Privacy Policy

1. Data We Collect

We collect the following categories of data, depending on how you use the service:

• Account data: email, full name, business (tenant) name, and hashed password — used for authentication and access control within your workspace.
• Payment data:buyer's name, email, phone number, selected plan, order amount, and order status. Ordin does not store bank card numbers or credit card information — transactions are processed directly by our third-party payment partner, PayOS.
• Device (screen) data: screen name, pairing code, device group, activity status (online/offline), uptime, and content playback logs. This is operational data for public/commercial devices — we do not collect personal data from viewers of the screens (no cameras, no tracking of passersby).
• Uploaded content: images, videos, PDF documents, and web links that you (the tenant) upload to play on your screens.
• Technical data: IP address, browser type, and access logs — used for security and system debugging purposes.

2. How We Use Data

• Operating and maintaining your account, workspace, and connected screens.
• Processing payments, activating service plans, and sending transaction confirmation emails.
• Syncing content and playback schedules to paired screens.
• Sending important operational notifications (plan expiry, device errors, member invitations).
• Detecting fraud, ensuring system security, and complying with legal obligations.

3. Third Parties That Process Data

To operate the service, we share necessary data with the following partners:

• PayOS — payment gateway, processes transactions and buyer information when you upgrade your plan.
• Resend — transactional email service (payment confirmations, member invitations, password resets).
• Cloudflare R2 — cloud storage for media content (images, videos) you upload.

These partners only receive the data necessary to perform their respective services and are bound by their own data processing agreements (DPAs). We do not sell your data to third parties for advertising purposes.

4. Data Retention

Account data and content are retained for as long as you continue to use the service. Order/payment data is retained for at least the minimum period required by Vietnamese accounting and tax regulations. When you request account deletion, we will delete or anonymize your personal data within a reasonable timeframe, except for data we are legally required to retain.

5. Your Rights

• Access and edit your account information from Settings.
• Request an export or deletion of your personal data by contacting us.
• Withdraw your consent to data processing (which may result in discontinuation of service).
• File a complaint with the relevant state authority if you believe your rights have been violated.

6. Data Security

Passwords are stored as hashes, connections to the system are encrypted via HTTPS/SSL, and each business (tenant) is logically isolated from other tenants' data. No system is perfectly secure; if we discover a security incident affecting your data, we will notify you as soon as reasonably possible.

7. Governing Law

This policy is governed by the laws of Vietnam, including the Law on Cybersecurity (Network Information Security) and applicable personal data protection regulations.

8. Contact

If you have questions about this privacy policy or wish to exercise your rights over your personal data, please contact: support@crmsignal.vn(sample contact address — please update this with your business's official contact information).