Introduction
ONEADX Co., Ltd. is committed to protecting the privacy and personal data of Hidemyacc users. This Privacy Policy describes how we collect, use, store, and protect Customer information, in compliance with Decree 13/2023/ND-CP on personal data protection in Vietnam.
Data We Collect
2.1 — Data You Provide Directly
- Account information: email, password (stored as hash), phone number or social media ID;
- Payment information: we do not store card numbers directly — transactions are processed through third-party payment gateways;
- Support communications: questions, images, error reports you send us.
2.2 — Data Collected Automatically
- IP address, device type, operating system, software version;
- Usage logs: login times, in-app activity, errors encountered;
- Encrypted data: cookie identifiers and active tab URLs (used only for sync features);
- Anonymous analytics data for product improvement.
2.3 — Data We Do NOT Collect
- Original passwords (stored only as one-way hashes, cannot be reversed);
- Content of websites you visit through your profiles;
- Financial information such as bank card numbers or bank account details.
Purpose of Processing & Legal Basis
We process your data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account authentication, service delivery, payment processing | Contract performance |
| Sending technical notifications, software updates | Contract performance |
| Fraud detection, system security | Legitimate interests of the Company |
| Anonymous usage analytics for product improvement | Legitimate interests of the Company |
| Sending marketing information, user surveys | Consent (withdrawable at any time) |
| Providing data to government authorities | Legal obligation |
Data Retention
We retain data only for as long as necessary for each purpose:
| Data Type | Retention Period |
|---|---|
| Account data | Duration of active account + 30 days after termination |
| System logs | Maximum 12 months |
| Payment data / invoices | 5 years (per accounting and tax requirements) |
| Customer support history | 24 months from resolution |
Sharing Data with Third Parties
5.1 — General Sharing Cases
- Technical service providers: cloud services (servers in Singapore), payment gateways, email services — solely to operate the service;
- Legal requirements: upon court order or request from competent government authority;
- Protecting Company interests: when necessary to prevent fraud or protect system security;
- Business transfers: in the event of merger or acquisition — Customers will be notified in advance.
5.2 — Requests from Government Authorities
In accordance with the Law on Cybersecurity 2018 and applicable Vietnamese law, ONEADX Co., Ltd. is legally obligated to provide account information, usage data, and activity logs of Customers to competent government authorities — including the Police, Procuracy, Courts, and other investigative agencies — upon receipt of a lawful written request or order.
In such cases, the Company is not required to notify the affected Customer prior to disclosure, unless expressly permitted to do so by the requesting authority.
Customers who use Hidemyacc for activities that violate applicable law shall not be entitled to any data confidentiality protection from the Company in the event of an investigation by competent authorities.
We never share your personal information with third parties for advertising or commercial purposes without your explicit consent.