Privacy Policy

Account data: your name, email address, password hash, session data and workspace membership.

Workspace content: ideas, votes, comments, projects, transactions, resources, wiki pages and files that you or your teammates add.

Connection data: OAuth client name, scopes, connection timestamps, token status and the MCP client you authorize.

Billing data: plan, billing cycle, payment reference and invoices. Cofyn does not store full card numbers because Premium payments use VietQR bank transfer.

Technical data: IP address, browser and device information, request logs, error logs and security events.

Support data: messages and attachments you send to our support team.

Provide, operate and secure the Cofyn service, including workspace features and the MCP connector.

Authenticate users, authorize OAuth scopes, sync data with the MCP client you connect, and enforce plan limits.

Process Premium payments, issue invoices, prevent abuse and troubleshoot errors.

Send service messages and respond to support requests.

Improve the product using aggregated or de-identified usage information.

When you connect Cofyn to ChatGPT or another MCP client, you authorize that client to call Cofyn tools with the scopes shown on the consent screen. Cofyn returns workspace data to the client so it can answer your request.

Cofyn does not control how ChatGPT or another third-party client stores or uses data after it receives that data. Those services are governed by their own terms and privacy policies.

You can revoke a connection at any time in Cofyn under Settings, Kết nối AI. Revoking a connection stops new token use; it does not delete content already copied into another service.

Cofyn uses service providers for hosting, databases, email delivery, payments, error monitoring and optional AI features. They process data on our instructions and only as needed to provide the service.

When CofynAI is enabled, workspace text may be sent to our configured AI model provider to generate scores, replies or poll suggestions.

We may disclose data when required by law, to protect rights and safety, or as part of a merger, acquisition or transfer of the service.

We do not sell personal data or share it for cross-context behavioral advertising.

We keep account and workspace data while your account is active, while you need the service, and for the period reasonably required for backups, security, billing, dispute resolution and legal obligations.

Deleted workspace content may remain in backups for a limited period before it is overwritten. Revoked access tokens stop working immediately for new requests.

We may retain limited logs and records where necessary to prevent abuse or comply with law.

Cofyn uses HTTPS in transit, hashed passwords, scoped OAuth tokens, workspace isolation, access controls and audit logs.

No method of transmission or storage is completely secure. You are responsible for keeping your password safe and for reviewing the apps you authorize.

Cofyn support will never ask for your password or a full OAuth token.

You can access and update your profile in Cofyn, revoke AI connections in Settings, Kết nối AI, and ask a workspace admin to remove workspace content.

You may request access, correction, deletion, export or restriction of your personal data, or object to certain processing, by contacting [email protected].

We may need to verify your identity before completing a request. Some data may be retained where the law requires it or where we have a legitimate need for security and dispute resolution.

Cofyn uses session cookies and similar storage to keep you signed in, protect forms against CSRF and remember interface preferences. We do not use advertising cookies.

Cofyn is operated from Vietnam and uses providers in other countries. Data may be processed outside your country. We use contractual and technical safeguards appropriate to the service.

Cofyn is a business tool and is not directed to children. You must be at least 18 years old, or the age of legal majority in your country, to create a workspace or use the service.

We may update this policy as the service changes. Material changes will be posted on this page with a new update date.

Questions or requests: [email protected].