1. Introduction
ViRFQ (virfq.com) is a B2B marketplace connecting Vietnamese agricultural exporters ("Sellers") with international buyers ("Buyers") through a Request for Quotation (RFQ) system. This Privacy Policy explains how we collect, use, share, and protect information when you use our platform.
By using ViRFQ, you agree to the terms in this Privacy Policy. Please read carefully before providing any personal information.
2. Data Collection
2.1. Information You Provide
We collect information when you:
- Register a Seller account: Email, password, full name, phone number, company name
- Build a company profile: Address, country, business sector, verification documents (business registration certificate, export proof)
- Submit an RFQ as a Buyer: Name, email, phone number, WhatsApp, company name, country, and quotation request details
- Make payments: Transaction and payment history
- Contact support: Message content, feedback
2.2. Automatically Collected Information
- IP address and device information
- Browser type and operating system
- Pages visited and access times
- Usage behavior on the platform (via analytics and marketing tools, see Section 7)
3. Data Usage
We use your information to:
- Provide and maintain our services, including matching Buyer RFQs with relevant Sellers
- Verify identity, review verification documents, and secure your account
- Send notifications about relevant RFQs in your industry
- Process payments and manage Seller subscriptions and contact unlocks
- Improve and develop our products
- Provide customer support
- Send marketing emails (you can unsubscribe)
- Analyze trends and statistics
4. Data Sharing
We do not sell your personal information. However, we handle Buyer contact information and share data as follows:
- Buyer contact access control:A Buyer's contact details (name, email, phone, WhatsApp, company) submitted in an RFQ are not shown publiclyon the marketplace. They are only revealed to a Seller after that Seller completes a valid paid "unlock" for the specific RFQ.
- Payment processors: Stripe (international cards) and SePay (Vietnamese bank transfer/VietQR), to process transactions
- Email service: Resend, to send transactional and notification emails
- Analytics and marketing: Google Analytics (GA4) and Facebook Conversions API, to measure and improve platform performance
- Error monitoring: Sentry, to detect and fix technical issues
- AI translation: OpenAI, to translate product and profile content between Vietnamese and English
- Infrastructure providers: Neon (database), Vercel (hosting), and Cloudflare (content delivery and file storage)
- Legal requirements: Comply with laws, protect legal rights
- Business transfers: In case of merger or acquisition
These providers act as data processors and only access the information necessary to perform their service for us.
5. Data Security
We apply industry-standard security measures to protect your data:
- SSL/TLS encryption for all connections
- Password encryption using bcrypt algorithm (custom authentication, not third-party login)
- Verification documents (business registration, export proof) stored in a private Cloudflare R2 bucket, accessible only to the document owner and admin through an authenticated proxy
- Public images (product and company photos) served via CDN; no personal documents are exposed publicly
- Continuous error and intrusion monitoring via Sentry
- Regular data backups
- Periodic security review
6. Your Rights
You have the following rights regarding your personal data:
- Right to access: Request a copy of your data
- Right to rectification: Update inaccurate information
- Right to erasure: Request account and data deletion
- Right to object: Refuse processing for marketing purposes
- Right to portability: Receive data in a transferable format
To exercise these rights, please contact privacy@virfq.com. We will respond within 30 days.
8. Data Storage
Your data is stored with our infrastructure providers (Neon for the database, Cloudflare for file storage, Vercel for hosting) and protected according to industry-standard access controls.
We retain data while you use our services and for up to 5 years after account cancellation (as required by business record retention laws).
9. Policy Changes
We may update this Privacy Policy periodically. Any significant changes will be notified via email or platform notification at least 7 days before taking effect.
You should check this page regularly for the latest information.
10. Contact
If you have questions about this Privacy Policy, please contact:
- Privacy Email: privacy@virfq.com
- General Email: contact@virfq.com
- Address: 55 Nguyễn Văn Giáp, Từ Liêm, Hà Nội, Vietnam