Privacy Policy

Introduction

At Burnon FlameFlow, we believe privacy isn't just a legal requirement—it's fundamental to building trust with our community. This policy explains how we handle your personal information when you interact with our cross-chain and interoperability solutions.

We operate from Vietnam and serve clients globally, which means we navigate multiple regulatory frameworks to ensure your data stays protected. This document reflects our commitment to transparency and your right to understand exactly what happens with your information.

Information We Collect

Running a technology platform requires certain information to function properly and provide you with meaningful services. Here's what we gather and why:

Technical Data We Automatically Collect

Our systems log certain technical information to maintain security and improve performance. This includes your IP address, browser type, device characteristics, and interaction patterns with our platform.

We also track how you navigate through our services—which features you use most, where you encounter difficulties, and what workflows work best for your needs. This helps us refine the user experience.

How We Use Your Information

Every piece of data we collect serves a specific purpose tied to providing better cross-chain solutions:

• Delivering and maintaining our interoperability services
• Responding to your technical support requests and questions
• Sending updates about system maintenance, new features, or security patches
• Analyzing usage patterns to identify areas for platform improvement
• Ensuring compliance with Vietnamese data protection regulations
• Detecting and preventing fraudulent activities or security breaches
• Customizing your experience based on your technical requirements

We don't use your personal information for advertising purposes or sell it to third parties. Our business model focuses on providing valuable technology solutions, not monetizing personal data.

Data Sharing and Third Parties

We share your information only when necessary to provide our services or meet legal obligations. Here are the specific scenarios:

Service Providers

We work with carefully selected technology partners who help us operate our platform—cloud hosting providers, security services, and communication tools. These partners can only access information needed for their specific function and must meet our privacy standards.

Legal Requirements

Vietnamese law sometimes requires us to share information with government authorities, particularly for tax compliance or if we receive valid legal requests. We'll notify you about such requests unless legally prohibited from doing so.

Business Transfers

If Burnon FlameFlow undergoes a merger, acquisition, or significant restructuring, your information might be transferred as part of that transaction. We'll provide advance notice and ensure the new entity maintains equivalent privacy protections.

Your Rights and Control

You have significant control over your personal information. Here's what you can do:

To exercise any of these rights, contact us using the information provided below. We'll respond within 30 days and may need to verify your identity to protect against unauthorized access.

Data Security and Protection

Securing your information is a technical challenge we take seriously. Our approach combines multiple layers of protection:

Technical Safeguards

We encrypt data both in transit and at rest using industry-standard protocols. Our systems undergo regular security audits, and we maintain strict access controls—employees can only access information necessary for their specific job functions.

Organizational Measures

All staff receive privacy and security training. We've established clear procedures for handling data breaches, including rapid response protocols and notification procedures that meet Vietnamese regulatory requirements.

Physical Security

Our servers are housed in certified data centers with multi-factor authentication, surveillance, and environmental controls. We also maintain secure backup systems in geographically separated locations.

Despite these precautions, no online service can guarantee absolute security. We commit to promptly notifying you of any security incident that might affect your personal information.

Data Retention

We don't keep your information longer than necessary. Our retention periods depend on the type of data and legal requirements:

• Account information: Retained while your account remains active, plus 3 years after closure for potential support issues
• Technical support communications: Kept for 5 years to help resolve similar future issues
• Transaction records: Maintained for 7 years to meet Vietnamese business record requirements
• System logs and analytics: Automatically deleted after 2 years unless needed for security investigations
• Marketing communications: Removed immediately when you unsubscribe

When we delete information, we ensure it's removed from all our systems, including backups, except where law requires longer retention.

International Data Transfers

Our global client base sometimes requires transferring data outside Vietnam. When this happens, we ensure adequate protection through:

• Selecting service providers in countries with equivalent privacy laws
• Implementing contractual safeguards that require privacy protection standards
• Using technical measures like encryption during transit and storage
• Obtaining your explicit consent when transfers involve sensitive personal information

We regularly review these arrangements to ensure they continue meeting evolving privacy standards and regulatory requirements.

Children's Privacy

Our services are designed for business and professional use. We don't knowingly collect personal information from individuals under 16 years old. If we discover we've accidentally collected such information, we'll delete it promptly.

Parents or guardians who believe we might have information about their child should contact us immediately using the details provided below.

Changes to This Policy

Technology evolves, regulations change, and our services grow. When we update this privacy policy, we'll post the new version on our website and notify active users via email at least 30 days before changes take effect.

Significant changes that materially affect how we handle your information will require your explicit consent to continue using our services.