Scope
This policy applies to the nextos.vn website, the help.nextos.vn Help Center and the NEXT OS platform at app.nextos.vn (together, the “Service”), operated by the entity named at the top of this page (“NEXT”, “we” or “us”).
It is written in line with Vietnamese personal data protection law, including Decree 13/2023/ND-CP on personal data protection and any amending, replacing or implementing regulations.
Data we collect
We only collect what we need for the purposes listed in the next section:
- Information you provide: name, phone number, email, company name, industry and what you need help with when you fill in a form, book a demo, start a trial or contact support.
- Account information: login details, users on the account, current plan, payment and invoice history.
- Technical data: IP address, browser type, device, pages viewed and time of visit, used to run, secure and measure the website in aggregate.
- Conversations: messages, emails and calls to the NEXT team via Zalo, hotline, email or in the app.
We do not intentionally collect sensitive personal data (health, religion, political views, biometrics, etc.). Please do not submit such data through our forms.
Why we process data
- To answer consultation requests, schedule demos and provide technical support.
- To create and manage accounts, provide plan features, issue invoices and collect fees.
- To send necessary notices about your account, security and service changes.
- To send newsletters, offers and event invitations — only with your separate consent, and you can unsubscribe at any time.
- To keep the system secure and detect and prevent fraud and abuse.
- To improve the product using aggregated usage data.
- To meet our legal obligations.
Your consent
We process personal data based on your consent, except where the law allows processing without it.
- Consent is given clearly and voluntarily, for example by ticking a consent box on a form. Silence or no response does not count as consent.
- The consent box for marketing communications is always separate and never pre-ticked.
- You can withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
Your customers’ data in NEXT OS
When a business uses NEXT OS to store and serve its own customers (contacts, conversations, appointments, orders, etc.), the business decides the purpose and means of processing that data; NEXT processes it on the business’s instructions and under the Terms of Use.
The business is responsible for having a lawful basis (for example, its customers’ consent) before entering their data or messaging, calling or emailing them. NEXT does not use a business’s customer data for NEXT’s own marketing.
Sharing data
We do not sell personal data. Data is only shared:
- With infrastructure and service providers that help run the Service (hosting, storage, email, SMS, payment gateways) under equivalent confidentiality commitments.
- With platforms you choose to connect, such as Zalo, Facebook, Google and Zoom: data flows through those connections according to your settings and those platforms’ policies.
- With competent authorities when required by law.
- In a business restructuring (merger, transfer), provided the recipient continues to protect data under this policy.
Transfers outside Vietnam
Some cloud infrastructure providers may host servers outside Vietnam. When personal data is transferred abroad, we prepare the required impact assessment and complete the procedures set out by law, and only use providers with appropriate safeguards.
Retention
- Consultation request data is kept as long as needed to follow up, for up to 24 months after the last contact if no contract follows.
- Account data is kept while you use the Service. After an account ends, data is deleted or anonymized within a reasonable period, except what must be kept under accounting and tax rules.
- You can ask to export your data before closing your account.
Security
We apply appropriate technical and organizational measures: encrypted connections (HTTPS), role-based access, access logging, regular backups and security training for staff.
If a personal data breach occurs, we notify the competent authority and affected people within the time limits set by law and take remedial action.
Your rights
Under personal data protection law, you have the right to:
- Be informed about how your personal data is processed.
- Give or refuse consent to processing.
- Access your data to view and correct it.
- Withdraw your consent.
- Request deletion of your data.
- Request restriction of processing.
- Request that we provide your data to you.
- Object to processing, including for advertising and marketing.
- File complaints, denunciations or lawsuits as provided by law.
- Claim compensation for damage caused by a violation.
- Protect yourself as provided by law.
How to make a request
Send a request through the Contact page or the email shown at the bottom of this page, stating the right you want to exercise and information that lets us verify you are the data subject. We respond within the time limits set by law. If you are a customer of a business that uses NEXT OS, please send your request to that business directly; NEXT will help it respond.
Children
The Service is intended for businesses and people aged 18 and over. We do not intentionally collect children’s data. If we find we have collected a child’s data without valid consent, we will delete it.
Cookies
How the website uses cookies and similar technologies is described in the Cookie Policy.
Changes to this policy
We may update this policy when the Service or the law changes. The last updated date appears at the top of this page. Material changes will be announced by email or in the app before they take effect.
Contact
The operating entity’s details and how to contact us about personal data appear at the bottom of this page.