Rewaffi is committed to protecting your personal data in compliance with Vietnam's Law on Personal Data Protection 2025 No. 91/2025/QH15 (effective January 1, 2026), replacing Decree 13/2023/NĐ-CP, as well as applicable international standards for global users.
1. Data We Collect
- Provided by you: email, full name, phone number, payout details (bank account, Momo/ZaloPay ID, PayPal email), avatar, referral code.
- Automatically collected: IP address, device/user agent, access times, clicks, conversions (from tracking links), cookies, usage analytics.
- From third parties: commission-related data from affiliate providers (order ID, amount, status – only linked to you).
2. Purposes of Processing
- Account authentication and management.
- Generating/tracking affiliate links, stats (clicks/conversions/earnings).
- Processing payouts and financial reporting.
- Sending notifications about new campaigns, policy changes, payouts, and reliable promotional offers/discounts from trusted sources to help optimize your rewards.
- Fraud detection, platform security.
- Service improvement (anonymized analytics).
- Compliance with legal obligations (tax reporting, investigations).
3. Legal Basis
- Your consent (upon registration/use).
- Performance of contract (these Terms).
- Legal obligations (e.g., Vietnamese tax/cybersecurity laws).
4. Sharing of Data
- With third-party affiliate providers (Shopee, Lazada,...) for commission tracking.
- With payment processors (banks, Momo, ZaloPay, PayPal – only necessary info).
- With authorities if legally required.
- We do not sell your personal data for advertising purposes.
5. Storage & Security
Stored on Supabase (serverless PostgreSQL) + Vercel, with Row Level Security (RLS), encryption, 2FA, rate limiting, and webhook verification.
Retention: Until account deletion + statutory periods (financial records 5–10 years). In case of data breach, we will notify you and relevant authorities per PDPL 2025 requirements.
6. Your Rights
- Access, rectify, withdraw consent, erase data (except mandatory financial logs).
- Lodge complaints: [email protected] or Vietnam's data protection authority (Ministry of Public Security).
- Response time: Within 72 hours where required.
7. Cookies & Tracking
Essential cookies (authentication), analytics (Google – anonymized). Manage via browser settings.
8. Changes to Policy
Updates notified via email/dashboard; continued use = acceptance.
Contact Data Protection Officer: [email protected]