WEVIKO is committed to protecting your personal information in accordance with Decree 13/2023/ND-CP on personal data protection (PDPD) and other Vietnamese regulations.
1. Information we collect
Account information: name, email, phone number, role (customer/garage/supplier).
Vehicle information: license plate, make, model, year, VIN, service history.
Transaction information: bookings, estimates, payments, reviews.
Technical information: IP address, device, browser, location (when you grant permission).
Business information (for garages/suppliers): business name, address, tax code, business registration certificate.
2. Purposes of use
Providing booking services and connecting customers — garages — suppliers.
Processing payments via VNPay and bank channels.
Sending notifications about bookings, estimates, payments, reviews.
Analyzing usage behavior to improve the product.
Complying with legal obligations (accounting, tax, cooperation with state authorities upon lawful request).
3. Sharing with third parties
VNPay (payment gateway): minimum transaction info to process payment.
AWS SES (Singapore): transactional email content (not stored).
Zalo OA (VNG Corporation): notification messages if you subscribed.
Supabase (data processor): all platform data is stored on Supabase with encryption.
Google (only when you log in with Google OAuth): email, name, profile picture.
We do NOT sell your personal data to any third party.
4. Storage & security
Data is stored on cloud infrastructure with in-transit (TLS) and at-rest (AES-256) encryption.
Strict access control via Row Level Security (RLS) — garages cannot see other garages' data.
Passwords are hashed with bcrypt, never stored in plaintext.
Data is retained while your account is active and for 12 months after deletion (for legal/accounting purposes).
5. User rights (under PDPD)
Right to access: view personal data we hold.
Right to correct: update inaccurate/outdated information.
Right to delete: request deletion of your account and related data (except data we must retain by legal obligation).
Right to restrict processing: request to pause processing for certain purposes.
Right to object: object to processing for marketing purposes.
Right to data portability: receive a copy of your data in a machine-readable format (JSON/CSV).
To exercise these rights, send a request to: privacy@weviko.com.
6. Cookies & tracking
We use session cookies (essential cookies) — these cannot be disabled as they are necessary for service operation.
Language preference cookie (wv-locale) — stores your vi/en/ko choice.
We do NOT use third-party advertising cookies.
7. Children
WEVIKO services are not intended for users under 16. We do not knowingly collect children's information.
8. Policy changes
When we update this policy, we will notify users via email and post the update on this page 7 days before it takes effect.
9. Contact about personal data
Data Protection Officer (DPO): privacy@weviko.com
You have the right to file a complaint with the Authority of Information Security (Ministry of Information and Communications).