LandAIA Language notice: This English version is provided for the convenience of international users and store reviewers (Apple / Google). In case of any conflict between the Vietnamese and English versions, the Vietnamese version shall prevail for legal interpretation purposes.
This agreement explains how LandAIA processes your personal data — the technical companion to the Personal Data Privacy Policy (LAND-PL-07). Where the two documents differ, the Privacy Policy prevails.
01 PURPOSE OF THIS AGREEMENT
This agreement sets out how LandAIA processes your personal data in the LandAIA app, on the landaia.net website, and on the work portals and websites of enterprises using the platform, in compliance with Vietnamese personal data protection law.
02 LEGAL BASES FOR PROCESSING
We process your personal data on the following legal bases:
- Consent: you give clear consent through an active step (ticking a box, tapping agree, turning on an option); silence or continued use is not consent. You can withdraw it at any time. The purposes set out in the Privacy Policy that you agree to when registering — including keeping search history for 12 months to improve search quality — rely on this basis
- Performance of a contract: necessary to provide the service, including keeping your account and the system safe (detecting unusual sign-ins, preventing fraud)
- Legal obligation: compliance with the law, including the data protection and cybersecurity measures the law requires (keeping system logs, handling incidents)
03 DATA CLASSIFICATION
3.1 Basic personal data
✅ Security level: Standard
- Full name, email, phone number (the phone number is encrypted)
- Contact address (encrypted)
- Professional information
- Profile photo
3.2 Sensitive data
🔒 Security level: High
- Citizen ID number (encrypted): individual users provide it only voluntarily; it is not required at registration. For enterprise staff, the enterprise may require the ID number when it creates or imports staff records — the enterprise decides, and LandAIA processes it on the enterprise's behalf. Deleted together with the account.
- Biometric data (face) — only for staff of enterprises that have enabled face verification: one reference photo, a numeric feature vector computed from it (which cannot be turned back into the photo), and the face photo captured when signing an electronic document. The enterprise decides whether to require it; LandAIA is the processor and stores it in Vietnam (LandAIA's servers and Vietnix storage), encrypted. You read a separate biometric consent text before registering; how to decline and what follows are set out in Section 3.12 of the Privacy Policy.
- Device location — only if you allow it, and only while you use the app; GPS coordinates, capture time and camera model in photos, as well as the location sent to the AI assistant, only if you turn on the corresponding option (off by default)
- Payment transaction information (transaction ID, amount, method — the platform does not store bank card numbers)
3.3 Data about other people that you enter
🔒 Security level: High
- Owner and contact information in survey listings (name, phone number, ID number) — encrypted before storage
- CRM customer data — encrypted before storage
Every view of the phone or ID number of an owner or customer is logged (kept for 12 months); viewing an owner's phone number requires re-authentication.
3.4 Technical data
🔧 Security level: Standard
- IP address, User Agent
- Cookies and session data
- Access logs
- Device data
- Screen opens in the app — for security and operations, kept for 90 days, not used by the assistant
- Usage data for the assistant (screens and pages viewed, actions, search keywords) — only if you turn on "Remember my in-app activity" (off by default)
04 PROCESSING WORKFLOW
4.1 Collection
- Notice of purpose: clearly explain why data is collected
- Consent: request clear consent; ask again when a document changes materially
- Data minimisation: collect only what is necessary
- Validation: check the accuracy of the data
4.2 Storage
- Encryption: the sensitive fields listed in Section 3 are encrypted before storage; signed electronic documents, signature images and face data are encrypted at file level
- Access control: role-based access control
- Backup: regular encrypted backups
- Logging: security logs and logs of views of sensitive data (kept for 12 months)
4.3 Use of data
| Purpose | Data used | Retention |
|---|---|---|
| Providing the service | Account, surveys, CRM and other necessary data | Until you delete it or delete your account (details in Section 8) |
| Identity verification | Citizen ID, personal information | Citizen ID deleted together with the account |
| Signing electronic documents with face verification (enterprise staff) | Reference photo, feature vector, photo taken at signing | Reference photo and feature vector: deleted when you leave the enterprise or delete your account. Photo taken at signing: the document's period of validity plus 5 years |
| AI assistant | Content you send to the assistant; in text containing customer data, phone numbers, emails, ID numbers and bank account numbers are masked by the server before it is sent to AI providers — photos you attach are sent as they are, unmasked | Detailed messages 12 months; assistant memory fades over time and is deleted when you delete your account |
| Market analysis | De-identified statistical records (Section 8.1 of the Privacy Policy) | No time limit |
05 SHARING DATA WITH THIRD PARTIES
The business database (accounts, surveys, CRM, enterprise data) is stored on servers located in Vietnam. We share only the minimum data each service needs, with the following processors:
| Processor | Service | Data shared | Safeguards |
|---|---|---|---|
| Amazon Web Services (Singapore) | File storage; encryption key management (AWS Secrets Manager) | Attachments (photos, videos, survey documents, verification photos), enterprise data export packages; field-encryption keys | Private, encrypted storage; keys kept separate from data |
| Vietnix (Ho Chi Minh City, Vietnam) | File storage in Vietnam | Signed electronic documents, signature images, face photos; chat attachments, AI-generated images; temporary photos for text recognition (OCR) — deleted right after reading, within 1 day at most | Signed documents, signature images and face photos encrypted at file level |
| AI model providers: OpenAI, Anthropic, Google Gemini via OpenRouter (United States/Singapore) | AI assistant and AI features | AI request content: in text containing customer data, phone numbers, emails, ID numbers and bank account numbers are masked; photos (photos attached for the assistant, document photos for text recognition, listing photos a partner exchange sends for phone-number checks) are sent as they are, unmasked | TLS; not used for training under the providers' API policies; providers may retain data temporarily, for a limited period, under those policies |
| Google Firebase (United States) | Push notifications | Device token | TLS |
| Pusher | Real-time delivery of messages between brokers and customers | Message content | TLS |
| Google Maps | Address search and matching | Address or coordinates being searched | TLS |
| Cloudflare | Content delivery, attack protection, traffic statistics; Cloudflare Turnstile anti-spam on enterprise website forms (when the enterprise enables it) | IP address, browser information | TLS |
| OpenStreetMap (Nominatim) | Looking up the street name for a point pinned on the map, where LandAIA's own road data does not yet cover it | Coordinates of the pinned point only, without identity | TLS |
| Google Fonts | Loading fonts for some website pages | IP address, browser information | TLS |
| Bunny CDN | Delivery of public content | Static assets, public listing photos | TLS |
| Google Drive | Backup storage | Encrypted backups | Encrypted |
| Apple / Google (operating system services) | Speech recognition when you use the microphone | Voice audio | Under Apple's/Google's policies |
| Google Cloud Text-to-Speech | Reading the assistant's answers aloud (when "Auto-read answers" is on — on by default, can be turned off in the AI assistant settings) | Text of the answer to be read | TLS |
| Apple App Store / Google Play | In-app payments | Plan purchase transaction data | App store security standards |
| Sepay; VietQR (img.vietqr.io) | VietQR bank transfer reconciliation; generating the payment QR image | Transaction ID, amount, transfer description | TLS, webhook authenticated with an API key |
| Email provider (PrivateEmail) | Transactional email, password reset | Email address, name | TLS |
When you work for an enterprise on the platform, that enterprise can see data as described in Section 5.1 of the Privacy Policy. For data the enterprise collects or enters itself — the enterprise's shared listings and shared customers, staff records and ID numbers, face data, and content that visitors send through forms on the enterprise's website — the enterprise decides the purposes and LandAIA acts as processor on the enterprise's behalf. Your account and your personal data (surveys and customers in personal mode, AI assistant conversation history, private account information — Section 5.1 of the Privacy Policy) are controlled by LandAIA under the Privacy Policy: the enterprise cannot see them, and you keep them when you leave the enterprise. That is why you are asked to agree to LandAIA's documents even when you use an app or work portal branded by the enterprise.
Photo check service for partner exchanges. LandAIA provides partner real estate exchanges with a service that checks whether a listing photo contains a phone number. The partner exchange decides the purpose and which photos are sent for checking; LandAIA acts as processor on the exchange's behalf: it receives the photo the exchange sends, passes it to OpenAI for the check, and returns to the exchange only whether a phone number is present, with a confidence score. LandAIA does not store the photo and does not extract or store any phone number in it; the logs and billing records of each check contain neither the photo nor any phone number. Photos are sent to OpenAI with response storage turned off; OpenAI may retain them temporarily, for a limited period, to detect abuse under its API policies. Photos in listings you post on a partner exchange, including listings sent from the LandAIA app, may be put through this service by the exchange under the exchange's own policy.
Wallet-deduction instruction when posting a paid listing to a partner exchange. When You choose to post a listing under a partner exchange's paid package through a linked account, LandAIA sends the exchange the package You chose and the amount shown at the time You chose it, so the exchange can deduct exactly that amount from Your wallet at the exchange. LandAIA cannot see Your wallet balance at the exchange, does not retain that balance, and does not top up the wallet. If the amount sent does not match the exchange's current price, or Your wallet balance is insufficient, the exchange rejects the request and does not deduct; LandAIA does not retry on its own or charge any other default amount. Collecting, holding and refunding wallet funds is carried out by the exchange under its own policy.
We do not sell personal data and do not share it with any third party other than those in the table above, the enterprise you belong to and partner exchanges you actively post listings to (Section 5 of the Privacy Policy), except when lawfully required by a competent state authority.
06 DATA SUBJECT RIGHTS
6.1 Right of access
You have the right to:
- Know which data is being processed
- Know the purpose of processing
- Know the retention period
- Know who has access
6.2 Rights to rectification and erasure
✏️ Rectification
- • Update inaccurate information
- • Complete missing information
- • Change preferences (Settings › Privacy in the app)
🗑️ Erasure
- • Delete your account entirely (see Account deletion guide)
- • Delete specific data
- • Withdraw consent to processing
6.3 Right to request your data
You can ask us to provide your personal data by emailing hotro@landaia.net.
07 TECHNICAL SECURITY MEASURES
7.1 Encryption
- In transit: TLS (HTTPS) for all connections
- At rest: AES-256-GCM for sensitive fields (phone numbers, ID numbers, addresses, owner and contact information in survey listings, CRM customer data, payment information); file-level encryption for signed electronic documents, signature images and face data
- Encryption keys: managed separately from the data, on AWS Secrets Manager
- Passwords: Bcrypt with random salt
- Backups: regular encrypted backups
7.2 Access control
- Internal administrator accounts: placed behind a separate access-control layer, with two-factor authentication (2FA) supported
- Fine-grained permissions: role-based access control
- Logging: every view of the phone or ID number of an owner or customer is logged (kept for 12 months); viewing an owner's phone number requires re-authentication
- Automatic lockout: after repeated failed sign-in attempts
08 RETENTION PERIODS
| Data type | Period | Reason |
|---|---|---|
| Account information | Until the account is deleted | Providing the service |
| Citizen ID number | Deleted together with the account | Identity verification |
| Personal surveys and CRM | Until you delete them or delete your account; listings belonging to an enterprise or submitted to an enterprise inventory remain with the enterprise, detached from your name | Providing the service |
| Detailed messages with the AI assistant | 12 months | Providing the service |
| Assistant memory | Not deleted on a schedule, fades over time; deleted when the account is deleted | Providing the service |
| Usage data for the assistant (when you turn on "Remember my in-app activity") | Until you delete it | AI assistant |
| Search history | 12 months (deleted earlier if the account is deleted) | Improving search quality |
| Access logs, security logs, login sessions | 12 months (screen views: 90 days) | Security and audit |
| Logs of views of phone/ID numbers | 12 months | Security and audit |
| Face reference photo and feature vector | Deleted as soon as you leave the enterprise or delete your account | Verification at signing |
| Electronic signing evidence (signed documents, signature images, face photos taken at signing) | The document's period of validity plus 5 years | Evidence in case of dispute |
| Listing photos a partner exchange sends for phone-number checks | Not stored — a photo exists only while the check is being processed; phone numbers in photos are not stored | Service for partner exchanges (Section 05) |
| Consent records | 3 years after account deletion, kept only with a one-way hashed email/phone number | Proof of consent |
| Payment transactions | At least 10 years | Accounting law |
| De-identified statistics | No time limit | Market analysis |
| Cookies | See the Cookie Policy | Website functionality |
09 DATA INCIDENT HANDLING
9.1 Response procedure
- Detection (0-1h): automated monitoring
- Assessment (1-4h): determine severity
- Containment (4-8h): isolate and remediate
- Notification (8-24h): report to the authorities
- Recovery (24-72h): restore and improve
9.2 Notifying users
If an incident affects personal data, we will notify you within 72 hours by email and by a notice on the website.
10 CONTACT FOR DATA PROCESSING
Data Protection Officer: hotro@landaia.net
Security hotline: 0943.206.933
Address: 270 Ngoc Tri Street, Long Bien Ward, Hanoi, Vietnam
Request handling time: within 72 hours of receiving a valid request, unless the law prescribes a different period
✅ Compliance commitment
We are committed to full compliance with personal-data-protection regulations and continuously update our security measures to keep your data safe.