SenData is committed to protecting users' personal information in accordance with Vietnamese law (the Law on Cyber Information Security, Decree 13/2023/ND-CP on personal data protection) and applies the international GDPR standard (for EU users).
1. Information we collect
Information you provide directly:
- Full name, email, password (hashed) at registration.
- Phone number, address, company (if the client provides them).
- Bank account information (for freelancer withdrawals).
- Avatar, bio, portfolio (for freelancers).
- .pbix files, images, Excel (project data).
- Chat content within projects.
Automatically collected information:
- IP, browser, OS, language.
- Session and login-state cookies.
- Page visit history (analytics).
2. Purpose of use
- Provide the marketplace service (posting projects, connecting freelancers and clients, payments).
- Send email notifications about projects, applications, milestones, and payments.
- Improve the product based on usage behavior (aggregated, anonymized).
- Prevent fraud, spam, and terms violations.
- Comply with the law when requested by authorities.
3. Sharing with third parties
SenData does NOT sell personal data to any third party. We only share in these cases:
- Microsoft Azure / Power BI: to host datasets and workspaces for embedding reports.
- Banks: transfer information for freelancer withdrawals.
- Email service providers (Gmail SMTP / SendGrid): to send notification emails.
- Vietnamese authorities: upon a lawful request.
4. Cookies
SenData uses cookies for: storing the login session (HttpOnly, secure), saving interface settings (theme, language), and aggregate analytics. You can refuse cookies in your browser settings — but the login feature won't work.
5. Technical security
- Passwords hashed with bcrypt (salt round 12).
- JWT tokens with HttpOnly, sameSite=lax cookies.
- HTTPS required (TLS 1.2+).
- Daily database backups.
- Power BI embed tokens with a 60-minute TTL.
- Rate limiting for login + API endpoints.
6. User rights
Under Decree 13/2023/ND-CP, you have the right to:
- View and edit your personal information — via the Account Profile page.
- Delete your account — email a request, processed within 7 business days.
- Export your data (data portability) — request via email.
- Object to data processing — request via email.
- Complain to authorities if this policy is violated.
7. Storage and deletion
Personal information is stored while the account is active. After account deletion, data is permanently erased within 30 days, except information related to financial transactions (kept for at least 5 years per the Accounting Law).
8. Policy changes
This policy may be updated. Users are notified by email of important changes. The current version states the “Last updated” date at the top of the page.
9. Contact
For any questions or requests about data rights, please email admin@sendata.vn. We respond within 7 business days.