Privacy Policy / Chính sách Bảo mật
Version / Phiên bản: {{policy_version}} Last updated / Cập nhật lần cuối: {{last_updated}} Effective / Hiệu lực: {{effective_date}}
⚠️ Starting template. Have Vietnamese counsel review before publishing. The "no third-party sharing" commitment in §7 is load-bearing — keep its language strict.
1. Who we are / Chúng tôi là ai
English. License Tracker Vietnam Co., Ltd. ("License Tracker", "we", "us") provides software-asset-management software-as-a-service to businesses worldwide. For any matter relating to this Privacy Policy, contact our Data Protection Officer (DPO) at [email protected] or by post at {{lt_address}}.
Tiếng Việt. Công ty TNHH License Tracker Vietnam ("License Tracker", "chúng tôi") cung cấp dịch vụ quản lý tài sản phần mềm dưới dạng SaaS cho doanh nghiệp toàn cầu. Mọi vấn đề liên quan đến Chính sách Bảo mật này, vui lòng liên hệ Trưởng phòng Bảo vệ Dữ liệu (DPO) tại [email protected] hoặc qua đường bưu điện tới {{lt_address}}.
2. Scope / Phạm vi áp dụng
This Policy describes how we handle personal data in three contexts:
- Marketing site (licensetracker.vn): visitors browsing our public pages
- Customer dashboard (app.licensetracker.vn): personnel of our customer companies who sign in to manage their organisation's data
- Desktop agent: software installed by our customers on their own employees' devices
Where License Tracker acts as a processor (handling personal data on behalf of a customer who is the controller), please refer to our Data Processing Agreement — that document governs the relationship.
Chính sách này mô tả cách chúng tôi xử lý dữ liệu cá nhân trong ba bối cảnh: trang marketing, dashboard khách hàng, và agent desktop. Trường hợp License Tracker là "bên xử lý", quan hệ được điều chỉnh bởi [Hợp đồng Xử lý Dữ liệu](/legal/dpa).
3. Categories of personal data / Các loại dữ liệu cá nhân
Marketing site visitors
- Cookies necessary for site functioning (set automatically)
- With consent: analytics + marketing cookies (see Cookie Policy)
- Submitted forms: name, work email, company name (only what you give us)
Dashboard users
- Account: full name, work email, role, organisation
- Authentication: hashed password, 2FA secret, IP + UA of sign-ins
- Activity: pages viewed, actions taken (for support + audit)
Agent-collected data (Customer is Controller, we are Processor)
- Device identifiers (hostname, OS, OS version, architecture)
- User identifier (local OS username, anonymisable per IT policy)
- Software inventory (name, vendor, version, install date)
We do NOT collect, by code: file contents, browser history, passwords, screenshots, keystrokes, clipboard, network traffic, geolocation, biometric data, or any sensitive personal data under Article 26 of Nghị định 13/2023.
Chúng tôi KHÔNG bao giờ thu thập: nội dung file, lịch sử trình duyệt, mật khẩu, ảnh chụp màn hình, phím gõ, clipboard, lưu lượng mạng, vị trí địa lý, dữ liệu sinh trắc học, hoặc bất kỳ dữ liệu cá nhân nhạy cảm nào theo Điều 26 Nghị định 13/2023.
4. Purposes and legal basis / Mục đích và cơ sở pháp lý
| Purpose / Mục đích | Legal basis (GDPR) / Căn cứ (PDPD) |
|---|---|
| Provide the service to logged-in customers | Contract performance · Art. 6(1)(b) GDPR · Điều 17(2) PDPD |
| Maintain account security + abuse prevention | Legitimate interests · Art. 6(1)(f) · Điều 17(3) |
| Send transactional emails (receipts, alerts) | Contract performance |
| Send marketing emails | Consent · Art. 6(1)(a) · Điều 17(1) — you can withdraw anytime |
| Detect software in agent telemetry | Customer's legitimate interest as Controller; we process on their instructions per the DPA |
| Comply with Vietnamese tax + commercial law | Legal obligation · Art. 6(1)(c) · Điều 17(4) |
5. Retention / Thời hạn lưu trữ
| Data / Dữ liệu | Retention / Thời hạn |
|---|---|
| Account records | Duration of account + 90 days after cancellation |
| Billing records (incl. VAT invoices) | 10 years per Vietnamese tax law (Luật Quản lý Thuế) |
| Audit log entries | 7 years |
| Agent telemetry (customer-owned) | Per Customer instructions; default 24 months |
| Marketing email opt-ins | Until you unsubscribe |
| Marketing site analytics cookies | 13 months max |
6. Recipients and transfers / Người nhận và chuyển dữ liệu
Personal data may be processed by our staff and by the sub-processors listed at https://licensetracker.vn/legal/sub-processors.
Primary infrastructure: AWS ap-southeast-1 (Singapore). Where Vietnamese law requires data localisation for specific data, customers can opt for VNG Cloud / Viettel IDC residency (Enterprise plan, see DPA).
For EU/EEA personal data, transfers outside the EEA rely on Standard Contractual Clauses (Module 2: Controller-to-Processor) per Commission Decision 2021/914, supplemented with the safeguards in our DPA Annex III.
7. What we do NOT do with your data / Cam kết KHÔNG làm gì
License Tracker does not:
- Sell personal data — ever, to anyone.
- Share personal data with software vendors (e.g. Microsoft, Adobe, Autodesk), copyright enforcement organisations (e.g. BSA, SIIA, FAST), industry associations, or government agencies — except where required by a valid court order issued by a Vietnamese court or by a legally enforceable order from a competent EU/EEA supervisory authority for our EU customers.
- Use customer telemetry to enrich a vendor catalogue sold back to anyone.
- Run advertising in the dashboard or agent.
If we receive a disclosure request from any government authority (Vietnamese or foreign), we will challenge it where lawful, notify the affected Customer as soon as legally permitted, and publish anonymised statistics in our annual transparency report.
License Tracker KHÔNG bán dữ liệu cá nhân — không bao giờ, với bất kỳ ai. KHÔNG chia sẻ dữ liệu cá nhân với vendor phần mềm (Microsoft, Adobe, Autodesk), tổ chức bảo vệ bản quyền (BSA, SIIA, FAST), hiệp hội ngành, hoặc cơ quan chính phủ — TRỪ KHI có lệnh hợp lệ từ tòa án Việt Nam hoặc cơ quan giám sát EU/EEA có thẩm quyền đối với khách hàng EU của chúng tôi.
8. Your rights / Quyền của bạn
Under Nghị định 13/2023 and (if applicable) GDPR, you have the right to:
- Access a copy of your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten"), subject to retention obligations
- Restriction of processing
- Portability in a structured, machine-readable format
- Objection to processing based on legitimate interests
- Withdraw consent at any time without affecting prior processing
- Not be subject to automated decisions with legal effect — we don't make any
To exercise any right, use our Data Subject Request Portal or email [email protected]. We respond within 30 days (extendable by 60 days for complex requests, with prior notice).
If we cannot resolve a complaint to your satisfaction, you may file a complaint with:
- Vietnam: Cục An ninh mạng và phòng, chống tội phạm sử dụng công nghệ cao (A05), Ministry of Public Security
- EU/EEA: Your local data protection authority (list: edpb.europa.eu)
9. Cookies / Cookie
See our dedicated Cookie Policy. On first visit, our banner gives you granular opt-in for analytics + marketing cookies. Necessary cookies are set automatically because the site cannot function without them.
10. Children / Trẻ em
Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has submitted data, contact [email protected] and we will delete it promptly.
11. Changes / Thay đổi
We may update this Policy. Material changes are communicated by:
- Email to dashboard users at least 30 days before they take effect
- Banner on the dashboard
- Updated version number + date at the top
Continued use of the service after the effective date constitutes acceptance.
12. Contact / Liên hệ
- DPO: [email protected]
- Legal: [email protected]
- Post:
{{lt_address}} - Phone (DPO):
{{lt_dpo_phone}}(business hours, Vietnam time)