Privacy Policy
Last updated: March 8, 2026
1. Data Controller
-
Company name: Antbuddy Joint Stock Company
-
Tax code: 0314251928
-
Address: 2nd Floor, TOONG Building, 126 Nguyen Thi Minh Khai Street, Xuan Hoa Ward, Ho Chi Minh City
-
Website: https://www.antbuddy.com
-
Email for personal data matters: info@antbuddy.com
2. Scope and Legal Basis
This Policy applies to the collection, processing, storage, transfer, and protection of users’ personal data when they access the website and use AntBuddy services.
Primary legal bases include:
-
Personal Data Protection Law No. 91/2025/QH15, effective from January 1, 2026.
-
Decree No. 356/2025/ND-CP, effective from January 1, 2026, providing detailed regulations and implementation measures.
-
Other applicable Vietnamese laws and regulations from time to time.
3. Data Processing Principles
We apply the following principles:
-
Transparency regarding the purpose and scope of data processing.
-
Collection of only necessary data that is relevant to the stated purposes.
-
Reasonable accuracy and updates of personal data.
-
Limitation of data retention based on processing purposes and legal obligations.
-
Data security through appropriate technical and organizational measures.
4. Types of Data Collected
4.1 Data You Provide Directly
-
Full name, email address, phone number, job title, and company name.
-
Information submitted through forms, emails, chats, or support tickets.
-
Contract and payment-related data, if applicable.
4.2 Data Collected Automatically
-
IP address, browser type, operating system, and device information.
-
Access logs, pages viewed, time spent on pages, and traffic sources.
-
Cookies and online identifiers.
4.3 Behavioral Data from Analytics Tools
-
GA4: page views, events, sessions, and user behavior paths.
-
Microsoft Clarity: clicks, scrolling behavior, heatmaps, session replays, and navigation information.
5. Purposes of Data Processing
We process data for the following purposes:
-
Creating and operating accounts and providing service features.
-
Ensuring system security, preventing fraud, and handling technical incidents.
-
Providing customer support and handling requests or complaints.
-
Measuring, analyzing, and improving the product and website experience.
-
Communications and marketing, where consent or another lawful basis is available.
-
Fulfilling legal obligations, reporting requirements, and mandatory recordkeeping.
6. Lawful Basis for Processing
Depending on the case, data processing may be carried out based on:
-
Consent from the data subject.
-
Necessity for entering into or performing a contract.
-
Legal obligations of the company.
-
Legitimate interests in safely operating and improving the services, where permitted by law.
7. Cookies, GA4, and Microsoft Clarity
7.1 Cookies
We use essential cookies and analytics cookies in accordance with our separate Cookie Policy.
7.2 Google Analytics 4
We use GA4 to measure website performance, evaluate user behavior, and optimize content.
7.3 Microsoft Clarity
We use Microsoft Clarity to analyze user interactions, such as clicks, scrolling, and session replays, in order to improve the user experience.
7.4 Consent Management
-
In markets where prior consent is required, non-essential cookies are only activated after valid consent is obtained.
-
In Vietnam, we still apply a clear cookie notice and choice mechanism to increase transparency.
8. Data Sharing and Data Processors
We may share data with:
-
Infrastructure, hosting, email, CRM, and customer support service providers.
-
Analytics and measurement tool providers, including Google and Microsoft, within the necessary scope.
-
Government authorities or competent legal proceedings agencies where there is a lawful request.
We do not sell users’ personal data.
9. Cross-Border Data Transfer
Due to the nature of digital infrastructure and global tools, such as GA4 and Microsoft Clarity, data may be processed on servers located outside Vietnam.
Where cross-border data transfers occur, we apply safeguards in accordance with applicable laws, including:
-
Assessing related impacts and risks.
-
Contractual obligations with data recipients or data processors.
-
Technical and organizational measures to protect data security.
10. Data Retention Period
We retain data for as long as necessary to:
-
Fulfill the original purposes of collection.
-
Perform contracts and post-transaction obligations.
-
Comply with legal obligations and resolve disputes.
After the retention period expires, or when there is no longer a lawful basis for processing, the data will be deleted, anonymized, or securely destroyed in accordance with internal procedures.
11. Rights of Data Subjects
Under applicable law, you may have the following rights:
-
The right to know and be informed about data processing.
-
The right to consent and withdraw consent.
-
The right to access and correct personal data.
-
The right to request data deletion or restriction of processing.
-
The right to object to processing in certain cases.
-
The right to request data provision within the scope permitted by law.
-
The right to complain, report violations, and request compensation in accordance with regulations.
12. Data Security
We implement appropriate security measures, including:
-
Role-based access control.
-
Encryption of data in transit where available.
-
Logging and monitoring of unusual events.
-
Data backup and recovery.
-
Security incident response procedures and notifications in accordance with regulations.
13. Children’s Data
The service is not intended for users who are restricted by age under applicable law. If we discover that data has been collected inappropriately, we will delete or restrict such data in accordance with our internal procedures.
14. Policy Updates
We may update this Policy to reflect changes in legal requirements, technology, or business operations. The updated version becomes effective from the time it is published on the website.
15. Contact
For any requests related to privacy and personal data, please contact us at:
Email: info@antbuddy.com