Privacy Policy

1. Scope and our role

This Policy applies to OneBizNest websites, accounts, support, and SaaS services. For account and service-administration data, OneBizNest generally decides why and how data is processed.

When a business customer enters personal data about its customers, staff, or other people into the Services, that business generally determines the purpose and OneBizNest processes the data to provide the Services. The business remains responsible for lawful collection, notices, and instructions.

2. Data we collect

Depending on the features you use, we may collect:

• account data, such as name, email address, authentication records, and a securely hashed password managed by our authentication system;
• business profile data, such as business name, address, phone number, industry, and account preferences;
• business operations data, such as customer records, appointments, orders, staff information, notes, and service history that you choose to enter;
• content and files you upload or send to support;
• technical and essential usage data, such as IP address, device/browser information, security logs, and language preference;
• communications with us and, if paid plans launch, transaction identifiers and payment status from a payment provider. We do not intend to store full payment-card numbers.

3. Why we process data

We process data to create and secure accounts, provide requested features, store and synchronize business data, respond to support, prevent fraud and abuse, maintain reliability, comply with law, and improve the Services using appropriately minimized information.

Depending on applicable law, processing may be necessary to perform a contract, comply with a legal obligation, pursue legitimate interests such as service security and improvement, or act on consent. Where consent is the basis, it may be withdrawn without affecting earlier lawful processing.

4. Sharing and service providers

We do not sell personal data. We may share only what is necessary with infrastructure, authentication, database, payment, communication, professional-advice, and security providers; with authorities when lawfully required; or as part of a legitimate business restructuring with appropriate safeguards and notice.

At the date of this Policy, the website is delivered through Vercel. Planned account features may use Supabase for database and authentication services when launched. Providers and locations may change as the service develops. We require appropriate confidentiality, security, and data-protection commitments based on the service and applicable law.

5. Hosting and international transfers

Data may be stored or accessed in Vietnam or other countries where we or our providers operate. Those countries may have different privacy laws. When required, we will use a lawful transfer mechanism and appropriate safeguards, such as contractual protections, access controls, encryption, and provider assessments.

A future OneBizNest-managed VPS deployment will be handled with security controls appropriate to the risk. We will update this Policy and notify users if a material infrastructure change significantly affects privacy rights.

6. Retention and deletion

We retain active account and business data while needed to provide the Services. After account deletion, primary data will be deleted or anonymized within a reasonable operational period. Residual backup copies may remain for up to 90 days before being overwritten.

Some records may be kept longer when necessary for legal obligations, dispute resolution, fraud prevention, security, or protection of legal rights. When retention ends, data is deleted or anonymized where reasonably possible.

7. Security

We use administrative and technical measures proportionate to the nature and risk of the data, such as access controls, password hashing, encryption in transit, backups, software updates, monitoring, and restricted provider access. No online service can guarantee absolute security, so users should also protect credentials and maintain appropriate independent backups.

8. Your privacy rights

Depending on applicable law, you may ask to access, correct, export, or delete personal data; restrict or object to processing; withdraw consent; or complain to a competent authority. We may need to verify identity and may retain information where a legal exception applies.

Send requests to onebiznest@gmail.com. We will respond within the period required by applicable law. Business end users should normally contact the business that entered their data first; we will assist that business as required.

9. Cookies and local storage

The current website uses only essential browser storage, including a language preference. We do not currently use behavioral advertising or send marketing email without permission. If non-essential analytics, advertising, or similar technologies are introduced, we will update the notice and request consent where required.

10. Children

The Services are intended for people aged 18 or older and business representatives. We do not knowingly offer accounts directly to children. If you believe a child provided personal data without proper authorization, contact us so we can investigate and delete it where required.

11. Changes and contact

We may update this Policy when services, infrastructure, or law changes. The revised date will be posted, and material changes will be notified when required.

OneBizNest is operated by an individual in Vietnam. Privacy questions and requests may be sent to onebiznest@gmail.com. English and Vietnamese versions are provided for accessibility; the Vietnamese version governs to the extent permitted by applicable law if they conflict.