Privacy Policy

1. Data controller

• Name: Sirifin — Personal financial advisory
• Website: https://sirifin.com
• Phone: +84 98 827 30 03
• Data contact email: sirifin.com@gmail.com

2. Definitions

Personal data means information in the form of symbols, letters, numbers, images, sounds or similar forms attached to, or that helps identify, a specific individual, including basic and sensitive personal data as defined by law. Processing means any operation performed on personal data, such as collection, recording, storage, use, sharing, editing, deletion or destruction.

3. Personal data we collect

Information you provide:

• Email address when registering or signing in; name and phone number when you contact us, book a consultation or subscribe to the newsletter.
• Financial profile information you voluntarily provide (income, goals, dependants…) to receive more relevant guidance.
• Questions sent to the AI advisor, correspondence, feedback, ratings and consultation requests.
• Automatically collected technical data: IP address, device type, browser, operating system, access time, pages viewed; interaction data (views, likes, comments, shares) via platform analytics; cookies and similar technologies.
• From third-party platforms: when you interact with our Facebook Page, Meta may provide us with aggregated (anonymised) statistics about audience and engagement. We never collect your social media passwords or login data.

4. Legal bases and processing principles

We process personal data only where at least one of the following applies: (i) your consent; (ii) performance of a contract or steps taken at your request before entering a contract; (iii) compliance with our legal obligations; or (iv) legitimate interests consistent with the law. Processing follows the principles of lawfulness, transparency, purpose limitation, data minimisation, accuracy, security and storage limitation.

5. Purposes of use

We do not use your personal data for purposes other than those notified without your consent, unless permitted by law.

• Providing and operating the Services: answering questions via the AI advisor, connecting you with experts, sending newsletters, responding to requests (contact details, profile, correspondence).
• Improving content and advisory quality, measuring performance, analysing trends (technical and aggregated interaction data).
• Ensuring safety, preventing fraud and abuse (technical data, access logs).
• Complying with legal obligations at the request of competent authorities.

6. AI advisor and conversation data

• Your questions are sent to an AI model provider to generate answers; AI answers are for reference only and are not investment recommendations or formal financial, legal or tax advice.
• Questions and helpful/unhelpful ratings may be stored anonymously (not linked to your identity) to improve our knowledge base and answer quality.
• For signed-in users, conversation history is stored so you can revisit it; you may request deletion at any time.
• Please avoid entering unnecessary sensitive data in the chat (ID numbers, bank account numbers, passwords…).

7. Consultation booking and payments

• When you book an expert, we store the appointment details, your described needs and the payment status to operate the service.
• Payments are processed by the payment gateway (VNPay). We do not collect or store your card numbers, bank account numbers or payment credentials.
• Necessary appointment information (time, contact channel, your described needs) is shared with the expert you booked, solely to deliver the consultation.

8. Cookies and tracking technologies

The website may use cookies and similar technologies to remember preferences, analyse traffic and improve the experience. You can set your browser to refuse cookies; however, some features may not work fully. Continued use of the website constitutes acceptance of cookies under this Policy, except for cookies strictly required for operation.

9. Data related to the Meta Platform (Facebook)

We use an app connected to Facebook for the sole purpose of automatically publishing newsletter content to the Facebook Page we administer. Within this scope:

• We request only the minimum permissions needed to publish to our own Page and read our own Page statistics.
• We do not collect, store or sell personal data of Page followers; we do not access friend lists, private messages or any data outside the scope permitted by Meta.
• All data received from Meta is used in compliance with Meta's Platform Terms and Developer Policies and is not transferred to unauthorised third parties.
• Your use of Facebook is additionally governed by Meta's Privacy Policy (facebook.com/privacy/policy).

10. Sharing and disclosure

We do not sell personal data. We share data only in the following cases:

• Service providers (website hosting, database, email, AI models, payment gateway, analytics, social platforms) to the extent necessary to operate the Services, under confidentiality obligations.
• The expert you actively book, to the extent needed for the consultation.
• As required by law or competent state authorities.
• To protect our rights, property and safety, or those of users or third parties, as permitted by law.
• With your consent.

11. Cross-border data transfers

Some of our service providers (hosting infrastructure, AI model providers, Meta) may store or process data on servers located outside Vietnam. In such cases we take appropriate measures to ensure your data is protected in accordance with Vietnamese personal data protection law.

12. Retention period

We retain personal data only as long as necessary to achieve the collection purposes, or as required by law. When no longer needed, data is securely deleted or anonymised.

13. Data security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration or destruction. However, no method of electronic transmission or storage is absolutely secure; we cannot guarantee absolute security, and you are also responsible for protecting your login credentials.

14. Your rights

Under applicable law you have the rights to: be informed; give and withdraw consent; access, view and correct your data; request provision, deletion or restriction of processing; object to processing; claim damages as provided by law; and lodge complaints, denunciations or lawsuits. To exercise these rights, contact us using the details in Section 1. We will respond within the statutory time limit. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

15. Children's data

The Services are not directed at children under 16. We do not knowingly collect children's personal data without parental or guardian consent as required by law. If we discover such data was collected in error, we will delete it.

16. Third-party links

Our content may contain links to third-party websites or sources. We are not responsible for their privacy policies or content. Please read their policies before providing any data.

18. Changes to this Policy

We may update this Policy from time to time. The new version will be posted on this page with the update date. Continued use of the Services after changes are posted constitutes acceptance of the updated Policy.

19. Contact

For any questions, requests or complaints regarding privacy and personal data, please contact:

• Sirifin — Website: https://sirifin.com
• Phone: +84 98 827 30 03
• Email: sirifin.com@gmail.com
• You also have the right to complain to the competent Vietnamese authority for personal data protection.