Privacy Policy

1. Scope and Purpose

This Privacy Policy explains how iThinhTech ("iThinhTech", "we", "our", or "us") collects, uses, stores, discloses, and protects personal information when you use our website, marketplace, community features, mobile apps, and related services (collectively, the "Services").

This policy is intended to support compliance with applicable electronic privacy and communication laws, including (where applicable) the U.S. Electronic Signatures in Global and National Commerce Act (E-SIGN), Uniform Electronic Transactions Act (UETA), CAN-SPAM requirements, and state privacy rights frameworks such as CCPA/CPRA.

2. Information We Collect

We may collect the following categories of information:

• Account and profile data: name, email, phone number, business/store information, profile content, login credentials (hashed/password-protected).
• Transaction and subscription data: orders, billing status, payment-related metadata, invoices, and subscription activity.
• Community and marketplace content: listings, messages, comments, uploads, reports, and moderation data.
• Technical and device data: IP address, browser/device details, operating system, app version, crash logs, and performance data.
• Usage and analytics data: pages viewed, features used, referring pages, session actions, and approximate geolocation derived from IP.
• Communication records: support tickets, email replies, and notification preference settings.

3. How We Use Information

• Provide, operate, secure, and improve the Services.
• Create and manage accounts, authenticate users, and maintain login sessions.
• Process subscriptions, billing, fraud prevention checks, and support requests.
• Enable community and marketplace functionality (posting, messaging, commenting, moderation, and trust/safety features).
• Send operational notices such as login alerts, password reset links, verification emails, policy updates, and service notices.
• Send product or marketing communications in accordance with consent rules and opt-out laws.
• Comply with legal obligations and enforce our Terms and acceptable-use rules.

4. Electronic Communications and Consent (E-SIGN / UETA)

By creating an account, submitting online forms, checking consent boxes, or otherwise interacting electronically with our Services, you agree to receive records, notices, disclosures, and agreements electronically.

Electronic actions (for example, button clicks, checkbox confirmations, and digital form submissions) may constitute your electronic signature and may be used as evidence of your acceptance of Terms, policies, and transaction records, to the extent permitted by applicable law.

5. Cookies, Tracking, and Similar Technologies

We use cookies and similar tools for authentication, language preference, security, analytics, and service performance. Some cookies are strictly necessary for core functionality; others help us improve product quality and user experience.

You can manage browser cookie settings at any time. Disabling certain cookies may limit some features such as login persistence, personalization, and protected action workflows.

6. Sharing and Disclosure

We may share information only as reasonably necessary with:

• Service providers: hosting, analytics, communication, security, and payment infrastructure vendors.
• Business integrations: providers needed to complete subscribed product features or operational workflows you request.
• Legal and compliance recipients: when required by law, court order, regulatory request, or to protect rights and safety.
• Corporate transaction parties: in connection with merger, acquisition, financing, or asset sale (subject to confidentiality and legal safeguards).

We do not sell personal information in exchange for monetary payment.

7. Data Retention

We retain personal information for as long as needed to provide Services, maintain legal records, resolve disputes, enforce agreements, and satisfy compliance obligations. Retention periods vary by data type and legal requirements.

8. Security

We apply reasonable administrative, technical, and organizational safeguards, including access controls, encryption in transit where supported, and monitoring for unauthorized activity. No method of transmission or storage is 100% secure, and absolute security cannot be guaranteed.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Request access to personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of certain personal information, subject to legal exceptions.
• Request restriction or objection to certain processing activities.
• Opt out of non-essential marketing communications at any time.

To submit a request, contact us using the details below. We may need to verify your identity before processing certain requests.

10. Email and Marketing Compliance (CAN-SPAM)

Marketing emails include a clear unsubscribe method. Transactional and security communications (for example, password reset emails, billing notices, or important account updates) may still be sent when necessary to provide the Services.

11. Children's Privacy

Our Services are not directed to children under 13 (or higher age thresholds where required by local law). We do not knowingly collect personal information from children in prohibited age ranges.

12. International Transfers

If you access the Services from outside the country where our infrastructure is located, your information may be transferred and processed across borders in accordance with applicable legal safeguards.

13. Policy Changes

We may update this Privacy Policy periodically. If we make material changes, we will update the "Last updated" date and may provide additional notice through the Services or by email when required by law.

14. Contact and Privacy Requests

For privacy questions, legal notices, or data rights requests, contact: support@ithinhtech.com.

Please include enough detail for us to locate your account and process your request safely.