Privacy Policy
This policy explains what personal data AIVISION collects, why we collect it, who we share it with, and the rights you have over your information.
Last updated: 24 August 2026
1. About this policy
AIVISION (“we”, “us”) builds artificial intelligence solutions for enterprises and operates the websites aivision.vn and aivgroups.com. This Privacy Policy covers all personal data we process when you visit our websites, contact us, use our public AI demos, or interact with us on social platforms such as LinkedIn and Facebook.
For this data, AIVISION acts as the data controller. We process personal data in line with Vietnam's Decree 13/2023/ND-CP on Personal Data Protection and, where applicable, the EU General Data Protection Regulation (GDPR) and the data protection laws of your place of residence.
This policy does NOT cover data that enterprise clients entrust to us under a signed contract. That situation is described in Section 7.
2. Personal data we collect
We collect only what we need to run the website, answer your enquiries and improve our services:
| Category | What it includes | Source |
|---|---|---|
| Contact details | Name, email address, phone number, company name, job title, and the content of your message or demo request | Provided by you through contact forms, demo requests, email or phone |
| Website access data | IP address, browser type and version, operating system, device type, screen resolution, country/region/city inferred from your IP, referring page, UTM campaign parameters | Collected automatically when you visit the site |
| Usage data | Pages viewed, when and how long you viewed them, scroll depth, number of visits, session identifier and visitor identifier | AIVISION's first-party analytics |
| Conversation content | Messages you send to the Hanna AI assistant or the live chat widget, and the system's replies | Provided by you when you use the chat features |
| Biometric data (only if you actively use the demo) | Facial images and the facial features extracted from them | Uploaded or captured by you in the Face Recognition demo |
| Administrator account data | Username, email, hashed password, activity logs | Applies only to AIVISION staff and authorised administrators |
We do not buy personal data from data brokers, and we do not collect sensitive data (religion, political opinions, health status, sexual orientation) through this website. Biometric data is processed strictly within the scope described in Section 6.
3. How we use your data and our legal basis
| We use your data to | Legal basis |
|---|---|
| Respond to enquiries, advise on solutions, and send quotes or materials you asked for | Pre-contractual steps taken at your request / Your consent |
| Operate, maintain and secure the website, and detect fraud or abuse | Our legitimate interest in protecting our systems |
| Measure traffic, understand which content is useful, and improve the experience | Our legitimate interest in improving our services / Consent where required by law |
| Provide the AI assistant and improve the quality of its answers | Your consent, given when you start a conversation |
| Run the AI technology demos you choose to use | Your explicit consent (particularly for biometric data) |
| Send newsletters, marketing content or event invitations | Your consent — you can unsubscribe at any time |
| Meet accounting, tax and lawful government requirements | Compliance with legal obligations |
We do not sell your personal data, do not trade it for commercial benefit, and do not use personal data collected through this website to train our commercial AI models.
5. LinkedIn and other third-party platforms
AIVISION maintains a LinkedIn Company Page. When you follow the page, react to our posts or message us on LinkedIn, we can see your public profile information (name, job title, company, profile photo) and the content you send us, and we receive aggregated, anonymised page analytics. If you submit a LinkedIn Lead Gen Form from one of our ads, LinkedIn passes us the fields you approved — typically your name, work email, job title and company — and we use them solely to follow up about AI solutions.
LinkedIn's own processing of your data on its platform is governed by the LinkedIn Privacy Policy and is outside AIVISION's control. For page analytics, LinkedIn and AIVISION are joint controllers to the extent required by law. You can exercise your rights over the data we hold by contacting us as described in Section 16.
Other platforms and services
| Third party | Data they may receive | Why |
|---|---|---|
| Facebook, Zalo, WhatsApp | Your public profile information and the content of messages you choose to send through those channels | Contact and customer support channels operated by AIVISION |
| Telegram | The content of your conversation with the AI assistant, delivered as an internal notification | So our consultants are alerted and can step in when you need a human |
| Google Fonts, Google Maps | Your IP address and browser information when fonts load or the office map is displayed | Rendering the site's typography and the map on the Contact page |
| Cloudflare CDN (cdnjs) | Your IP address and browser information when interface files load | Delivering static front-end libraries |
| Hosting infrastructure providers | All stored data, encrypted in transit and at rest | Running the website and database infrastructure |
6. Biometric data and AI demos
Our website hosts technology demos. The Face Recognition demo processes facial images — a category of sensitive personal data under Decree 13/2023/ND-CP and the GDPR. We apply the following principles:
- We process facial images only when you actively upload or capture them in the demo. Nothing on this site turns on your camera or scans your face automatically.
- Images and extracted facial features are used only to return the result of that demo.
- We do not use demo face data to identify you elsewhere, do not match it against any external database, and do not share it with third parties for commercial purposes.
- You may request deletion of all facial data you submitted at any time via Section 16; we will delete it within 30 days.
- Please do not upload images of other people without their consent.
For the AI assistant, what you type is stored so the conversation keeps its context and so our team can follow up when needed. Please do not enter passwords, payment card numbers, health data or trade secrets into the chat.
7. Data entrusted to us by enterprise clients
When delivering AI solutions under contract, AIVISION may process data supplied by an enterprise client — for example retail shelf photographs, operational data or HR records. In those engagements the client is the data controller and AIVISION acts as a data processor, working only on the client's documented instructions and under the confidentiality terms of the contract.
If you are an employee or customer of a business that uses AIVISION's solutions and you wish to exercise your data rights, please contact that business directly. We will support them in responding to your request.
9. International data transfers
AIVISION has offices in Vietnam, Singapore, Thailand, the United States and Mexico. Your data may be accessed by our personnel in those countries, or stored on infrastructure located outside your country of residence.
For every cross-border transfer we apply appropriate safeguards: encryption in transit and at rest, restricted access, standard contractual clauses with partners, and — for the personal data of Vietnamese citizens — a transfer impact assessment file as required by Decree 13/2023/ND-CP.
10. How long we keep your data
We keep data only as long as necessary for the purposes described, or as long as the law requires:
| Type of data | Retention period |
|---|---|
| Enquiries, demo requests, consulting correspondence | Up to 24 months after your last interaction, unless you become a client |
| Website access and usage data | Up to 24 months, after which only aggregated statistics are kept |
| AI assistant conversations | Up to 12 months |
| Biometric data from the demo | Deleted on request; otherwise removed during scheduled demo-data clean-ups |
| Contracts, invoices and accounting records | For the periods required by Vietnamese accounting and tax law |
Once a retention period ends, data is deleted or irreversibly anonymised.
11. How we protect your data
We apply appropriate technical and organisational measures, including: HTTPS/TLS encryption in transit, one-way password hashing, role-based access control, rate limiting against abuse, audit logging of administrative activity, regular backups, and security review before each release.
No system is perfectly secure. If a personal data breach occurs, we will notify the affected data subjects and the competent authority within the statutory deadline (72 hours under Decree 13/2023/ND-CP and the GDPR).
12. Your rights
Depending on the law that applies to you, you have the following rights:
- Right to be informed: to know what data of yours is processed and how.
- Right of access: to request a copy of the personal data we hold about you.
- Right to rectification: to have inaccurate or incomplete data corrected.
- Right to erasure: to have data deleted when it is no longer needed for the stated purpose.
- Right to restriction and objection: to pause processing or object to it, including direct marketing.
- Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out beforehand.
- Right to data portability: to receive your data in a machine-readable format or have it transferred to another party.
- Right to complain: to the competent data protection authority — in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05), Ministry of Public Security.
To exercise any of these rights, write to info@aivgroups.com. We respond within 30 days at no charge, except for excessively repetitive requests. We may need to verify your identity first — this protects your own data.
If you are a California resident, you additionally have the right to know about the collection and disclosure of your data, the right to request deletion, and the right not to be discriminated against for exercising these rights. AIVISION does not sell personal data as defined by the CCPA/CPRA.
13. Children's privacy
Our website and services are aimed at business customers and are not intended for children under 16. We do not knowingly collect children's personal data. If you believe your child has provided us with data, please contact us and we will delete it.
14. Links to other websites
Our website may link to pages operated by third parties. This policy does not apply to those pages. We encourage you to read each site's own privacy policy before providing personal data.
15. Changes to this policy
We may update this policy as our services, technology or the law change. The current version is always published at this address together with its update date. For material changes affecting your rights, we will notify you by email or through a prominent notice on the website before the change takes effect.
16. Contact us
If you have any question, request or complaint about your personal data, please contact AIVISION's data protection team:
AIVISION JSCEmail: info@aivgroups.com
Phone: +84 981 419 967
202 Le Lai, District 1, Ho Chi Minh City, Vietnam
LinkedIn: https://www.linkedin.com/company/aivision-jsc