Privacy Policy

Fujigo Software Solutions Company Limited
Last Updated: March 24, 2026

1. Introduction

Fujigo Software Solutions Company Limited (“Fujigo Software”, “we”, “our”, “us”) operates F5 Assistant, a multi-platform marketing automation service at bot-app.fujigo-soft.com (“Service”).

This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including Vietnam’s Law on Cybersecurity and Personal Data Protection regulations.

By using our Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, phone number, email address, password
• Business Information: Company name, business type, shop details
• Content: Messages, posts, images, videos, and other content you create or upload through the Service
• Payment Information: Subscription plan, billing history (we do not store credit card numbers)

2.2 Information from Third-Party Platforms

When you connect your accounts from third-party platforms (TikTok, Shopee, Facebook, Zalo), we collect:

• TikTok: User ID, display name, avatar, access tokens, video metadata (titles, captions, view counts). We access this data through TikTok’s official API with your authorization.
• Shopee: Shop ID, shop name, product listings, order information, inventory data. We access this data through Shopee’s Open Platform API with your authorization.
• Facebook: Profile information, page data, post content as authorized by you through cookie-based authentication.
• Zalo: Contact list, message history, group information as authorized by you through your Zalo credentials.

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, actions taken within the Service
• Device Information: Browser type, operating system, IP address
• Log Data: Access logs, error logs, API call logs for service operation and security

3. How We Use Your Information

We use your information to:

Purpose	Legal Basis
Provide and operate the Service	Contract performance
Manage your account and subscriptions	Contract performance
Post content to connected platforms on your behalf	Your consent/authorization
Sync products and orders from e-commerce platforms	Your consent/authorization
Generate AI-powered content (captions, replies)	Contract performance
Send service notifications and updates	Legitimate interest
Improve and optimize the Service	Legitimate interest
Ensure security and prevent fraud	Legitimate interest
Comply with legal obligations	Legal obligation

4. Third-Party Platform Data

4.1 TikTok Data

• We access your TikTok data only through official TikTok APIs (Login Kit, Content Posting API)
• We use your TikTok data solely to provide the features you request (posting videos, viewing analytics)
• We do not sell or share your TikTok data with third parties
• We store TikTok access tokens securely and refresh them as needed
• You can revoke our access by disconnecting your TikTok account in Settings or revoking access in TikTok’s security settings
• We comply with TikTok’s Developer Terms of Service and Data Usage policies

4.2 Shopee Data

• We access your Shopee data through Shopee’s Open Platform API
• We use your Shopee data for product management, order tracking, and inventory sync
• We do not share your Shopee business data with other users or third parties
• You can revoke access by disconnecting your shop in Settings

4.3 Facebook Data

• We access your Facebook data through browser-based authentication
• We use your data for page management and content posting
• We do not share your Facebook data with third parties

4.4 Zalo Data

• We access your Zalo data through authorized session credentials
• We use your data for messaging, contact management, and group operations
• Contact data is isolated per user — no user can access another user’s contacts

5. Data Storage and Security

5.1 Storage Location

Your data is stored on our self-hosted servers located in Vietnam.

5.2 Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Access tokens stored securely with encryption
• Role-based access control (RBAC)
• Regular security audits and vulnerability assessments
• Rate limiting and brute-force protection
• CSRF protection on all state-changing operations
• Audit logging of all administrative actions
• Session management with automatic timeout

5.3 Data Retention

• Account data: Retained while your account is active, deleted within 30 days of account deletion
• Third-party tokens: Deleted immediately upon disconnection of the platform
• Chat/message history: Retained for 90 days, then automatically deleted
• Audit logs: Retained for 90 days for security purposes
• Backup data: Retained for 30 days after deletion from primary storage

6. Data Sharing

We do NOT sell your personal data.

We may share your information only in these circumstances:

Recipient	Purpose	Data Shared
Third-party platforms (TikTok, Shopee, etc.)	Perform actions you requested	Content, account IDs
AI service providers (Google Gemini)	Generate AI content	Text prompts (anonymized, no personal data)
Law enforcement	Legal compliance	As required by Vietnamese law
Service providers	Infrastructure operations	Anonymized usage data

7. Your Rights

You have the following rights regarding your personal data:

7.1 Access

You can view your personal data through the Service’s Settings and Profile pages.

7.2 Correction

You can update your account information through Settings.

7.3 Deletion

You can request account deletion by contacting us at [email protected]. We will delete your data within 30 days, except where retention is required by law.

7.4 Disconnection

You can disconnect any third-party platform at any time through Settings. This immediately revokes our access and deletes stored tokens.

7.5 Data Export

You can request an export of your data by contacting us at [email protected].

7.6 Withdraw Consent

You can withdraw consent for data processing at any time by discontinuing use of the Service or contacting us.

8. Children’s Privacy

Our Service is not intended for anyone under the age of 18. We do not knowingly collect personal information from children. If we discover we have collected data from a child under 18, we will delete it immediately.

9. Cookies and Tracking

Our Service uses:

• Session cookies: Essential for authentication and security (CSRF tokens)
• Preference cookies: To remember your settings and preferences

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking technologies
• Behavioral profiling for advertising

10. International Data Transfers

Your data is primarily stored and processed in Vietnam. If any data is transferred internationally (e.g., to AI service APIs), we ensure appropriate safeguards are in place.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through:

• Email notification to your registered email address
• Prominent notice within the Service

The updated policy becomes effective upon posting unless otherwise stated.

12. Data Protection Contact

For any questions, concerns, or requests regarding your personal data:

We will respond to your request within 15 business days.

13. Governing Law

This Privacy Policy is governed by the laws of the Socialist Republic of Vietnam, including the Law on Cybersecurity (2018) and relevant personal data protection regulations.