Privacy Policy
Last Updated: March 15, 2025
At IgnitraFlux, we understand that financial data is sensitive. When you're building financial models or working with business projections, the last thing you need is uncertainty about who sees your information.
This policy explains what we collect, why we need it, and how we protect it. We've structured our practices to comply with Vietnamese regulations while maintaining international standards for data protection.
Information We Collect
Account Information
When you create an account with IgnitraFlux, we collect basic details that help us provide our services. This includes your name, email address, company name, and billing information. We also collect your phone number if you choose to provide it for account recovery purposes.
Usage Data
We track how you interact with our platform — which features you use most, which templates you access, and how often you log in. This helps us understand what's working and what needs improvement. We don't look at the actual content of your financial models unless you specifically ask us to for support purposes.
Technical Information
Like most web services, we collect standard technical data: your IP address, browser type, device information, and operating system. This helps us troubleshoot issues and ensure the platform works smoothly across different setups.
Important note: We never access the actual numbers, formulas, or content within your financial models unless you explicitly grant us permission through a support ticket or direct request.
How We Use Your Information
Your data serves specific purposes, and we don't use it beyond what's necessary to run the service:
- Service Delivery: We use your account information to provide access to the platform, process payments, and communicate important updates about your subscription.
- Platform Improvement: Usage data helps us decide which features to develop next and which parts of the interface need refinement. We look at patterns across all users, not individual behavior.
- Security Monitoring: Technical data helps us detect unusual activity that might indicate a security issue or unauthorized access attempt.
- Customer Support: When you contact us with questions or issues, we use your information to provide relevant assistance and follow up on tickets.
- Legal Compliance: We maintain records as required by Vietnamese business regulations and tax laws.
Data Storage and Security
Where We Store Your Data
All data is stored on secure servers located within Vietnam and Southeast Asia. We use established cloud infrastructure providers with ISO 27001 certification and regular security audits. Your financial models are encrypted both during transmission and while stored on our servers.
Security Measures
We implement multiple layers of protection. Database access is restricted to essential personnel only, and all access is logged and monitored. We use industry-standard encryption protocols (TLS 1.3) for data transmission and AES-256 encryption for stored data.
Our team undergoes regular security training, and we conduct quarterly security reviews of our systems. We also perform annual penetration testing by third-party security firms.
Backup and Recovery: We maintain encrypted backups of all user data with a 30-day retention period. These backups are stored separately from our primary systems and can only be accessed through multi-factor authentication by authorized personnel.
Data Sharing and Third Parties
We keep data sharing to a minimum. Here's who we work with and why:
| Third Party | Purpose | Data Shared |
|---|---|---|
| Payment Processors | Handle subscription payments and invoicing | Billing information, email address, company name |
| Email Service Provider | Send account notifications and updates | Email address, name, notification preferences |
| Cloud Infrastructure | Host application and store data securely | All platform data (encrypted) |
| Analytics Service | Understand platform usage patterns | Anonymized usage data, no personal identifiers |
All third parties we work with sign data processing agreements that require them to protect your information and use it only for specified purposes. We don't sell your data to anyone, and we don't share it with advertisers or marketing companies.
Your Rights and Control
Access and Portability
You can download all your financial models and account data at any time through your account settings. We provide exports in standard formats (Excel, CSV, JSON) so you can move your work to another platform if needed.
Corrections and Updates
You can update your account information directly through the platform. If you notice any errors in data we've collected about you, contact us and we'll correct it within five business days.
Deletion Requests
You can request complete deletion of your account and all associated data. We'll process this within 15 business days. Note that we may need to retain certain information for legal or accounting purposes (such as transaction records) for up to seven years as required by Vietnamese law.
Marketing Communications
We send occasional emails about new features or platform updates. You can opt out of these at any time through the unsubscribe link in any email or through your account preferences. We'll still send essential emails about your account security or billing issues.
Response Time: We aim to respond to all privacy-related requests within three business days and complete most requests within ten business days. Complex requests might take up to 30 days, and we'll keep you updated throughout the process.
Data Retention
We keep different types of data for different periods based on necessity and legal requirements:
- Active Account Data: Retained as long as your account is active and for 90 days after account closure.
- Financial Models: Deleted 90 days after account closure unless you've already deleted them.
- Transaction Records: Kept for seven years to comply with Vietnamese tax and accounting regulations.
- Support Tickets: Retained for three years for quality assurance and training purposes.
- Usage Logs: Anonymized after 18 months and retained in aggregate form for analysis.
After retention periods end, we securely delete data using industry-standard methods that make recovery impossible.
Cookies and Tracking
We use cookies to keep you logged in and remember your preferences. These are essential for the platform to work properly. We also use analytics cookies to understand how people use the platform, but these don't identify you personally.
You can control cookie settings through your browser, though disabling essential cookies will prevent you from using certain features. We don't use advertising cookies or share cookie data with third parties for marketing purposes.
International Data Transfers
While our primary servers are in Vietnam, some of our service providers operate globally. When your data moves across borders, we ensure it's protected through:
- Standard contractual clauses approved for international data transfers
- Encryption during all transmission
- Regular audits of our data handling practices
- Compliance with Vietnamese regulations on cross-border data transfer
We notify Vietnamese authorities of any international data transfers as required by local regulations.
Changes to This Policy
We update this policy occasionally to reflect changes in our practices or legal requirements. When we make significant changes, we'll email you at least 30 days before they take effect. Continued use of the platform after changes go into effect means you accept the updated policy.
You can always find the current version of this policy on our website, along with the date it was last updated. Previous versions are available upon request if you want to review what changed.
Vietnamese Law Compliance
IgnitraFlux operates under Vietnamese law and complies with regulations including:
- Law on Cybersecurity (Law No. 24/2018/QH14)
- Decree 13/2023/ND-CP on Personal Data Protection
- Circular 47/2020/TT-BTTTT on protection of personal information of service users
We maintain all required documentation for regulatory inspections and cooperate with Vietnamese authorities when legally required. Our registered business address in Buôn Ma Thuột serves as our primary point of contact for regulatory matters.
Questions About Privacy?
If you have concerns about how we handle your data or want to exercise your privacy rights, reach out to us directly.