Security & Vulnerability Disclosure Policy

Version: 1.0 · Effective date: June 2026

Our approach

We apply technical and organisational safeguards: encryption in transit, access controls, logging, monitoring and incident response.

Responsible disclosure

If you find a vulnerability, report it to us privately via the operator contact, without disclosing it publicly or using it to access others' data. We will review the report and fix the issue within a reasonable time.

What we ask you not to do

Do not run attacks that could disrupt the service or affect other users' data; do not extract or publish others' data.

Data incidents

On an incident affecting personal data, we notify the competent authorities and affected individuals within the statutory timeframe.

This document is part of the public platform rules. Where translations differ, the Vietnamese version prevails.