Information We Collect
We collect various types of information to provide you with our financial analysis services. The data we gather falls into several categories, each serving specific purposes in delivering accurate market insights and maintaining platform security.
Personal Information
Name, email address, phone number, and business details you provide during registration. This helps us verify your identity and communicate important updates about our services.
Financial Data
Market preferences, investment interests, and analysis parameters you configure. We never store sensitive financial account information or passwords from external institutions.
Usage Analytics
How you interact with our platform, which features you use most, and time spent on different sections. This helps us improve user experience and develop relevant tools.
Technical Information
IP address, browser type, device information, and login timestamps for security monitoring and platform optimization purposes.
Data Collection Methods
- Direct input through registration forms and profile settings
- Automatic collection via cookies and tracking pixels
- Third-party integrations with financial data providers (with your consent)
- Customer support interactions and feedback submissions
How We Use Your Data
Your information serves multiple purposes in delivering our financial analysis services. We process data based on legitimate business interests, contractual obligations, and your explicit consent where required under Vietnamese privacy laws.
Primary Uses
- Service Delivery: Generating personalized financial reports, market analysis, and investment insights tailored to your specified parameters and interests.
- Platform Security: Monitoring for suspicious activities, preventing unauthorized access, and maintaining the integrity of user accounts and data.
- Customer Support: Responding to inquiries, resolving technical issues, and providing guidance on platform features and functionality.
- Service Improvement: Analyzing usage patterns to enhance existing features, develop new tools, and optimize overall platform performance.
- Communication: Sending important notifications about system updates, security alerts, and relevant market insights based on your preferences.
Legal Basis for Processing
Under Vietnamese Law on Cybersecurity and Personal Data Protection, we process your data based on:
- Your explicit consent for marketing communications and optional features
- Contractual necessity for service provision and account management
- Legitimate business interests for security monitoring and platform improvement
- Legal compliance requirements for financial service providers
Data Sharing and Third Parties
We maintain strict control over your personal information and only share data with trusted partners under specific circumstances. All third-party relationships are governed by comprehensive data processing agreements.
Authorized Data Sharing
- Financial Data Providers: Reuters, Bloomberg, and other market data sources require basic authentication to deliver real-time information to your dashboard.
- Cloud Infrastructure: AWS Vietnam and selected hosting partners process data according to strict security protocols and data residency requirements.
- Payment Processing: Secure payment gateways handle transaction data with PCI DSS compliance, receiving only information necessary for payment completion.
- Customer Support Tools: Help desk systems may access conversation history and account details to resolve your inquiries efficiently.
Data Protection Measures
All third-party processors must meet our security standards and sign comprehensive data processing agreements that include:
- Specific limitations on data use and retention periods
- Requirements for data encryption and access controls
- Incident reporting and breach notification procedures
- Regular security audits and compliance certifications
We Never Share: Your personal data with advertisers, sell information to third parties, or use your data for purposes beyond our stated business operations.
Your Privacy Rights
Vietnamese law grants you significant control over your personal information. You have the right to understand, access, correct, and control how we handle your data.
Your Rights Include:
- Access Right: Request a complete copy of all personal data we hold about you, including processing history and data sources.
- Rectification Right: Correct any inaccurate or incomplete information in your profile or account settings.
- Erasure Right: Request deletion of your account and associated data, subject to legal retention requirements.
- Portability Right: Receive your data in a structured format that can be transferred to other service providers.
- Objection Right: Opt out of marketing communications and non-essential data processing activities.
- Restriction Right: Temporarily limit processing of your data while disputes or corrections are being resolved.
Exercising Your Rights
To exercise any of these rights, contact our Privacy Officer at [email protected] with your full name, account email, and specific request. We respond to all valid requests within 30 days and may require identity verification for security purposes.
Security Measures
Protecting your financial data requires comprehensive security measures. We employ multiple layers of protection, from technical safeguards to administrative controls, ensuring your information remains secure throughout its lifecycle.
Encryption Standards
All data transmissions use TLS 1.3 encryption, while stored data employs AES-256 encryption. Database connections and internal communications maintain end-to-end encryption protocols.
Access Controls
Multi-factor authentication, role-based permissions, and regular access reviews ensure only authorized personnel can access your information for legitimate business purposes.
Network Security
Firewalls, intrusion detection systems, and continuous monitoring protect against unauthorized access attempts and malicious activities targeting our infrastructure.
Data Backup
Automated backup systems create encrypted copies of your data, stored in geographically separate locations to ensure business continuity and disaster recovery capabilities.
Security Audits
Regular penetration testing, vulnerability assessments, and compliance audits verify the effectiveness of our security measures and identify potential improvements.
Incident Response
24/7 security monitoring and established incident response procedures ensure rapid detection and containment of any potential security threats or data breaches.
Employee Security Training
All TurboCore Portal employees undergo comprehensive security training covering data handling procedures, privacy regulations, and incident reporting requirements. Regular updates ensure awareness of emerging threats and best practices.
Data Retention Policies
We retain your personal information only as long as necessary to fulfill our business purposes, comply with legal requirements, and protect our legitimate interests. Different types of data have specific retention periods based on their purpose and regulatory requirements.
Account Information
Personal profile data, contact information, and account settings are retained for three years after account closure to comply with Vietnamese financial service regulations.
Transaction Records
Payment history, subscription records, and billing information are maintained for seven years to meet tax compliance and audit requirements.
Usage Analytics
Platform usage data, feature interactions, and performance metrics are retained for one year to support service improvement and technical optimization.
Customer Support
Support tickets, communication history, and related documentation are kept for five years to maintain service quality and resolve potential disputes.
Secure Data Disposal
When retention periods expire, we securely delete your data using industry-standard methods. Digital files undergo multiple-pass deletion, while physical media are destroyed according to certified destruction procedures. You will receive confirmation when requested data has been permanently removed.
International Data Transfers
While we primarily store and process your data within Vietnam, certain business operations may involve international data transfers. All cross-border transfers comply with Vietnamese data protection laws and international privacy standards.
Transfer Scenarios
- Financial Data Sources: Real-time market data from international providers may involve temporary data processing in their respective jurisdictions under strict contractual protections.
- Cloud Services: Our primary infrastructure remains in Vietnam, but backup systems may include regional data centers with equivalent security standards.
- Support Services: Customer support tools may process basic contact information through secure international platforms with approved data processing agreements.
Transfer Safeguards
All international transfers include:
- Adequacy decisions or appropriate safeguards as required by Vietnamese law
- Contractual clauses ensuring equivalent data protection standards
- Technical measures including encryption during transit and storage
- Regular compliance monitoring and audit requirements
Privacy Officer Contact
Address: 359 Yên Thái, Tiến Yên, Hoài Đức, Hà Nội 13213, Vietnam
Email: [email protected]
Phone: +84 83 569 9339
Response Time: We respond to all privacy inquiries within 72 hours
For urgent privacy concerns or potential data breaches, please call our 24/7 security hotline or send an email marked "URGENT" in the subject line.
Policy Updates
We review and update this privacy policy annually or when significant changes occur to our data processing practices. All updates are posted on this page with clear notification of what has changed.
Notification Process
When we make material changes to this policy, we will:
- Email all active users at least 30 days before changes take effect
- Display prominent notifications on our platform during login
- Maintain previous policy versions for reference and comparison
- Provide clear explanations of how changes affect your data and rights
Continued use of our services after policy updates constitutes acceptance of the revised terms. If you disagree with changes, you may close your account and request data deletion before the effective date.