Kindlefirex ("we," "our," or "us") operates kindlefirex.com and provides budget approval workflow solutions to businesses across Vietnam and internationally. This privacy policy explains how we collect, use, store, and protect your personal information when you interact with our services.

We understand that trust forms the foundation of any business relationship. That's why we're committed to transparency about our data practices and maintaining the highest standards of data protection in compliance with Vietnam's Law on Cybersecurity 2018, Decree 13/2023/ND-CP, and applicable international privacy regulations.

We collect information through various channels to provide and improve our budget approval workflow services. The types of data we gather fall into several categories:

We also collect information indirectly through cookies and similar tracking technologies. This includes session data, preference settings, and analytics information that helps us understand how our services perform.

For businesses using our workflow solutions, we may process budget approval data, financial workflow information, and related business documents as part of our service delivery. This information remains under your control and ownership.

Your information serves specific purposes that directly relate to providing and improving our budget approval workflow services:

• Service Delivery: Processing your budget approval workflows, maintaining your account, and providing technical support
• Communication: Sending service updates, responding to inquiries, and providing customer support
• Platform Improvement: Analyzing usage patterns to enhance features and develop new workflow capabilities
• Security: Detecting and preventing unauthorized access, fraud, and other security threats
• Legal Compliance: Meeting regulatory requirements and responding to lawful requests from authorities
• Business Operations: Managing subscriptions, processing payments, and maintaining business relationships

We may also use aggregated, non-personal data for research purposes, industry analysis, and to create insights about budget approval trends. This information cannot be traced back to individual users.

We maintain strict controls over how your information is shared. We do not sell personal data to third parties, and we only share information in specific circumstances:

• Service Providers: Trusted third-party vendors who help us deliver our services, such as cloud hosting providers, payment processors, and customer support tools
• Business Partners: Integration partners who work directly with you to implement our workflow solutions, and only with your explicit consent
• Legal Requirements: When required by Vietnamese law, court orders, or legitimate government requests
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, with advance notice to affected users
• Consent: Any other sharing occurs only with your explicit permission

All third-party service providers sign data processing agreements that require them to protect your information according to the same standards we maintain. We regularly audit these relationships to ensure compliance.

For clients using our workflow services, we act as a data processor. Your business data remains under your ownership and control, and we process it solely according to your instructions and our service agreement.

You have significant control over your personal information and how we use it. Under Vietnamese privacy law and our commitment to data protection, you can exercise the following rights:

To exercise any of these rights, contact our privacy team at contact@kindlefirex.com or call +84968909738. We'll respond within 15 business days and complete most requests within 30 days.

You also have the right to lodge complaints with Vietnam's Authority for Personal Data Protection if you believe we've mishandled your information.

Protecting your information is fundamental to our operations. We implement multiple layers of security controls designed to prevent unauthorized access, use, or disclosure of your data:

• Encryption: All data transfers use TLS 1.3 encryption, and sensitive data is encrypted at rest using AES-256 standards
• Access Controls: Strict employee access policies with role-based permissions and regular access reviews
• Infrastructure Security: Secure cloud hosting with regular security audits and penetration testing
• Monitoring: 24/7 security monitoring with automated threat detection and incident response procedures
• Data Centers: Our hosting providers maintain SOC 2 Type II and ISO 27001 certifications
• Backup and Recovery: Regular encrypted backups with tested disaster recovery procedures

We regularly update our security measures to address emerging threats and maintain compliance with current best practices. Our security team conducts quarterly reviews of all systems and procedures.

We retain your information only as long as necessary to provide our services and meet legal obligations. Our retention periods vary based on the type of information:

• Account Information: Retained while your account is active, plus 3 years after account closure for business records
• Workflow Data: Retained according to your subscription terms, typically 7 years for financial workflow records
• Support Communications: Kept for 5 years to maintain service quality and resolve future issues
• Usage Analytics: Aggregated data retained indefinitely, but individual user data deleted after 2 years
• Marketing Data: Removed immediately upon unsubscribe request or account deletion

When retention periods expire, we securely delete information using industry-standard data destruction methods. For regulated financial data, we follow longer retention requirements as mandated by Vietnamese law.

You can request early deletion of your information, though this may impact our ability to provide certain services or maintain business records required by law.

While our primary operations are based in Vietnam, we may transfer your information to other countries to provide our services effectively. This typically occurs when:

• Using cloud services hosted in Singapore or other Southeast Asian data centers
• Working with international integration partners for your workflow implementations
• Providing customer support through regional service centers
• Processing payments through international financial networks

All international transfers are protected by appropriate safeguards, including standard contractual clauses, adequacy decisions, or other approved transfer mechanisms under Vietnamese law.

Our website and platform use cookies and similar technologies to enhance your experience and provide our services. We use several types of cookies:

• Essential Cookies: Required for basic platform functionality, including login sessions and security features
• Performance Cookies: Help us understand how you use our platform to identify areas for improvement
• Preference Cookies: Remember your settings and preferences for a personalized experience
• Marketing Cookies: Track website visits to provide relevant information about our services (only with consent)

You can control cookie settings through your browser preferences, though disabling certain cookies may limit platform functionality. Our cookie banner allows you to manage preferences for non-essential cookies.

We also use analytics tools to understand user behavior and improve our services. This data is aggregated and anonymized, and we've configured these tools to respect user privacy preferences.

Our budget approval workflow services are designed for business use and are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors.

If we discover that we've inadvertently collected information from someone under 18, we'll delete that information immediately. If you believe we may have information about a minor, please contact us immediately at contact@kindlefirex.com.

For business accounts where employees under 18 might have access, we recommend implementing appropriate supervision and access controls through your organization's account management features.

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. When we make significant changes, we'll notify you through:

• Email notification to your registered email address
• Prominent notice on our website and platform dashboard
• In-app notifications when you next log in to our services

For minor changes that don't materially affect your rights, we'll update the "Last Modified" date at the top of this policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Continued use of our services after policy updates constitutes acceptance of the revised terms. If you disagree with changes, you can close your account or contact us to discuss your concerns.