Dragon VE Privacy Policy

Version 1 · Effective 1 October 2026

This policy explains what data Dragon VE processes, why, and your rights, under Vietnam's Personal Data Protection Law No. 91/2025/QH15. The Vietnamese version prevails if the two differ.

1. Controller

• Nguyễn Ngọc Bảo Long · Email: dragonve4@gmail.com · Address: Ho Chi Minh City, Vietnam

2. In short

• Dragon VE edits video on your machine. Your projects, video, audio, images and content are not sent to us.
• Dragon VE sends us two kinds of data, listed in section 3: an anonymous usage signal once a day (you can turn it off in Preferences), and what granting agent tasks and checking keys needs — the latter only when you use an external agent or activate a key.

3. Data we process

• Hashed machine identifiers. Dragon VE reads three values of your machine: the Windows MachineGuid, the board's SMBIOS UUID and the system drive's serial number. Each is hashed with SHA-256 on your machine; the original values never leave it. Purpose: recognise the same machine to count tasks and bind keys.
• IP address. Used only against abuse (for example mass virtual machines or key guessing). We keep only a salted hash of it with daily counts, never the address itself.
• Agent usage. Tasks per month, when each task was granted, each task's random id, the plan (trial, free, Pro). We do not receive command contents, what you ask your agent, or project data.
• Anonymous usage signal. Once a day, when you open Dragon VE: a random install id (created at install, not derived from hardware, not linked to your name or email), the Dragon VE version, UI language, Windows version and the date. Purpose: knowing how many people use Dragon VE and which versions are in use. Turn it off in Preferences › Privacy › "Send an anonymous usage signal once a day".
• App information. Dragon VE version, the terms version you accepted, UI language.
• Keys and activations. The hash of the key, its expiry, the (hashed) machines it is active on.
• Purchase information. When you buy a key we receive your name or account name, the channel you contacted us through (email, message), the amount, the time and the transaction id. We keep them with the key for support and reconciliation. The payment itself is processed by your bank or PayPal under their own policies.
• Feedback and crash reports. Only when you press "Send" in the Send feedback dialog (Help › Send feedback, the status bar, Home, or the card shown after Dragon VE hit an error). They contain: what you wrote; your e-mail if you typed one (used only to reply to you); and the attachments you leave ticked: system and version (graphics card, driver, CPU cores, Windows version), the end of the app's log, a project summary (counts only: tracks, clip kinds, effects in use; no file names, paths or text from the project), frame timings, the last export, recent agent actions (command names and errors, not what you asked the agent), the window size, crash details. Before sending, your user folder, Windows account name, machine name and e-mail addresses in the attachments are replaced with <home>, <user>, <pc>, <email>; "Show what will be sent" shows you exactly what goes.

4. Purposes and basis

• Granting and counting agent tasks, activating and checking keys, preventing fraud and abuse: to perform our agreement with you, on the basis of your consent.
• Feedback and crash reports: to find and fix bugs, improve the app and reply to you if you left an e-mail, on the basis of your consent when you press "Send".
• Aggregate, non-identifying statistics (daily and monthly users, versions in use, how many machines use up the free tasks) to improve the app and adjust the plans.
• We do not sell data, use it for advertising, or share it with anyone other than the processors in section 5.

5. Storage and transfer abroad

• The licence server runs on Cloudflare. The data in section 3 may be stored and processed in data centres outside Vietnam. By accepting this policy you consent to that transfer for the purposes in section 4.
• Each feedback report sends a short notice to the developers' Telegram account (report code, kind, version, OS, graphics card and at most the first 300 characters of the message; never your e-mail). Telegram processes that notice under its own policy.
• On your machine, the key and counters are kept in %LOCALAPPDATA%\DragonVE\license.bin, encrypted with Windows DPAPI for your Windows account.

6. Retention

• Machine data, task counts and usage signals: while you use Dragon VE and 24 months after the machine last contacted the server.
• Feedback and crash reports: 24 months from the day they were sent.
• Key data: for the key's term and as long as the law requires records to be kept.
• You may ask for earlier deletion under section 7.

7. Your rights

• You have the rights to be informed, to consent and withdraw consent, to access, correct and delete your data, to restrict or object to processing, and to complain, as the law provides.
• Withdrawing consent: in Dragon VE, open Home › AI agents › "Withdraw consent". Dragon VE then stops sending any of the data in section 3 and external agents can no longer drive it; the editor keeps working. To stop only the usage signal, untick it in Preferences › Privacy.
• Any other request: email dragonve4@gmail.com. We answer within the time the law sets.

8. Security

• Connections to the server use HTTPS. Machine ids and IPs are hashed; keys are stored only as hashes. Every server answer is digitally signed and Dragon VE checks the signature before trusting it.
• Updates: about once a day Dragon VE asks the server for the newest version. Nothing that identifies you or your machine is sent, and the server stores nothing about the request. An installer is downloaded from GitHub only when you click Download, and Dragon VE checks its digital signature and checksum before running it. You can turn the check off in Preferences › Updates.

9. Children

• People under 16 need the consent of a parent or guardian before using agent features.

10. Changes

• When this policy changes materially, Dragon VE shows it again for you to accept before any more data is sent.

This page shows the same text as the app and installer.