Privacy Policy

Version 1.0, effective 22 October 2026. 1. Data controller and processor NITI RETAIL Company Limited (enterprise code 0319361762; 27/20 Phan Van Khai, Bau Tre 1A Hamlet, Tan An Hoi Commune, Ho Chi Minh City, Vietnam) controls and processes your personal data when you use niti.vn and Niticlient. This policy follows Vietnam's Personal Data Protection Law No. 91/2025/QH15, Decree 356/2025/ND-CP, and the Cybersecurity Law. 2. Data we process Account: email (used as your username), full name and the required profile fields shown at sign-up, your password as an Argon2id hash, 2FA settings. Google sign-in: name and email provided by Google. Service: hostnames, updated IP addresses, update times, and the device name and operating system where Niticlient is installed. Payments: order code, amount, time, and transfer description sent by the bank or SePay; Niti does not store card numbers. Technical and security: access IP, browser, sign-in logs, anti-abuse events. Niti does not process sensitive personal data. 3. Data that is public by the nature of DNS Your hostname and the latest IP address you update are published in the public DNS and can be looked up by anyone; this is how dynamic DNS works. Do not put personal information you want to keep private in a hostname. 4. Purposes Creating, verifying, and protecting accounts; providing dynamic DNS; payments and invoicing; system emails (verification codes, alerts, notices of changes); preventing abuse, fraud, and attacks; customer support; meeting legal obligations. Niti does not sell personal data or use it for third-party advertising. 5. Lawful basis Your consent at sign-up or when the policy changes; performance of the service contract; legal obligations for accounting, tax, and requests from competent authorities. You may withdraw consent; Niti will then stop processing based on consent, though the service may no longer be available. 6. Recipients and transfers abroad Niti uses only necessary providers: Google (Google sign-in, email via Gmail), CrowdSec (attack IP signals), SePay and banks (payment reconciliation). Some process data outside Vietnam; Niti transfers only the minimum data needed for each purpose and completes the cross-border transfer procedures required by law. Data is provided to competent authorities when the law requires. 7. Storage and security Servers and primary data are located in Vietnam, with daily backups to another machine managed by Niti. Niti uses HTTPS, Argon2id password hashing, 2FA for administrator accounts, firewalls, monitoring, and access control. If a personal data breach occurs, Niti notifies the competent authority and you within the legal time limits. 8. Retention Account and hostname data are kept while your account is active; after you delete your account, data is deleted or anonymized except where the law requires retention. Payment records are kept for the periods required by accounting and tax law. Security logs are kept only as long as needed to prevent abuse and investigate incidents. The 2FA "remember this browser" cookie lasts 30 days. 9. Cookies Niti uses only cookies necessary for sign-in, security, and bot protection; no advertising or third-party tracking cookies. 10. Your rights You have the right to be informed; to give or withdraw consent; to access, correct, and request deletion of your data; to restrict or object to processing; to request a copy of your data; and to complain, sue, and claim compensation as provided by law. Send requests to the email in Section 12; Niti responds within the legal time limits and may verify your identity first. 11. Minors The service is not for persons under 18 without consent from a parent or legal guardian. 12. Contact and changes Email ddns.niti@gmail.com; phone +84 902 902 239; address as in Section 1. New versions are announced by email and on niti.vn; Niti asks for renewed consent when purposes or categories of data change.