Privacy Policy

Effective date: 21 June 2026

FullboxAI ("we", "us") operates https://opencodeai.io.vn, a platform that helps creators generate content and publish it to social media accounts they connect. This policy explains what we collect, how we use it, and your choices.

1. Information we collect

Account information. When you sign in with Google, we receive your name, email address, and profile image to create your account.

Connected social accounts. When you connect a platform (Facebook, Instagram, YouTube, TikTok, Zalo) via its official OAuth, we receive and store an access token and basic account identifiers (e.g. account/page id, open_id, display name) needed to publish on your behalf. For TikTok we request only the user.info.basic and video.upload scopes.

Content you create. Captions, images, videos, product links, schedules, and metrics you generate or import while using the service.

2. How we use your information

We use your information solely to operate the service: to authenticate you, to publish or upload the content you explicitly request to the platforms you connect, to display performance metrics, and to provide support. We do not use your data for advertising.

3. Social platform connections

Actions on a connected platform are performed only when you initiate them. For TikTok, we upload videos to your account's inbox/drafts using the Content Posting API; you review and publish them inside the TikTok app. Our use and transfer of information received from platform APIs adhere to each platform's developer policies, including the TikTok Developer Terms and (where applicable) the Google API Services User Data Policy and the Meta Platform Terms.

4. How we share information

We do not sell your personal data. We share data only: (a) with the social platforms you connect, to carry out the actions you request; (b) with infrastructure providers that host the service on our behalf; or (c) when required by law.

5. Data retention & deletion

You can disconnect any social account at any time from the Accounts page, which removes its stored access token. You may delete your account and all associated data by contacting us at trinhtranducclc@gmail.com; we will delete your data within 30 days, except where retention is required by law.

6. Security

Access tokens and credentials are stored on access-controlled servers and are never exposed to the client. No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

7. Children

The service is not directed to children under 13 (or the minimum age in your country).

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

9. Contact

Questions or data requests: trinhtranducclc@gmail.com.

Terms of Service