Privacy policy

Applies to the AI-DMS mobile app and website operated by Cyber Technology Investment and Development Joint Stock Company.

1. Who is responsible

Cyber Technology Investment and Development Joint Stock Company decides why and how personal data is processed in this system. Each organization's data is stored separately from other organizations.

2. Data we collect

• Account: username, full name, email, password (stored only as a hash), department and the permissions granted by an administrator.
• Documents and content: files you upload or scan, extracted text (OCR), tags, notes, comments, tasks and the business data you enter.
• Camera and photo library: used only when you choose to scan or pick a file to upload.
• Microphone: used only when you use voice input.
• Device: push token, platform and device name, to deliver notifications.
• Usage logs: sign-in times, IP address and actions on documents, for security and auditing.

We do not collect location data, use your data for advertising, or sell personal data.

3. How we use it

To provide document management, workflows and notifications; to secure accounts and detect unusual access; to support users; and to meet legal obligations.

4. AI features and processors

Some features (OCR, the Q&A assistant, suggestions, speech-to-text) may send the relevant content to an AI service configured by your organization, which can be an external provider or a private AI server. Push notifications are delivered through Firebase Cloud Messaging (Google) or the Apple Push Notification Service. These parties receive only what is needed for the feature concerned.

5. Storage and security

Data travels over encrypted connections (HTTPS), access is controlled by role and permission, and integration secrets are encrypted at rest. No system is perfectly secure; if an incident affects your data we will notify you as the law requires.

6. Retention

Data is kept while your account is active and under your organization's records-retention policy. When an account is deleted, personal details and device tokens are removed; documents that belong to the organization and audit logs may be retained as records law requires.

7. Your rights

Under Vietnam's Decree 13/2023/ND-CP on personal data protection you may ask to be informed, access, correct, restrict or object to processing, and request deletion of your personal data. To request account deletion use the account deletion page.

8. Children

The app is for an organization's staff and is not directed to children under 16; we do not knowingly collect children's data.

9. Changes

If this policy changes, the new version will be posted on this page.

10. Contact

Email: info@cybertech.com.vn · Phone: +84 91 684 9891
Address: 68 Hoàng Trọng Mậu, phường Tân Hưng, TP. HCM