Privacy Policy

Scope of Application

This Policy governs the processing of personal data directly collected, stored, and controlled by the website https://nova-ai.vn.

This Policy does not apply to:

  • Third-party platforms
  • Independent applications
  • Payment systems and social networks
  • Services beyond the control of the website

Types of Personal Data Processed

We process only basic personal data, including:

  • Full name
  • Email address
  • Phone number
  • Contact content

The website does not collect or process sensitive personal data as defined under Article 2 of Decree No. 13/2023/ND-CP.

Legal Basis for Data Processing

The processing of personal data is carried out based on:

  • The explicit and voluntary consent of the data subject
  • The necessity to provide services as requested by the data subject
  • Legal obligations in accordance with applicable laws and regulations

Purposes of Data Processing

Personal data is processed for the following purposes:

  • Contact and consultation
  • Service provision
  • Website management and operation
  • System security assurance
  • Compliance with legal requirements

Data Processing and Retention Period

Personal data shall be retained:

  • For the period necessary to fulfill the stated processing purposes
  • Until a valid request is received from the data subject
  • In accordance with statutory retention periods as prescribed by law

Data Sharing and Transfer

Personal data shall be shared only:

  • With the consent of the data subject
  • For technical and operational purposes (hosting, email, cloud services, etc.)
  • Upon a lawful request from competent state authorities

Data recipients shall be solely responsible for ensuring data security in accordance with their own policies.

Data Protection Measures

We implement appropriate measures, including:

  • Access control and authorization
  • System security safeguards
  • Monitoring for unauthorized access

However, we do not guarantee absolute security against risks beyond our reasonable control.

Rights of Data Subjects

In accordance with Decree No. 13/2023/ND-CP, data subjects have the right to:

  • Be informed
  • Give or withdraw consent
  • Access and rectify personal data
  • Request deletion of personal data
  • Restrict data processing
  • File complaints or denunciations

Limitation of Liability

Our data protection commitment applies only to personal data directly managed by the website and does not extend to external systems or third-party platforms.

Policy Updates

This Policy may be amended in accordance with applicable laws and regulations. Any updates shall be publicly disclosed on the website.