Privacy Policy

1.What this page covers

This policy covers the opsby.vn website — the product pages and the trial request form. It describes where the information you leave there goes.

The Opsby software itself runs at a different address, app.opsby.vn. When your company uses Opsby for real work, the operational data belongs to your company and your company decides what happens to it. That is a separate relationship under a separate agreement, and it is not what this page is about.

2.What we collect

3.What we use it for

To get back to you about your trial request, and to talk about how your business runs. If you leave an email address, we also use it to issue an invitation to open a trial account — the account is only created when you open the link in that email.

Filling in the form and pressing send is you asking us to get in touch. We use the information for the purposes listed here and not for anything else.

We do not send bulk marketing, we do not use your details to target advertising, and we do not sell them to anyone.

4.Where the information goes

We cannot tell you it stays with us — sending email and raising an internal alert both involve third-party services. Here is the full list, one section per service, with the exact fields each one receives.

5.Processing outside Vietnam

All four services above — Resend, Telegram, Vercel and ImprovMX — run their infrastructure outside Vietnam. The information you send may therefore be processed and held temporarily outside Vietnamese territory while email is delivered and alerts are raised.

We say this out loud rather than leaving it unsaid, because it is a technical fact about how the system runs, and because you are entitled to know it before you press send.

6.Cookies and measurement

This website does not set any cookies, stores nothing in your browser, and has no behavioural measurement tool installed. There is no advertising pixel and no tracking script.

When you open a page, your browser sends no requests to any outside domain: the typeface is built into our own server at build time rather than fetched from Google, and the images are served from this domain. The three services in section 4 are only called after you submit the form, and they are called from our server, not from your machine.

If we do add measurement later, this page changes first, and where the law requires your consent we will ask before collecting anything. There is more detail on the Cookie Policy page.

Signing in happens at app.opsby.vn. That is a separate system with its own session cookie, and it is not shared with this website.

7.If you bring real operational files to a demo

We do invite you to bring the spreadsheet you actually work from, so a demo runs on your own work rather than on sample data. We should be clear about what that involves.

That file usually holds information about your customers and suppliers — people who are not part of the conversation between us. So: take out or mask the columns the demo does not need. A handful of rows is enough to show how you work; a full year of data is not.

Whatever you do send, we use it only for the demo and the conversation immediately around it. We do not load it into Opsby, we do not use it for anything else, and we delete the copy we received when you ask us to.

If your company needs something firmer in writing before sending a file, say so. That is a reasonable request and we will work that way.

8.How long we keep it

We would rather describe this accurately than tidily:

• Internal email and Telegram alerts — these sit in our mailbox and our alert channel until they are deleted. We do not currently run an automatic deletion cycle, so we are not going to state a period here.
• Sent-mail records at Resend — 30 days, under that service’s own policy.
• The trial invitation record in the app — kept until you ask us to delete it, including when you never opened the email. See section 4.
• Platform access logs — kept for Vercel’s default retention period, which is short and not set by us.
• Trial account data — if you open an account, that data sits in the Opsby app until you ask us to delete it.

9.How we look after it

The whole site and the form submission run over an encrypted HTTPS connection. The access keys for the email and alerting services are held in the hosting platform’s environment store, marked as secret, and are not in the source code.

The mailbox that receives trial requests is read by a small number of people at the company — the ones who actually work with customers. We have not opened read access more widely than that.

We are not going to tell you your data is “completely secure”. No system is. We will tell you what we actually do, and update this section when it changes.

10.Your rights

For the personal data you have sent us, you have the following rights:

• To know — what of yours is being processed and how. That is what this page is.
• To consent and to withdraw consent — you can withdraw at any time. Withdrawing does not undo processing that was lawful before you did.
• To see and correct — look at what you sent us and ask us to fix anything that is wrong.
• To request a copy, deletion, restriction of processing, and to object to processing — including without giving a reason.
• To complain, to report, to bring proceedings and to seek compensation — as provided by law, if you believe your rights have been infringed.
• To ask us to apply protective measures — if you believe your information is at risk.

11.How to make a request, and how long it takes

Write to privacy@opsby.vn, or use the form on the Contact page. Tell us three things: the name and phone number you used when you filled in the form, what you want (to see, correct, delete, restrict, object, or withdraw consent), and how you would like us to reply.

We need to check what you tell us against what we already hold before we act on it. That step exists so nobody else can pose as you to delete your data or obtain a copy of it. If it does not match, we will come back and ask — we will not quietly ignore the request.

These are the deadlines we hold ourselves to, counted from when the request reaches us:

• 2 working days — to confirm we have your request and tell you how we will handle it.
• 10 days — to act on a request to see or correct your data.
• 15 days — to act on a request to withdraw consent, restrict processing, object to processing, or apply protective measures.
• 20 days — to act on a request to delete.
• If we have to involve one of the third-party services in section 4, these may take longer, and we will tell you why.

12.If something goes wrong

If we find that personal data has been exposed, accessed without authorisation or lost, we notify the competent state authority within the time limit set by law, counted from when we became aware of it, and we record the incident in writing.

Where an incident is likely to cause you harm, we contact you directly on the details you left us, and tell you what we have done and what you should do.

13.Who is responsible

Opsby is a product of CATBA OUTDOORS ST JSC — enterprise code 0202359497. That is the party that decides what your information is used for and which services it passes through, and the party answerable to you for it.

The services listed in section 4 process data on our instructions. Using them does not move that responsibility onto them.

14.When this page changes

When the processing changes, this page changes, and the date at the top changes with it. For changes that widen what we do with information you have already sent, we will tell you on the contact details you left before they take effect.

Questions about this policy, or a request about your data: privacy@opsby.vn.