Launch offer: Your first 14 days free and 50% off the Basic plan for 6 months

Skip to main content

PRIVACY AND PERSONAL DATA PROTECTION POLICY

Privacy and personal data protection policy for using Selling Sync.

Effective date: Last updated: Contact: contact@hemidi.com

1. Legal basis and data processing principles

This Privacy Policy is developed in strict compliance with Decree No. 13/2023/ND-CP on personal data protection, the Law on Cyberinformation Security and Vietnam’s regulations governing e-commerce.

Hemidi Joint Stock Company acts as the Personal Data Controller and Processor for information collected through the Selling Sync platform. We are committed to protecting Customers’ privacy and the confidentiality and integrity of their data using the latest technical standards.

2. Categories of data collected

To operate the software and provide services, Hemidi collects the following categories of data:

  • Representative personal data: Full name, job title, work email address, contact telephone number, IP address, login logs and account authentication information.
  • Payment data: Transaction history, financial invoicing information and payment methods. International credit/debit card information is encrypted and processed directly through an intermediary payment gateway that meets PCI-DSS security standards; Hemidi does not directly store Customers’ raw card-number data.
  • Storefront business data: Store connection information, ASIN and SKU identifiers, inventory quantities, selling prices, order data, CPC advertising campaign metrics and financial reconciliation data collected through the APIs of e-commerce platforms integrated by the Customer. Order data includes customer information, shipping addresses and other information returned by the platform APIs. Processing of this data follows platform rules, the laws of the countries where the Customer does business and Vietnamese law.

3. Purposes and legal basis for data processing

Collected data is processed based on the Customer’s consent and the requirements for performing the service contract, for the following purposes:

  • Setting up, authenticating and managing user accounts in Selling Sync.
  • Performing the software’s core technical functions: automatic inventory synchronization, order workflow processing, replenishment forecasts and AI optimization of advertising campaigns.
  • Calculating service fees, processing payment transactions and issuing value-added tax invoices as required by law.
  • Sending technical notifications, feature updates and security alerts, and receiving support requests through contact@hemidi.com.
  • Complying with legal obligations, audits and reporting requirements of competent state authorities.

4. Security architecture and data isolation commitments

Hemidi applies advanced technology solutions to safeguard data:

  • Data encryption: All data transmitted between Customer devices and Selling Sync servers is encrypted using TLS 1.3. Data stored in databases is encrypted using AES-256.
  • Enterprise Data Isolation: The system uses a multi-tenant architecture with strict logical separation. Each Customer’s business data, prices and product catalog are fully isolated; no other Customer or third party has access.
  • AI training policy: Hemidi commits not to use Customers’ proprietary business data or detailed sales information to train public AI models in a way that affects the Customer’s competitive advantage.

5. Data sharing and cross-border transfers

Hemidi does not sell, rent or commercialize Customer data to any third party. Data is shared only within the following limited scope:

  • With internationally certified cloud server infrastructure providers for software hosting and operation.
  • Through direct connections to the APIs of e-commerce platforms that the Customer actively chooses to connect.
  • When requested in writing by state regulatory authorities, investigative authorities or courts under Vietnamese law.

Due to the nature of cross-border sales management software, including Amazon in the United States and Europe, data may be processed through secure hosting servers located abroad. Hemidi fully complies with the procedures for assessing the impact of transferring personal data overseas under Decree No. 13/2023/ND-CP.

6. Data subject rights and procedures for exercising them

Customers have all data subject rights under Decree No. 13/2023/ND-CP, including the rights to be informed, give consent, access, correct and delete data, withdraw consent and make complaints.

Customers may review and update their information in the Selling Sync account administration page or submit a formal request to contact@hemidi.com. Hemidi’s security team will verify identity and process a response to the Customer’s request within 72 working hours.