Personal Data Privacy Policy

This Privacy Policy is established in strict accordance with Articles 68 to 73 of Decree No. 52/2013/ND-CP (amended by Decree 85/2021/ND-CP) and Decree No. 13/2023/ND-CP on Personal Data Protection. We are committed to safeguarding personal information provided by our users.

1. Purpose of Personal Data Collection

We collect personal data solely for legitimate purposes:

• Account Administration: Issuing API Keys and authenticating user identities.
• Transaction & Billing: Processing VietQR bank transfers and maintaining token balances.
• Invoicing: Generating e-invoices upon customer request according to tax regulations.
• Support: Assisting users and resolving technical inquiries.
• Security: Mitigating DDoS attacks, fraud, or misuse.

2. Scope of Information Collected

Information collected includes:

• Full name, email address, and contact phone number.
• Transaction records: payment timestamps, transfer memo, and balance logs.
• Invoicing data (if applicable): Company name, tax ID, and registered address.
• Technical logs: IP address, access logs, and token usage count. (We do not store private prompt/completion payloads).

3. Data Retention Period

Personal data is retained as long as the user account remains active. Transaction logs and e-invoices are kept in accordance with statutory accounting and tax retention periods.

4. Third Parties with Access to Data

We strictly do not sell or lease user data to third parties. Data is only accessible to:

• Authorized administrative, engineering, and accounting personnel.
• Licensed banking partners for transaction reconciliation.
• Competent Vietnamese government authorities when officially requested by law.

5. Data Controller Information

6. User Rights to Access & Rectify Data

Users can log into Dashboard > Security at any time to review and update personal credentials. To request full deletion, contact our support team at [email protected].

7. Complaints Regarding Personal Data

If you suspect unauthorized processing of your personal data, report it immediately via phone 0355656730 or email [email protected]. We will investigate and respond within 24 to 48 working hours.

8. Security Assurance

All communications are protected via industry-standard 256-bit SSL/TLS encryption. Data is hosted in Tier 3 security-certified datacenters with firewall (WAF) and regular automated backups.