Personal Data Protection Policy
& Information Security

1. Types of Data Collected

To provide our services, Avenir collects the following categories of personal data:

• Account data: Full name, Email, Phone number, Company name when you register to use the SaaS platform.
• Business data (Documents): PDF/Image files (Invoice, Packing List, Bill of Lading) that you upload to the system for AI extraction and document cross-checking.

2. Purpose and Third-Party Processing

Data is used solely for the purpose of providing HS code lookup services and Ecus/VNACCS document automation.

3. Data Retention Period

• Account data: Retained until you request account deletion.
• Document data: Avenir automatically encrypts and will permanently delete from our servers within 30 days of upload, or immediately when you click the "Delete" button in the working interface.

4. Data Subject Rights

Under Decree 13/2023/ND-CP, you have the following full rights over your data:

• Right to Know & Right to Consent: The right to be informed about data collection and processing, and the right to withdraw consent at any time.
• Right to Access & Rectification: The right to access, correct, and request a copy of your personal data.
• Right to Erasure (Right to be Forgotten): The right to request deletion of all personal data related to you.
• Right to Object & Restriction of Processing: The right to object to data processing and request restriction of processing in legally specified cases.

To exercise any of the above rights, please contact our Data Protection Officer (DPO). Avenir will process your request within 72 business hours.

5. Contact Information

For any questions or requests to exercise data rights, please contact Avenir's Data Protection Officer (DPO):