Privacy Policy

Information We Collect

When you work with us or use our platform, we gather several types of information. Some you provide directly. Other data we collect automatically through your interactions with our services.

Personal Identification Information

This includes your name, email address, phone number, and business details when you create an account or contact us. If you're based in Vietnam, we may also collect your citizen identification number when required for compliance purposes.

Financial and Business Data

Our machine learning models need data to work effectively. You might upload financial records, transaction histories, or market data. We treat this information with the highest level of security because we know how sensitive it is.

Technical Information

Like most online services, we automatically collect IP addresses, browser types, device information, and usage patterns. This helps us improve our platform and troubleshoot issues when they arise.

How We Use Your Information

We're pretty straightforward about data usage. Here's what we do with the information we collect:

• Provide and maintain our financial modeling services
• Train and improve our machine learning algorithms (always with anonymized data)
• Communicate with you about your account, updates, and support issues
• Analyze platform performance and user experience
• Comply with Vietnamese legal requirements and financial regulations
• Detect and prevent fraudulent activity or security threats
• Send relevant updates about our services (you can opt out anytime)

Data Storage and Security

Your data is stored on secure servers located in Vietnam, with backup systems maintained according to Vietnamese data sovereignty requirements under Decree 53/2022/NĐ-CP.

Security Measures We Implement

• End-to-end encryption for data transmission (TLS 1.3)
• AES-256 encryption for stored financial data
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Strict access controls—only authorized personnel can access sensitive data
• Automated monitoring for suspicious activity

But let's be honest—no system is completely invulnerable. We do everything we can to protect your information, though we can't guarantee absolute security. If we detect a data breach affecting your information, we'll notify you within 72 hours as required by Vietnamese regulations.

Data Retention Periods

We don't keep your data forever. Here's how long we typically retain different types of information:

Sharing Your Information

We keep data sharing to a minimum. When we do share information, it's with specific parties for specific reasons:

Service Providers

We work with third-party companies for cloud hosting, payment processing, and analytics. These providers only access data necessary for their specific functions and are bound by strict confidentiality agreements.

Legal Requirements

Vietnamese authorities may request data in certain circumstances—criminal investigations, tax audits, or regulatory compliance. We'll comply with valid legal requests while protecting your rights to the extent possible.

Business Transfers

If DevCore-CastFlux is acquired or merges with another company, your data would transfer to the new entity. We'd notify you beforehand and ensure the new owner respects this privacy policy.

Your Privacy Rights

Under Vietnamese law, you have several rights regarding your personal data. We take these seriously.

Access and Portability

You can request a copy of all personal data we hold about you. We'll provide it in a structured, commonly used format within 30 days. There's no charge for the first request each year.

Correction and Updates

Found incorrect information in your account? You can update most details yourself through your account settings. For anything else, contact us and we'll make corrections within 15 days.

Deletion Rights

You can request deletion of your personal data. We'll comply unless we're legally required to retain certain information (like financial records for tax purposes). The deletion process typically takes 45 days to complete across all systems.

Objection and Restriction

You can object to certain types of processing, particularly for marketing purposes. You can also request that we temporarily restrict processing while we verify your concerns about data accuracy or processing legitimacy.

International Data Transfers

Your data primarily stays within Vietnam. However, some of our service providers operate internationally. When data crosses borders, we ensure adequate protection through:

• Standard contractual clauses approved by Vietnamese authorities
• Verification that recipient countries have adequate data protection laws
• Additional encryption and security measures for international transfers
• Regular audits of international service providers

Machine Learning and Data Processing

Since machine learning is core to what we do, we want to be transparent about how it works with your data.

Our models are trained on anonymized, aggregated datasets. Before any data enters our training pipeline, we remove personally identifiable information through a multi-step anonymization process. Individual financial records are never exposed in model outputs.

We regularly audit our algorithms for bias and fairness. You have the right to understand how automated decisions affect you and to request human review of any model-generated recommendations that significantly impact your financial planning.

Children's Privacy

Our services aren't designed for anyone under 18. We don't knowingly collect data from minors. If we discover we've inadvertently collected such information, we'll delete it immediately.

Changes to This Policy

We update this policy periodically to reflect changes in our practices or legal requirements. When we make significant changes, we'll notify you via email and display a notice on our platform for at least 30 days.

The current version is always available at devcore-castflux.com/privacy-statement.html. We recommend checking back occasionally, though we'll make sure you don't miss important updates.

Vietnamese Regulatory Compliance

DevCore-CastFlux complies with:

• Law on Cybersecurity No. 24/2018/QH14
• Personal Data Protection Decree 13/2023/NĐ-CP
• Decree 53/2022/NĐ-CP on data localization
• Circular 47/2020/TT-BTC on financial data management

We maintain registration with Vietnam's Ministry of Public Security for data processing activities as required by law.