Privacy Policy

This Privacy Policy explains how Montessori Vietnam Education Company Limited (MVEC) (operating https://montessori.org.vn/) and its authorized technical operations and analytics integration application, Gleb Team (developed and maintained by Gleb Nguyen, contact: mrglebx@gmail.com), collect, access, use, store, protect, and disclose information from website visitors and authorized Google OAuth 2.0 users.

1. Application Identity & Relationship

Gleb Team is the technical analytics, tag-management, and digital operations application used to administer Google Tag Manager containers, website measurement tags, and authorized property configurations for Montessori.org.vn and authorized partner accounts. This Privacy Policy governs both general visitors to montessori.org.vn and authorized administrators who connect their Google account to Gleb Team via Google OAuth 2.0.

2. Information & Google User Data We Access

2.1 Website Visitor & Customer Information (montessori.org.vn)

• Contact & Inquiry Data: Full name, email address, phone number, message content, and course or Montessori material inquiries voluntarily submitted via contact or newsletter forms.
• Order & Service Data: Billing/delivery name, shipping address, phone number, and order details submitted when purchasing Montessori educational materials or registering for training programs.
• Technical & Usage Logs: Browser type, IP address, referring URL, pages visited, and session timestamps used for website security, fraud prevention, and aggregate analytics.

2.2 Google User Data Accessed via OAuth 2.0 (Gleb Team)

When an authorized administrator explicitly signs in and grants consent via Google OAuth 2.0, Gleb Team requests only the permissions (scopes) approved on the Google consent screen:

• Basic Account Verification (openid, userinfo.email): Used strictly to identify and verify the authorized operator's Google email address during authentication.
• Google Tag Manager API Scopes:
  • https://www.googleapis.com/auth/tagmanager.readonly: View Google Tag Manager accounts, containers, workspaces, tags, triggers, variables, and container versions.
  • https://www.googleapis.com/auth/tagmanager.manage.accounts: View and manage authorized Google Tag Manager account settings.
  • https://www.googleapis.com/auth/tagmanager.edit.containers: Create and update Google Tag Manager containers and their subcomponents (tags, triggers, variables).
  • https://www.googleapis.com/auth/tagmanager.edit.containerversions: Create and edit container versions prior to review or publishing.
  • https://www.googleapis.com/auth/tagmanager.publish: Publish approved Google Tag Manager container versions to production websites.
  • https://www.googleapis.com/auth/tagmanager.manage.users: View and update authorized user permissions on Google Tag Manager accounts and containers.
  • https://www.googleapis.com/auth/tagmanager.delete.containers: Delete unused or test Google Tag Manager containers only when explicitly instructed by the account administrator.

3. How We Use Collected Information & Google User Data

We use accessed information strictly for the specific, user-requested operational purposes below:

• Tag Management & Measurement Administration: Inspecting, configuring, testing, versioning, and publishing Google Tag Manager containers and conversion/analytics tags on authorized websites.
• Access Hygiene & Auditing: Reviewing Tag Manager container permissions and auditing tag implementations for security, performance, and measurement accuracy.
• Customer & Student Support (montessori.org.vn): Responding to training inquiries, processing product orders, sending requested updates, and preventing spam or unauthorized traffic.

Prohibited Uses: Neither Gleb Team nor MVEC sells, rents, or trades Google user data; uses Google user data for targeted third-party advertising brokerage or credit determinations; transfers Google user data to unrelated third parties; or uses Google API data to train generalized artificial intelligence or machine learning models.

4. Google API Services User Data Policy (Limited Use)

• Google user data accessed through OAuth scopes is used solely to provide and maintain the user-requested Tag Manager and property administration workflows.
• Human access to Google user data is strictly prohibited except where the user provides explicit affirmative consent for support/troubleshooting, or where necessary for security, abuse prevention, or compliance with applicable law.
• We do not transfer or disclose Google user data to third parties except as strictly necessary to execute user-authorized API operations, comply with legal obligations, or protect system security.

5. Data Storage, Security & Retention

• Encryption in Transit: All communications between users, montessori.org.vn, Gleb Team tools, and Google APIs are encrypted using HTTPS/TLS (SSL).
• Access-Controlled Credential Storage: OAuth 2.0 tokens and workspace configuration exports are stored in restricted, private, access-controlled environments accessible solely to authorized administrators.
• Retention Schedule: Google OAuth tokens and related configuration snapshots are retained only while the user's integration remains active. Website customer and inquiry records are retained only as long as necessary to fulfill services, maintain accounting/legal compliance, or until deletion is requested.

6. Data Sharing & Third-Party Disclosures

We do not sell or share personal information or Google user data with third parties for marketing or commercial resale. Information may be disclosed only in limited, necessary circumstances:

• Authorized Service Execution: To Google APIs directly as initiated by the authenticated administrator's actions.
• Essential Infrastructure & Delivery Partners: Shipping carriers or payment processors strictly to fulfill a customer's physical order on montessori.org.vn, bound by confidentiality obligations.
• Legal Requirements: When required by valid court order, subpoena, or competent regulatory authority under applicable law.

7. User Rights, Revoking Access & Data Deletion

Users and Google account holders retain full control over their data and permissions:

• Revoke Google OAuth Access: You may revoke Gleb Team's access to your Google account at any time by visiting your Google Account Permissions page at https://myaccount.google.com/permissions.
• Access, Correction, or Deletion Requests: You may request access to, correction of, or permanent deletion of any stored OAuth tokens, configuration metadata, or personal website records by emailing mrglebx@gmail.com or info@montessori.org.vn. Verified deletion requests are processed within 5 business days.

8. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in legal requirements, website features, or Google API scopes. Updates will be posted on this page with an updated Effective Date.

9. Contact Information

• OAuth Application & Technical Privacy Contact (Gleb Team): Gleb Nguyen - Email: mrglebx@gmail.com
• Website & Organization Controller: Montessori Vietnam Education Company Limited (MVEC)
• Address: No. 05, Street 23, Nguyen Luong Bang, Tan My Ward, Phu My Hung Urban Area, Ho Chi Minh City, Vietnam
• Phone: 038 601 0168  |  Email: info@montessori.org.vn