's data in your browser: the chat window will ask again, and a new chat starts.
Voice (only if you use the microphone). Your recording is turned into text, and Lily's reply can be read aloud. danang.beauty does not store the recording; Deepgram, the speech recognition service, may keep it to improve its models.
Contact details you choose to give (an e-mail address or a KakaoTalk ID): used only to answer you.
Spa owners' applications (the partner page form or chat, or a guest chat in which you tell Lily that you run a spa): the spa's name, address, services, links and the contact you give, to discuss listing the spa and a pilot of Lily on the spa's own channels, and to contact you about them. The chat on the partner page asks for its own consent.
Visit counts (not linked to you). Purpose: to see which pages and sources bring visitors to the site and to the chat. We count the type of page, the spa or article shown, the language, the kind of source (search, AI assistant, social network, messenger, direct) with the referring site's address (its host name only) and the campaign tags of the link you followed, which button opened the chat and whether its consent window was shown, which spa contact you tapped in Lily's reply, whether you stayed on the page for 15 seconds, opened a second page or used the chat, the class of device (phone, tablet, computer), the in-app browser and the country of the network. A random id that lives only in the open page — it is not stored on your device — groups the events of one tab. We do not store your IP address for counting and use no cookies for it, and the links our team sends carry no tags that point to a person or a spa. If your browser sends Global Privacy Control, these visit counts are not sent; the chat, if you use it, is recorded as described above.

3. How Lily works

Lily is an AI model (Claude, by Anthropic). It answers from the catalog facts we keep about each spa: name, area, price level, description, treatments, durations, opening hours and the spa's own booking contact. Lily does not book, does not take payments and cannot see a spa's availability: the spa itself confirms times, prices and availability. Lily can make mistakes. Its answers are suggestions: they decide nothing about you and do not limit your rights. The danang.beauty team can read conversations in our admin panel to check answers and handle requests.

4. How Lily chooses a spa

By what you ask — mood, occasion, area, budget — and the catalog facts. No spa pays to be recommended, and there are no paid places in the catalog.

5. Who receives data

Anthropic, PBC (USA) — the AI model that writes Lily's replies on the website and in our Telegram bot and drafts our team's replies; it also reads spa owners' chats to fill in their application and sorts the e-mails sent to hello@danang.beauty.
Neon (database, Singapore region) — stores conversations, applications and counts.
Vercel (USA) — hosts the website.
BANLANG, our translation and voice service (hosted by Railway), and the providers it uses: Anthropic (translation), Deepgram (speech recognition), Cartesia (voice), OpenAI (text search, backup speech recognition and backup voice), Microsoft (last-resort voice) and Upstash (a cache that keeps translations for up to 24 hours and spoken replies for up to 7 days) — when you use voice, or when our team translates a conversation.
Telegram — notifications to our team. For the website chat they carry no message text since 1 October 2026 (earlier ones did, and they remain in Telegram). If you write to our Telegram bot, Lily answers you there and the conversation is processed and stored like a website chat; the start of your first message, your name and username reach our team in Telegram and, when you ask for a person, by e-mail (Resend), and our team may answer you there. If you start a spa application in the bot and stop, the bot reminds you once. Spa owners' applications are forwarded with the contact details given in them.
Kakao (KakaoTalk, South Korea) — if you write to our KakaoTalk or give Lily your KakaoTalk ID, our team answers you there.
Resend — e-mail notifications to our team.
Google (Gmail) — our mailbox hello@danang.beauty, forwarded by Namecheap: a Google Apps Script passes each incoming e-mail to Anthropic's AI model, which sorts it and writes a short summary that reaches our team in Telegram.

These services process data outside Vietnam, including in the USA, Singapore and South Korea. We do not sell data.

6. How long we keep data

We have not set fixed storage periods yet, and nothing deletes data automatically: conversations, applications and records from our earlier WhatsApp and booking channels (name, phone number, the request and notes for the therapist) are kept until you ask us to delete yours — write to hello@danang.beauty. Visit counts cannot be traced to you and are kept as they are. When we set periods, this page will state them with the date.

7. How we protect data

Only our team can open conversations and applications: in our admin panel, which needs a password, or in the database, which needs its own credentials. The site works only over encrypted connections (HTTPS), and our servers reach the services in section 5 over encrypted connections too.

8. Cookies and browser storage

NEXT_LOCALE cookie — the language you chose, for one year.
db.chat.sid in your browser's storage — created after you agree in the chat window: the id of your chat session, so the conversation survives a page reload. It stays until you clear this site's data, and anyone using this browser can reopen the chat.
db.chat.consent and db.chat.consent.b2b — your choice in the guests' and in the spa owners' consent window, kept until you clear this site's data.
db.nostats — only in browsers our team uses (set by opening the site with ?nostats=1 or by opening our admin panel): visits from them are marked as ours and left out of the counts.

9. Your rights and obligations

You can ask to know what data we hold about you, get a copy, correct it, delete it, restrict or object to its processing, and withdraw your consent at any time; withdrawing stops further processing and does not affect what was done before. In this browser you can withdraw your chat consent yourself: clear this site's data, and the chat will ask again. For anything else, write to hello@danang.beauty; so that we can find your conversation, tell us roughly when you chatted with Lily, in which language, and your first message.

We reply within 2 working days and do what you ask within the time Vietnamese law sets: 10 days to show, copy or correct data, 15 days to stop or restrict processing, 20 days to delete it (15, 20 and 30 days when one of the services in section 5 has to act). If we need longer, we tell you why; the law allows this once. If a law requires us to keep some of your data, we tell you what we keep, why and until when, and use it for nothing else. You can also complain to the competent authority of Vietnam, or go to court and claim compensation.

If you do not want to talk to an AI, write to the same address: a person reads and answers your e-mail, although our mailbox first sorts every e-mail with an AI model (section 5).

Your obligations under Vietnamese law: keep your own data safe, do not share other people's personal data without their consent, and give accurate details when you ask us to answer you.

10. Changes and languages

We publish each new version on this page with its date. If a change affects what you agreed to in the chat window, the chat asks you again before you continue. This policy is in English; a Vietnamese version will follow. If the versions differ, the one more favourable to you applies.