What we collect, and what we do with it.

What the contact form collects

The contact form and the venture submission form collect exactly six fields: the reason for your enquiry, your name, your work email address, your company, your role, and your message. Company and role are optional; the rest are required in order to reply to you.

The form also records which language version of the site you used, and the moment the page finished loading. The load time is used only to reject automated submissions, which complete a form faster than a person can.

There is one hidden field that you never see. It exists to catch automated submissions and its contents are discarded.

Why we collect it

To read your enquiry and reply to it. That is the only purpose.

We do not use it for marketing, we do not add you to a mailing list, and we do not sell, rent or share it with anyone outside the processing described below.

How a submission is handled

When you submit the form, the data is sent over HTTPS to an endpoint on this site, validated, and then sent onward as an email to hello@nait.cloud. If a mail channel is configured, you also receive an acknowledgement at the address you provided.

The website application itself does not store your submission. There is no database, no file storage and no customer record system behind this form. Once the email has been handed to the mail provider, the application retains nothing.

Your submission therefore lives in our email inbox, in the same way an email you sent us directly would.

Third parties actually involved

Three providers are involved in running this site, and only these three:

• Vercel Inc. hosts the website and receives the form request. Like any web host it processes the network request, which includes your IP address. Vercel also provides the two measurement services described below, Web Analytics and Speed Insights.
• Resend delivers the notification email to us and the acknowledgement to you. The contents of your submission pass through it.
• Zoho Corporation provides the hello@nait.cloud mailbox where your message is read and stored.

The site loads no tag manager, no advertising pixel, no chat widget, no embedded video and no third-party fonts. Fonts are served from this domain. The two Vercel measurement services described in the next section are the only things on these pages that report anything about your visit, neither sets a cookie, and neither receives anything you type.

IP addresses

To limit abuse, the form endpoint keeps a short-lived count of submissions per IP address. Each entry holds an IP address and the times it submitted, is used only to enforce a limit of five submissions per ten minutes, and is discarded after that window. It is held in memory only and is never written to disk or shared.

Website analytics

This site measures how it is used, so we can see which pages are read and where visitors come from. Two services do that, both provided by Vercel, and both work without cookies.

Vercel Web Analytics counts page views. For each it records the time, the page address, the referring site, filtered query parameters, an approximate location (country, region and city), and the browser, operating system and device type your browser reports. It does not use cookies. Vercel identifies a visitor by a hash computed from the incoming request and discards that visitor session after 24 hours, and states that the data is anonymous, is not tied to any individual or IP address, and cannot be used to reconstruct your browsing across websites.

Vercel Speed Insights measures how quickly pages load and respond — the Core Web Vitals. It records the route, the URL, network speed, browser, device type, operating system and country. Vercel states that the recording is anonymous and cannot be used to reconstruct a browsing session or identify a visitor.

Only page views are recorded. The site does not record individual interactions such as which button was clicked, which product was opened or whether a form was submitted. Nothing you type into the contact form is ever sent to either measurement service.

There is no session recording, no heatmap, no advertising pixel, no cross-site or cross-device tracking, and no profile of you.

Cookies

This site sets one cookie: nait.locale, which remembers whether you chose English or Vietnamese. It is first-party, contains only the two letters of the language code, lasts one year, and is set only when you use the language switcher yourself. The same value is also stored in your browser's local storage.

Both measurement services described above are cookieless, so there are no analytics cookies. There are no advertising cookies and no third-party cookies. Clearing cookies affects nothing except your saved language preference.

How long we keep it

The application stores nothing, so it has nothing to delete. Emails resulting from your enquiry are kept in our mailbox for as long as the enquiry remains relevant to a possible or ongoing working relationship.

We have not set a fixed retention period. Rather than state a number we do not enforce, we will delete your correspondence on request — see the section below.

Security

All traffic is served over HTTPS. Form input is validated on the server as well as in the browser, and every value is escaped before being placed in an email, so a submission cannot inject content into our systems. Submissions are rate-limited per IP address, and automated submissions are filtered by the hidden field and the minimum completion time described above.

No system is perfectly secure. We describe what is implemented; we do not offer a guarantee.

Your rights

You may ask us what information about you we hold, ask for a correction, or ask us to delete it. Write to hello@nait.cloud from the address you used, and we will act on it.

Vietnamese law, including Decree 13/2023/ND-CP on personal data protection, gives data subjects rights over their personal data. We aim to meet those obligations, and this policy sets out plainly what we do so you can hold us to it.

Changes to this policy

If the data flow changes — a new provider, a stored record, anything that affects what happens to your information — this page is updated and the version and date at the top change with it.