Privacy Policy

This Privacy Policy explains how Alliex Vietnam Joint Stock Company ("Alliex", "we", "our") collects, uses, stores, discloses and protects personal data when you use our merchant onboarding portal, POS device storefront, Business Capital loan application and any related services hosted at alliex.vn.

By creating an Alliex merchant account or submitting a registration application, you confirm that you have read and understood this policy.

We only collect information that is necessary to evaluate your merchant application, deliver POS hardware, disburse a Business Capital loan or comply with regulations issued by the State Bank of Vietnam (NHNN).

• Account credentials — email address, personal phone number and password (hashed with Argon2id; we never store the plain text).
• Business profile — company name, tax code (MST), registered address, business owner name, accountant contact and MCC business type.
• KYC / KYB documents — business registration certificate, owner ID, tax certificate and any supplementary documents you upload during registration.
• Transaction & loan data — POS orders, repayment schedules and disbursement amounts produced while you use the platform.
• Technical & security data — IP address, browser type, OTP delivery channel and audit-log entries for sensitive actions (login, OTP verification, document upload, loan approval).

• Verify your identity and business standing before approving a merchant account or Business Capital loan.
• Process POS hardware orders, manage your cart and fulfil delivery.
• Calculate loan eligibility, generate amortisation schedules and track repayments.
• Send one-time passwords (OTP), service notifications and approval updates by email or SMS.
• Detect and prevent fraud, unauthorised access and policy abuse.
• Meet our legal and regulatory obligations under Vietnamese law, including SBV reporting requirements.

We process personal data on one or more of the following bases: performance of the contract you enter into when registering a merchant account; compliance with legal obligations applicable to a payment and fintech operator licensed by the State Bank of Vietnam; our legitimate interest in operating a safe platform; and, where required, your explicit consent (for example, the consultation checkbox during registration and the cookie banner).

Alliex does not sell your personal data. We only share information with:

• Payment processors and banks who settle transactions and disburse loans on our behalf.
• Logistics partners who deliver POS hardware to your registered address.
• Regulators and law enforcement when we are required to do so by Vietnamese law.
• Infrastructure providers (hosting, email delivery, SMS gateway) acting strictly under our instructions and a data-processing agreement.

Alliex maintains technical and organisational measures aligned with PCI DSS and SBV cybersecurity guidance:

• TLS 1.2+ for every connection between your browser and our servers.
• Sensitive fields (tax code, owner ID, contact details) are encrypted at rest using AES-256 with rotating key material.
• Strict Content Security Policy with per-request nonces to mitigate cross-site scripting.
• Role-based access controls; only authorised Alliex staff can view merchant KYC documents and audit logs record every access.
• Multi-factor authentication (OTP) for registration, password resets and high-risk admin actions.

We keep merchant profile and transaction records for as long as your account is active and for an additional period required by Vietnamese commercial, tax and anti-money-laundering law (typically 5 to 10 years). KYC documents are deleted once the statutory retention window expires.

You may, at any time:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate information (most fields can be updated directly inside your merchant dashboard).
• Withdraw consent for optional processing such as marketing communications.
• Request deletion of your account once you have no outstanding obligations (open loans, pending POS orders).

To exercise any of these rights, email privacy@alliex.vn from the address registered to your account. We respond within 30 days.

We use a small number of strictly necessary cookies to keep you signed in and remember your cart, and — only if you accept — analytics cookies to understand which features merchants use the most. The consent banner at the bottom of every page lets you accept or decline non-essential cookies; your choice is stored locally in your browser and can be changed by clearing site data.

Alliex services are designed for registered businesses. We do not knowingly collect personal data from individuals under 18. If you believe a minor has submitted data to us, contact privacy@alliex.vn so we can remove it.

We may update this Privacy Policy as our services or legal obligations change. Material updates will be announced through your merchant dashboard and by email at least 14 days before they take effect. The date at the top of this page always reflects the latest version.