Skip to main content

Our commitment to protecting your data

Privacy Policy

Quotely is committed to protecting your privacy and data. Here is how we collect, use, and secure your information.

Last updated: September 15, 2026

1. Operator

Quotely is a product developed and operated by VIGENTIX COMPANY LIMITED. The company is the data controller for information processed through the service.

  • Company name: VIGENTIX COMPANY LIMITED
  • Tax ID: 0402340260
  • Address: 8th Floor, Bach Dang Complex, 50 Bach Dang Street, Hai Chau Ward, Da Nang City, Vietnam
  • Email: contact@quotely.vn
  • Website: https://vigentix.com

2. Data we collect

  • Account information: Name, email and a password hashed before storage when you register for Quotely.
  • Facebook Page information: Page ID, page name, and access token when you connect your Facebook Page via OAuth.
  • Zalo OA information: Official Account ID and name, along with an access token when you connect Zalo OA.
  • Message content and images: Messages and images between customers and your page are processed by the AI to auto-reply and recognize products. This content is stored to display conversation history.
  • Product information: The product catalog, prices, and stock levels you enter into the system.
  • Invoice information: Business name, tax ID, address, and invoice email when you pay for a service plan.
  • Technical data: IP address, device/browser type, and activity logs for security and system operations.

3. How we use your data

  • Process messages and send automated replies to your customers.
  • Recognize products from images sent by customers.
  • Display conversation history and analytics on the dashboard.
  • Process payments and issue invoices for service plans.
  • Improve service quality and user experience.
  • Ensure security, detect fraud, and comply with the law.

4. Data sharing and third-party processors

We do not sell your data. We only share data with service providers necessary to operate Quotely:

  • Meta Platforms (Facebook, Messenger): To receive and send messages on behalf of your Facebook Page.
  • Zalo (VNG Corporation): To receive and send messages through your Zalo Official Account.
  • OpenAI and Anthropic: To process message content and images using AI models to generate replies.
  • Amazon Web Services (AWS): Server infrastructure in Singapore and backup storage for operations and data recovery.
  • Postproxy: Connection and message delivery intermediary for Messenger when configured to use this provider.
  • Google Analytics and Microsoft Clarity: Analyze visits and experiences on public and sign-in/registration pages when configured and after you consent to analytics cookies.
  • PayOS: To process payments (bank transfer / QR code) for service plans.

These parties may only process data to the extent necessary to provide services to us and in accordance with their own privacy commitments. We may also disclose data when required by law.

5. Cross-border data transfer

The service uses AWS infrastructure in Singapore and AI providers that may process data outside Vietnam. Your data may therefore be transferred and processed outside Vietnam. By using the service, you consent to this transfer. We apply reasonable measures to protect data according to the standards in this policy.

6. Retention period

  • Data is retained for as long as your account is active in order to provide the service.
  • Facebook / Zalo OA access tokens are deleted immediately when you disconnect the platform.
  • When an owner confirms account deletion, service is suspended and a 30-day cancellation window starts. After that window, the system processes operational data erasure. Required billing records are retained separately with restricted access.

7. Data security

  • Data is isolated per business (multi-tenant isolation) via a Row-Level Security mechanism.
  • Passwords are hashed before storage.
  • All connections are protected with HTTPS/TLS.
  • Platform access tokens are stored securely in the database.

8. Your rights

You may make the following personal-data requests under applicable personal-data protection law:

  • Access and correction: View and update your information in Settings.
  • Disconnect: Disconnect your Facebook Page or Zalo OA at any time in Settings.
  • Data deletion: Use Security to request business account deletion, or send a personal-data request to contact@quotely.vn.
  • You may request withdrawal of consent or restriction of processing of your personal data.
  • Complain: Raise concerns with us or with the competent state authority if you believe your rights have been violated.

9. Data deletion

The process depends on whether you are deleting a business account or an individual buyer’s personal data.

A business owner with a verified email can request business account deletion in Security, using their password and an email confirmation code. Service is suspended upon confirmation; the owner has 30 days to cancel the request. After that window, the system processes operational data erasure. Required billing records are retained separately with restricted access.

  • Manual request: contact@quotely.vn to send a personal-data request. We verify the requester and scope before processing it.
  • Requests from Facebook: When you remove the Quotely app from your Facebook settings, Facebook will send a deletion request to our system.

For a Facebook request that identifies a matching buyer, the system processes erasure of related data:

  • The matching buyer profile and identifiers.
  • Conversations, messages and buyer-uploaded images.
  • Related personal data in quotes and orders. Usage records without buyer identifiers may be retained for quota reconciliation.

The Facebook confirmation code acknowledges receipt of the request; it does not confirm that erasure is complete. To check the result or provide information needed to identify the data, send the code to contact@quotely.vn.

10. Cookies and tracking technologies

Necessary cookies and browser storage maintain sign-in, security and your consent choice. When configured, Google Analytics and Microsoft Clarity load on public and sign-in/registration pages only after analytics consent. Choose “Necessary only” to prevent these tools from loading. The analytics configuration does not enable advertising storage or ad personalization.

11. Children

Quotely is a service for businesses and stores, not directed at and does not collect data from persons under 18 years of age. If you believe we have inadvertently collected data from a child, please contact us so we can delete it.

12. Policy changes

We may update this policy from time to time. When there are significant changes, we will notify you via the service or email. The date of the most recent update is always shown at the top of the page.

13. Contact

If you have any questions about this privacy policy, please contact:

  • VIGENTIX COMPANY LIMITED
  • 8th Floor, Bach Dang Complex, 50 Bach Dang Street, Hai Chau Ward, Da Nang City, Vietnam
  • Email: contact@quotely.vn