Privacy Policy

Version 1.0 · Effective 23 October 2026

This policy explains how Innomation Technology Corporation (“Innomation”, “we”) collects, uses, stores, shares and protects personal data when you visit innomation.vn or innomation.com.vn, book a demo, request a consultation, apply for a job or otherwise contact us. It is written in line with Vietnam’s Law on Personal Data Protection No. 91/2025/QH15 and its implementing regulations.

1. Scope

This policy covers personal data that Innomation processes through the website and the contact channels listed on it (forms, email, phone, Messenger). For this data, Innomation is the personal data controller.

Data that customers put into Innomation products (AgentFlow, AutoFlow, Ragify, AutoMatching) in their deployments is outside this policy. Its processing is governed by the contract and data processing agreement between Innomation and the customer.

2. Data we collect

Data you give us:

  • Demo, consultation and contact requests: name, email, phone number, company, department or job title, industry, the product you are interested in and your message.
  • Job applications: name, email, phone number, the role, portfolio link, how you heard about the job and the attached CV with everything you include in it.
  • When you call or message us on Messenger: your phone number, account name and the conversation.

Data collected automatically when you use the site:

  • Device and browser details: device type, operating system, browser, language, screen size and approximate country/city.
  • How you use the site: pages viewed, time on page, traffic source, clicks, scrolling and mouse movement.
  • Server logs: IP address, request time and path, used for operations and security.

We do not ask for sensitive personal data on the website. Please leave it out of forms and CVs unless it is necessary.

3. Why we use your data

  • To reply to you, advise you, arrange demos and share information about the products you asked about.
  • To review job applications and contact candidates during recruitment.
  • To measure traffic and understand how the site is used so we can improve content and experience.
  • To run and protect the site and to detect and prevent unauthorised access or abuse.
  • To meet legal obligations and lawful requests from competent authorities.

Analytics data is used only for Innomation’s internal analysis. We do not sell personal data.

4. Cookies and analytics

The site uses Google Tag Manager to load Google Analytics 4, plus Microsoft Clarity, to measure traffic. These tools set cookies in your browser. Clarity’s masking is used to limit sensitive information in session recordings.

CookieSet byPurposeLifetime
_ga, _ga_*Google AnalyticsTell users and sessions apart2 years
_clckMicrosoft ClarityRemember the Clarity user ID1 year
_clskMicrosoft ClarityGroup page views into one recording1 day

The site’s fonts load from Google Fonts, so your browser sends its IP address to Google’s servers when a page loads. The site also keeps your language and light/dark theme choice in browser storage (localStorage); it is never sent to our servers.

You can block or delete cookies in your browser settings, or install the Google Analytics Opt-out add-on (tools.google.com/dlpage/gaoptout). The site still works normally with analytics cookies blocked.

5. Who we share data with

We share data only as far as the purposes above require, with:

  • Innomation staff in sales, solution consulting or recruitment, depending on the request.
  • Providers that support the site: FormSubmit (delivers form submissions to the responsible mailbox), Google (Tag Manager, Analytics, Fonts), Microsoft (Clarity) and Meta (Messenger, when you choose to message us). They process data under their own policies and our instructions within the scope of their service.
  • Competent authorities, where the law requires it.
  • A successor in a reorganisation, merger or transfer of the business, as far as the law allows.

6. Storage and transfers abroad

The site runs on servers in Vietnam. Form submissions pass through FormSubmit and are kept in the responsible mailbox. Analytics data and Messenger conversations are processed by Google, Microsoft and Meta on their infrastructure, which may be outside Vietnam. Where a transfer abroad is Innomation’s responsibility, we meet the related legal obligations, including preparing and keeping an impact assessment when required.

7. How long we keep data

  • Demo, consultation and contact requests: up to 24 months after our last exchange, unless a contract follows.
  • Job applications: up to 12 months from receipt, or longer if you agree that we may contact you about future roles.
  • Analytics: as configured in Google Analytics (at most 14 months for event-level data) and Microsoft Clarity.

After that, data is deleted or anonymised unless the law requires us to keep it longer.

8. Security

We apply suitable organisational and technical measures to protect personal data, including HTTPS encryption, need-to-know access, key-based authentication for server administration, firewalls, monitoring for unusual access and regular security updates. No system is completely secure; if you find a security issue, please tell us using the details under Contact.

9. Your rights

Under personal data protection law, you have the right to:

  • Know how your personal data is processed.
  • Give, refuse or withdraw consent.
  • Access and correct your data, or ask us to correct it.
  • Ask us to provide, delete or restrict processing of your data, and object to processing.
  • Complain, report, take legal action and claim compensation as provided by law.
  • Ask for measures to protect your personal data.

To use these rights, email us at the address under Contact. We may need to verify your identity first and will respond within the time the law allows. Withdrawing consent does not affect processing carried out before the withdrawal.

10. Data breaches

If we find a breach of personal data protection rules, we will contain it, limit the harm and notify the personal data protection authority within the legal deadline. If it may affect you, we will tell you when the law requires it or when we consider it appropriate.

11. Children

Our site and products are meant for businesses and working adults. We do not knowingly collect data from children under 16. If you believe we have, please contact us and we will delete it.

The site links to Facebook, Messenger, LinkedIn and YouTube. Once you leave Innomation’s website, those operators handle your data under their own policies.

13. Changes to this policy

We may update this policy when the law, our products or our data practices change. The new version is published on this page with its effective date; significant changes will be highlighted on the site.

14. Contact

For any question, request or complaint about personal data, contact: