Privacy Policy

Posmart is committed to protecting and respecting your privacy. A reference to "Posmart", "we", "us" or "our" is a reference to Posmart Co., Ltd. and its affiliates, and we are a 'controller' for the purposes of the data protection laws that apply to us. We ask that you read this Privacy Policy carefully as it contains important information about our processing of your personal data and your rights. This Privacy Policy applies to the Posmart mobile application (the "App"), which is provided for use by employees and authorized users of Posmart Co., Ltd. for internal business purposes, including attendance check-in, identity verification, and workforce management.

Depending on the features you use, the App may collect: account information (username, full name, email, phone number); attendance and location data used to verify check-in; photos and documents you choose to upload (e.g. signed forms, receipts); calendar data used to schedule reminders; and face data as described in Section 3 below.

3.1 What face data we collect. When you use the App's identity verification ("check-in") feature, the App captures a photo of your face using your device's camera. This photo is used solely to confirm that the person checking in is the authorized account holder (identity verification, referred to internally as "KYC"). Separately, in certain features of the App (such as document or photo capture flows), the App uses on-device face detection (Google ML Kit Face Detection) to determine whether a face is present in the camera frame before allowing a photo to be taken. This on-device detection is processed entirely locally on your device; no image or face data is transmitted to our servers or to any third party as part of this detection step, and no data from this step is stored. 3.2 How we use face data. Face photos captured during the check-in / identity verification flow are transmitted to our backend server and compared against a reference photo already on file for your account, in order to confirm your identity before granting a check-in or access request. Face data is used only for this identity verification purpose and for no other purpose (it is not used for advertising, profiling, or any purpose unrelated to identity verification). 3.3 Storage and retention. Face photos submitted for identity verification are stored on Posmart Co., Ltd.'s own servers and databases. We do not use any third-party cloud face-recognition or biometric processing service — all storage and processing of face data is performed on infrastructure owned and operated by Posmart Co., Ltd. Face data is retained for as long as your account remains active, in order to allow continued identity verification for check-in. 3.4 Sharing with third parties. We do not share, sell, rent, or disclose your face data to any third party. Face data is processed and stored exclusively on our internal servers for the identity verification purpose described above. 3.5 Deletion. Face data associated with your account is deleted when you delete your account through the App (Profile > "Yêu cầu xoá tài khoản" / "Request account deletion"), or upon written request to info@posmart.com.vn.

We use the information we collect to operate and improve the App, verify your identity for check-in, provide customer support, communicate with you about your account, and comply with our legal obligations. We do not use your personal data for purposes unrelated to these business functions.

We do not sell your personal data. We do not share your data with third parties except as necessary to operate the App (e.g. cloud infrastructure and messaging providers acting on our behalf under contract), or where required by law.

We retain your personal data for as long as your account remains active, or as needed to provide you the App's features. When you delete your account, your personal data, including face data, is deleted from our systems, except where retention is required by law.

You may access, correct, or delete your personal data, including face data, at any time. To delete your account and associated data, go to Profile > "Yêu cầu xoá tài khoản" ("Request account deletion") within the App. You may also contact us at info@posmart.com.vn to exercise these rights.

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal data, including face data, from unauthorized access, use, or disclosure.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "last updated" date at the top of this policy or through notice within the App.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@posmart.com.vn or Floor 2, 81 Cach Mang Thang Tam Street, Ben Thanh Ward, Ho Chi Minh City, Vietnam.