Privacy Policy

This Privacy Policy explains how BizChain Viet Nam Company Limited (“BizChain”, “we”, “us”) collects, uses, discloses, and protects personal data when you use bizchain.vn, our SaaS products (including Vietcotuong and Karace), and related services.

1. Data Controller

2. Scope

This policy applies to personal data processed by BizChain as a data controller. It covers:

• Visitors to bizchain.vn and our product websites.
• Registered users of BizChain SaaS platforms.
• Individuals who contact us through forms, email, or support channels.
• Payment-related data handled in connection with subscriptions (processed in part by Stripe and SePay).

3. Data We Collect

3.1 Information you provide

• Account data: name, username, email address, password (stored hashed), profile information, preferences.
• Contact data: information submitted through contact forms, support requests, or correspondence.
• Payment data: billing name, address, and transaction metadata. Full card numbers are processed by Stripe and are not stored on BizChain servers. Bank transfer and local payment details may be processed by SePay according to the payment method you choose.
• User content: game records, messages, files, course progress, and other content you create or upload.

3.2 Information collected automatically

• Device and usage data: IP address, browser type, operating system, pages viewed, features used, timestamps, referral URLs.
• Cookies and similar technologies: see our Cookie Policy.
• Security data: logs from Cloudflare Turnstile, fraud-prevention signals, and authentication events.

3.3 Information from third parties

• Payment status and subscription details from Stripe and SePay.
• Authentication or profile data if you choose to sign in via a third-party provider (when offered).
• Analytics or infrastructure metrics from service providers acting on our instructions.

4. How We Use Personal Data

We process personal data to:

We do not sell your personal data.

5. Sharing and Disclosure

We may share personal data with:

• Service providers who assist with hosting, payments (Stripe, SePay), email, analytics, security (Cloudflare), and customer support, under contractual confidentiality and data-protection obligations.
• Affiliates within the BizChain group for internal operations consistent with this policy.
• Authorities when required by law, court order, or to protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, or asset sale, with notice where required.

International transfers may occur when we or our providers use infrastructure outside Vietnam. Where required, we implement appropriate safeguards.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, including:

• Account data: for the life of your account and a reasonable period afterward (typically up to 24 months) unless a longer period is required by law or for dispute resolution.
• Transaction records: as required by tax and accounting regulations.
• Security logs: typically 12–90 days, unless needed for an investigation.
• User content: until you delete it or close your account, subject to backups and legal holds.

You may request deletion as described in Section 8.

7. Security

We implement technical and organizational measures appropriate to the risk, including encryption in transit (HTTPS), access controls, and secure payment handling via Stripe and SePay. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Report security concerns to legal@bizchain.vn.

8. Your Rights

Depending on your location, you may have the right to:

• Access a copy of your personal data.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal exceptions.
• Restrict or object to certain processing.
• Data portability where technically feasible.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

Vietnam (Decree 13/2023/NĐ-CP)

If you are in Vietnam, you have rights under personal data protection regulations, including the right to know, consent, access, rectify, delete, restrict processing, and withdraw consent. Contact us to exercise these rights.

European Economic Area (GDPR)

If GDPR applies, BizChain processes data as described above. EU residents may contact us for GDPR-related requests. We will respond within applicable timeframes.

To exercise your rights, email legal@bizchain.vn with sufficient detail to verify your identity. We may need to confirm your request before acting.

9. Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

10. Cookies

We use cookies and similar technologies as described in our Cookie Policy. You can manage preferences through your browser settings.

11. Third-Party Links

Our services may link to third-party websites or services. Their privacy practices are governed by their own policies. We encourage you to review them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top will reflect the latest version. Material changes will be communicated through the service or by email where appropriate.

13. Contact

BizChain Viet Nam Company Limited
Email: legal@bizchain.vn
Website: bizchain.vn/contact