Privacy Policy

Introduction and Scope

Digital Spot Stream ("we," "our," or "us") operates as a financial technology platform specializing in short-term budgeting solutions for individuals and small businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website digitalspotstream.com or use our services.

This policy applies to all users of our platform, regardless of location, and governs our data practices in accordance with Vietnamese privacy laws, including the Law on Cybersecurity 2018 and Decree 13/2023/ND-CP on personal data protection. By using our services, you acknowledge that you have read and understood this Privacy Policy.

We are committed to protecting your privacy and maintaining transparency about our data practices. This document serves as your guide to understanding what information we collect, why we collect it, and what choices you have regarding your personal data.

Information We Collect

Personal Information You Provide

When you register for our budgeting platform, we collect information that you voluntarily provide, including:

• Full name and contact information (email address, phone number)
• Account credentials (username, encrypted password)
• Financial information necessary for budgeting (income ranges, expense categories)
• Profile preferences and budgeting goals
• Communication preferences and notification settings
• Customer support inquiries and feedback

Automatically Collected Information

Our platform automatically collects certain technical information to improve your experience:

• Device information (IP address, browser type, operating system)
• Usage analytics (pages visited, features used, time spent on platform)
• Session data and login patterns
• Cookie data and similar tracking technologies
• Error logs and performance metrics

Financial Data

As a budgeting platform, we collect financial information that you choose to input for budget planning purposes. This includes expense categories, budget limits, and spending patterns. We do not collect bank account numbers, credit card details, or other sensitive payment information unless specifically required for premium features.

How We Use Your Information

We use collected information to provide, maintain, and improve our budgeting services in the following ways:

• Creating and managing your account and user profile
• Providing personalized budgeting recommendations and insights
• Processing your transactions and managing premium subscriptions
• Sending important account notifications and service updates
• Analyzing usage patterns to enhance platform functionality
• Preventing fraud and maintaining platform security
• Complying with legal obligations and regulatory requirements
• Conducting research to improve our budgeting tools and features

We base our data processing on legitimate interests, contractual necessity, and your explicit consent where required by law. You can withdraw consent at any time through your account settings or by contacting our privacy team.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your information in specific circumstances:

Service Providers

We work with trusted third-party service providers who assist in operating our platform, including cloud hosting services, analytics providers, and customer support tools. These providers are bound by strict data processing agreements and can only access information necessary for their specific services.

Legal Requirements

We may disclose your information when required by Vietnamese law, court orders, or government regulations. This includes compliance with tax authorities, financial regulatory bodies, and law enforcement agencies when legally mandated.

Business Transfers

In the event of a merger, acquisition, or sale of company assets, your information may be transferred to the acquiring entity. You will be notified of any such transfer and your rights regarding the transferred information.

Anonymized Data

We may share aggregated, anonymized data that cannot identify individual users for research purposes, market analysis, or improving financial literacy resources. This data does not contain personal identifiers.

Data Security Measures

Protecting your personal and financial information is our top priority. We implement comprehensive security measures to safeguard your data:

• 256-bit SSL encryption for all data transmission
• Multi-factor authentication options for account access
• Regular security audits and penetration testing
• Employee access controls and privacy training programs
• Secure data centers with physical access restrictions
• Automated backup systems and disaster recovery procedures
• Real-time monitoring for suspicious activities and unauthorized access

While we implement industry-standard security practices, no method of transmission over the internet is 100% secure. We continuously update our security protocols to address emerging threats and maintain the highest level of data protection possible.

In the unlikely event of a data breach, we will notify affected users within 72 hours as required by Vietnamese data protection regulations and provide detailed information about the incident and steps being taken to address it.

Your Privacy Rights

Under Vietnamese privacy laws and our commitment to data transparency, you have the following rights regarding your personal information:

Access and Portability

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly used format within 30 days of your request. You can also export your budgeting data and account information directly from your dashboard.

Correction and Updates

You can update most of your personal information directly through your account settings. For information you cannot modify yourself, you can submit a correction request, and we will update your records within 15 business days.

Deletion Rights

You may request deletion of your personal data at any time. We will permanently delete your information within 30 days, except for data required to be retained for legal or regulatory compliance. Note that deleting your data will result in account termination and loss of access to your budgeting history.

Processing Restrictions

You can object to certain types of data processing or request that we limit how we use your information. This may affect the functionality of certain platform features, and we will inform you of any limitations before implementing restrictions.

Marketing Communications

You can opt out of promotional emails and marketing communications at any time by clicking the unsubscribe link in our emails or updating your communication preferences in your account settings. Essential service notifications cannot be disabled.

Data Retention and Storage

We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Our retention periods are based on the type of information and its purpose:

• Account information: Retained for the duration of your active account plus 3 years after account closure
• Financial data: Stored for 5 years as required by Vietnamese financial record-keeping regulations
• Usage analytics: Aggregated data retained indefinitely; individual data deleted after 2 years
• Customer support records: Maintained for 3 years after resolution
• Marketing consent records: Kept for 7 years to demonstrate compliance

All data is stored on secure servers located in Vietnam and Singapore, ensuring compliance with local data residency requirements. We use encrypted storage systems and maintain regular backups to prevent data loss while ensuring recovery capabilities in case of technical issues.

When retention periods expire, we securely delete or anonymize your information using industry-standard data destruction methods. You will receive notification before any scheduled deletion of your account data.

International Data Transfers

While our primary data processing occurs within Vietnam, some of our service providers may be located internationally. When we transfer personal data outside Vietnam, we ensure appropriate safeguards are in place:

• Data processing agreements that meet Vietnamese privacy law requirements
• Adequacy decisions or equivalent protection standards in destination countries
• Encryption of data during transfer and storage
• Regular audits of international service providers' security practices

We currently work with cloud service providers in Singapore and Japan for backup and disaster recovery purposes. These transfers are governed by strict data processing agreements and are limited to what is necessary for service continuity.

You have the right to object to international transfers of your data. However, this may limit our ability to provide certain services or features that rely on international infrastructure.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform and analyze usage patterns. Here's how we use these technologies:

Essential Cookies

These cookies are necessary for basic platform functionality, including maintaining your login session, remembering your preferences, and ensuring security. These cannot be disabled without affecting core functionality.

Analytics Cookies

We use analytics cookies to understand how users interact with our platform, which features are most popular, and where improvements can be made. This data is aggregated and does not identify individual users.

Cookie Management

You can control cookie settings through your browser preferences or our cookie consent manager. You can choose to accept all cookies, reject non-essential cookies, or customize your preferences by category. Note that disabling certain cookies may affect platform functionality.

Our cookies typically expire after your session ends or within 12 months for persistent cookies. We do not use cookies for advertising purposes or share cookie data with third-party advertisers.

Children's Privacy

Our budgeting platform is not intended for use by individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If you are under 16, please do not use our services or provide any personal information.

If we become aware that we have collected personal information from a child under 16, we will take immediate steps to delete that information from our systems. Parents or guardians who believe their child has provided personal information to us can contact our privacy team for immediate assistance.

For users between 16 and 18 years old, we recommend obtaining parental or guardian consent before using our services, particularly when inputting financial information or making account decisions.

Third-Party Links and Services

Our platform may contain links to third-party websites, financial institutions, or other services. This Privacy Policy does not apply to these external sites, and we are not responsible for their privacy practices or content.

When you click on third-party links or integrate with external financial services, you will be subject to those organizations' privacy policies. We encourage you to review the privacy practices of any third-party services you choose to use in connection with your budgeting activities.

We may integrate with banking APIs or financial data aggregators to enhance our budgeting features. These integrations are optional and require your explicit consent. You can revoke these connections at any time through your account settings.

Policy Updates and Changes

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or service offerings. When we make significant changes, we will notify you through:

• Email notification to your registered address (for material changes)
• Prominent notice on our platform dashboard
• In-app notifications when you next log in
• Updates to the "Last Updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Continued use of our services after policy updates constitutes acceptance of the revised terms.

For significant changes that may affect your rights or how we process your data, we will provide at least 30 days' notice and may require your explicit consent before implementing the changes.