Privacy Policy

Overview

ROOPB ("we", "our", "us") operates as a local commerce platform connecting merchants and customers across Vietnam. This Privacy Policy describes how we collect, use, store, and share information about you when you use our website or services.

What We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

Category	Examples	Purpose
Identity Data	Name, email address, phone number	Account creation & communication
Business Data	Store name, address, logo, operating city	Merchant registration & listing
Location Data	Store latitude/longitude, delivery addresses	Delivery routing & city filtering
Transaction Data	Orders, payment amounts, refund history	Order processing & payouts
Technical Data	IP address, browser type, device info	Security & platform performance
Usage Data	Page views, feature interactions	Product improvement

How We Use Your Data

We use the data we collect for the following purposes:

• Creating and managing your merchant or customer account.
• Processing orders, payments, and delivery coordination.
• Verifying your identity and preventing fraud.
• Communicating service updates, policy changes, and support responses.
• Improving platform functionality through usage analytics.
• Complying with legal and regulatory obligations.

We will only process your data where we have a lawful basis to do so — including your consent, contractual necessity, or our legitimate business interests.

Data Sharing

We do not sell personal data. We may share your information only in the following limited circumstances:

• Delivery Partners: Sharing recipient name and address for order fulfillment.
• Payment Processors: Transaction data required to process payments securely.
• Service Providers: Trusted vendors (e.g., hosting, analytics) under strict data processing agreements.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger or acquisition, with advance notice to you.

Cookies

ROOPB uses cookies and similar technologies to provide core platform functionality and improve your experience. These include:

• Session cookies: Essential for keeping you logged in during a browsing session.
• CSRF tokens: Security tokens that protect form submissions.
• Preference cookies: Remembering your language or display preferences.

You can configure your browser to refuse cookies, but this may affect the functionality of certain features on the platform.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

• Active merchant accounts: Data retained for the full lifetime of the account.
• Closed accounts: Core data retained for up to 2 years for legal compliance.
• Order records: Retained for 5 years as required by Vietnamese tax regulations.
• Server logs: Retained for 90 days for security auditing.

Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete information.
• Erasure: Request deletion of your data where it is no longer necessary.
• Restriction: Ask us to temporarily stop processing your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on our legitimate interests.

Security

We implement industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit.
• Encrypted storage for sensitive information such as authentication tokens.
• Restricted internal access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.

While we take all reasonable precautions, no system is completely immune to security risks. Please report any suspected security vulnerability immediately to security@roopb.com.

Third-Party Links

Our platform may contain links to third-party websites or services. This Privacy Policy does not apply to those external sites. We encourage you to read the privacy policies of any third-party services you access through ROOPB.

Children's Privacy

ROOPB is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child under 18 has provided us with personal information, we will delete it immediately.

Policy Changes

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on our platform at least 14 days before the changes take effect.

Continued use of our services after the effective date of any changes constitutes your acceptance of the updated policy.

Contact

If you have questions, concerns, or requests regarding your privacy, please contact our dedicated privacy team: