1. Who is responsible
This policy explains how Vuong Tich (LineProTrack) ("we") handles personal data. Two different roles apply, and the distinction matters:
- We are the controller for data about our website visitors, prospects and the administrators of customer accounts — the information described in section 2 under "Account and contact data" and "Website data".
- We are a processor for the production data our customers put into the application. The customer decides what goes in and why; we act on their instructions. That relationship is governed by our Data Processing Agreement, not by this policy.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact data | Name, work email, phone, company, role, language preference | You, when you request a trial or create an account |
| Billing data | Legal entity name, billing address, tax code, purchase order number, invoice history | You, at checkout |
| Website data | Form submissions, IP address and browser user agent recorded with them | Collected automatically when you submit a form |
| Service usage and logs | Sign-in events, API requests, error logs, timestamps, IP address | Generated automatically when the service is used |
| Customer content | Production schedules, order codes, line capacities, supplier names — may incidentally contain names of your staff | Uploaded by our customers (we act as processor) |
We do not knowingly collect special categories of personal data, and the service is not designed to hold them. Please do not upload them.
3. Why we use it
| Purpose | Legal basis (where GDPR applies) |
|---|---|
| Providing and operating the service | Performance of a contract |
| Setting up and following up on a trial you requested | Steps taken at your request before entering a contract |
| Invoicing, accounting and tax records | Legal obligation |
| Security, abuse prevention, rate limiting, diagnosing faults | Legitimate interests in keeping the service secure and working |
| Responding to your questions and support requests | Legitimate interests / performance of a contract |
We do not send marketing newsletters, we do not build advertising profiles, and we do not sell personal data. When you send us a form, we use it to answer that request.
4. Cookies and local storage
The application sets one cookie: a session refresh token, marked
httpOnly, used to keep you signed in. It is strictly necessary to operate the
service and is removed when you log out.
The website and application also use your browser's local storage for preferences — language, light or dark theme, and a local copy of your working data so the application stays usable when the network drops. That information stays on your device.
There are no advertising cookies, no analytics cookies, and no third-party trackers on this site. That is also why you are not being shown a cookie consent banner: there is nothing to consent to beyond what is strictly necessary.
5. Who we share it with
We share personal data only with service providers that help us run the business, each bound by contract to protect it:
| Provider | Purpose | Location |
|---|---|---|
| [[hosting provider — to be confirmed]] | Hosting the service and data | Singapore |
| [[email provider — to be confirmed]] | Sending transactional and notification email | Singapore |
We may also disclose data where required by law, to enforce our agreements, or in connection with a merger or acquisition — in which case we will tell affected customers. On-premise deployments involve no sharing at all: the data never leaves your network.
6. International transfers
Our customers operate across Vietnam, Japan, China and elsewhere, so data may be processed outside the country where it was collected. Where personal data protected by the GDPR is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses together with appropriate technical measures. Customers who require data to remain within a specific country should use the on-premise deployment.
7. How long we keep it
- Account data: for the life of the account and [[period — to be confirmed]] afterwards.
- Billing records: as long as tax and accounting law requires (typically [[period — to be confirmed]]).
- Trial requests that do not become customers: [[period — to be confirmed, e.g. 12 months]], then deleted.
- Service logs: [[period — to be confirmed, e.g. 90 days]].
- Customer content: for the term of the subscription, then deleted as described in our Terms of Service and DPA.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent where processing is based on consent. To exercise any of these, email lineprotrack@gmail.com. We respond within one month.
If your data was uploaded into the application by your employer or a business partner, they control it — we will refer your request to them and assist them in answering it.
You also have the right to complain to your local data protection authority.
9. Security
Technical and organisational measures are described in detail on our
Security page, including the current status of independent
certification. In summary: authorisation is enforced server-side, sessions use
short-lived tokens with an httpOnly refresh cookie, passwords are hashed with
scrypt, customer data is isolated by a server-signed tenant identifier, and no
third-party scripts run in the product.
10. Children
The service is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16.
11. Changes
We will update this policy as the service develops. Material changes will be announced by email to account administrators or in the application before they take effect. The date at the top of this page shows the last revision.
12. Contact
Questions, requests or complaints: lineprotrack@gmail.com, or write to Việt Nam.
Questions about this document? Write to lineprotrack@gmail.com.