Policies & Terms

Protecting the personal data and business data of our Customers is an important duty and a top priority for Dataverses. This Privacy Policy is an integral part of the Terms of Use and/or the service contracts/agreements between Dataverses and the Customer, intended to record the Customer's consent.

This Privacy Policy explains:

• The types of Customer personal data that Dataverses processes when you use the Service;
• The purposes for which Dataverses processes personal data;
• How Dataverses collects personal data;
• The organizations and individuals that process personal data;
• The rights and obligations of data subjects.

You must read, agree to, and accept all of the terms and conditions contained in this Privacy Policy before you may use the Service. By registering for the Service, you have expressed your agreement to be bound by the terms of this Privacy Policy.

1. INTRODUCTION AND DEFINITIONS

In this Privacy Policy, the following terms are understood as follows:

• Dataverses: The Company that owns the platform, together with its branches, representative offices, business locations, and technical infrastructure providing omnichannel data analytics solutions.
• Customer (or "You"): All organizations and individuals that interact, transact, access, provide, or use the products and services of Dataverses.
• Customer's Subscriber: The final purchaser, end user, or individuals who interact on the stores and e-commerce marketplaces (Haravan, Shopee, Lazada, Tiki, etc.) owned by the Customer.
• Personal Data: Information and data of a Customer or a Customer's Subscriber in the form of symbols, writing, numbers, images, sounds, or similar forms in the electronic environment that is associated with a specific person or helps to identify a specific person.
• Data Processing: The performance by Dataverses of one or more activities affecting Personal Data, including but not limited to activities such as: collection, recording, analysis, storage, editing, access, encryption, decryption, copying, sharing, transmission, synchronization, deletion, or destruction of data.

2. TYPES OF DATA PROCESSED

In order to serve the purposes of analytics and the operation of the AI data assistant, Dataverses may collect and process the following types of data:

• Basic personal data of the Customer: Full name, phone number, email address, and business/store name used to create and manage the account.
• E-commerce operational data (technical authorization from the Customer): Order information, revenue data (GMV, AOV), product quantities, inventory status, shipping information, and the basic identifying information of the Customer's Subscribers, for the purpose of generating reporting charts and running AI forecasting models.
• Sensitive data and payment security: Dataverses commits not to require and not to store any information relating to the bank account or credit card number of the Customer or end users. When you pay for a subscription plan, the transaction is processed independently through a payment gateway partner (such as Stripe, VNPay, MoMo, etc.), and you must comply with the separate information privacy policy of that service provider.

3. HOW DATA IS COLLECTED

Dataverses collects data through the following methods:

• Through direct interaction: The Customer registers an account, submits a technical support request, or interacts through the official channels of Dataverses.
• Through API connections (synchronization authorization): When the Customer grants permission to connect the Dataverses account with sales platforms (Haravan, Shopee, Lazada, Tiki, etc.), the system will automatically synchronize the data stream according to the established configuration.
• Through use of the AI Assistant: The system records the content of the Customer's natural-language data query questions through conversational applications (Zalo, Telegram, Messenger) so that the AI can return the corresponding report results.
• Automatic collection technologies: IP address, device type, browser, the time of access to the Dashboard, and information automatically recorded through the use of cookies, for the purpose of optimizing the user experience.

4. PURPOSES OF DATA PROCESSING

Dataverses processes the collected data for the following specific purposes:

• To provide, operate, and maintain the features of the Dataverses platform;
• To identify and authenticate Customer information in order to secure account access;
• To process and compute business data in order to publish Dashboard charts and management reports;
• To train and optimize the natural-language processing flow of the AI Assistant in order to respond accurately to Customer queries;
• To send technical notifications, product feature updates, or urgent support;
• To prevent activities involving security sabotage, fraud, or violations of the Terms of Use.

5. ORGANIZATIONS AND INDIVIDUALS WITH WHOM DATA IS SHARED

Dataverses commits to absolute confidentiality and does not sell your data. We share data only within a limited scope and in compliance with the law, with the following parties:

• Competent state agencies in Vietnam upon an official written request in accordance with the law;
• Dispute-resolution bodies (Arbitration, Courts) in the event of a legal dispute;
• Partners providing secure Cloud infrastructure (such as AWS, Google Cloud) that have made written commitments to protect personal data according to international standards.

6. DATA STORAGE AND SECURITY

• Retention period: The Customer's personal data and business data will be retained throughout the period during which the Customer maintains a service account at Dataverses. In the event that the Customer ceases use or makes a written request to delete data, Dataverses will proceed to permanently delete or encrypt the data within 30 days, unless otherwise provided by law.
• Security measures: All transmitted data is encrypted using the SSL/TLS 256-bit protocol. The system applies multi-layer firewall technology and a daily automatic backup mechanism in order to prevent the risk of information loss.

7. RIGHTS AND OBLIGATIONS OF THE CUSTOMER

7.1. Rights of the Customer (data subject)

The Customer has full rights in accordance with Decree No. 13/2023/ND-CP, including:

• The right to be informed about the processing of their data;
• The right to consent to or withdraw consent for the processing of data;
• The right to access, edit, or request the editing of the personal data of their account;
• The right to delete or request the deletion of personal data. Dataverses will process the request within 72 hours of receiving a valid request by email from the Customer.

7.2. Obligations regarding the "Customer's Subscriber"

• Because Dataverses acts as a Data Processor under technical authorization and has no direct relationship with your final purchasers, the Customer is responsible for ensuring that you have a full legal basis and adequate consent from your purchasers for Dataverses to carry out the collection and analysis of information.
• If your final purchaser requests to unsubscribe or to delete their data from the analytics system, you are responsible for sending a written technical request notice to Dataverses. We commit to coordinate the processing within 72 hours.

8. INCIDENT NOTIFICATION AND RISK PREVENTION

• In the event that the server storing information is attacked by hackers or a cybersecurity incident occurs leading to a risk of data loss, Dataverses is responsible for notifying the competent authorities for timely investigation and handling, and at the same time informing the Customer within a maximum of 72 hours from the discovery of the incident.
• The Customer is responsible for keeping login information absolutely confidential. In the event of suspected abuse or password leakage, you must notify Dataverses immediately so that we can proceed to freeze the account and limit damage.

9. CHANGES TO THE PRIVACY POLICY

In order to comply with changes in applicable law as well as to serve the upgrading of technological features, Dataverses has the right to update and change this Privacy Policy from time to time. Any changes will be announced publicly on the homepage or sent directly via the Customer's email.

10. LEGAL CONTACT INFORMATION

To exercise your rights in accordance with the law, or to submit requests, feedback, or complaints regarding the processing of personal data, please contact us officially through the information below:

• Governing entity: Dataverses Vietnam
• Office address: 104 Mai Thi Luu, Da Kao Ward, District 1, Ho Chi Minh City, Vietnam.
• Phone number: +84 366 128 713
• Receiving email: [email protected]

Respectfully,