Privacy Policy

This English version is provided for convenience. If there is any inconsistency, the Vietnamese version prevails.

This Policy applies to the omeet.vn website, OMeet classes, the Workspace management Console, API and Sandbox, and OMeet support channels. OMeet is a product of OWS Vietnam Joint Stock Company (tax identification number 0106721234, address 14 Nguyen Canh Di Street, Dinh Cong Ward, Hanoi, Vietnam), referred to below as "OWS", "we", "us" or "our".

OWS is the personal data controller for data collected through the website and forms, data used for consultation, contracting and support, and system security data.

For data generated in an organization's Workspace and classes, whether the organization is a school, training center, business or integration partner, that organization is the personal data controller and OWS is the personal data processor. OWS processes that data under its contract and the Data Processing Agreement. If you have a question about class data, you should contact the organizing entity first; OWS will assist that entity.

This Policy is based on Personal Data Protection Law No. 91/2025/QH15 and Decree No. 356/2025/ND-CP.

OMeet does not require sensitive personal data, such as health, religious or biometric data or images of identity documents, for you to use a class. Please do not place this data in class content areas.

The sample class on the website does not require sign-in and does not enable the camera or microphone.

• Providing and operating classes, including connecting participants, transmitting audio and video, synchronizing whiteboards, creating breakout groups, and producing post-class reports.
• Managing accounts, Workspaces, permissions and sign-in.
• Providing consultations and quotations, entering into and performing contracts, and reviewing partner applications.
• Providing technical support and responding to your requests.
• Securing the system, preventing fraud and abuse, and investigating incidents.
• Monitoring service quality using aggregated technical data.
• Sending service notices, such as maintenance notices and policy updates.
• Complying with legal obligations.

We do not send marketing messages without your separate consent.

OWS does not buy or sell personal data and does not use class data for advertising.

We process personal data with your consent or in circumstances where consent is not required under Article 19 of the Personal Data Protection Law, such as when processing is necessary to perform a contract to which you are a party or to comply with a legal obligation.

Consent is given clearly and separately for each purpose, for example when you select an unticked consent box in a form. We retain evidence of consent, including the time, form and policy version.

• Only a teacher or administrator authorized by the organization can start a recording.
• When a class is being recorded, every participant can see a "Recording" indicator.
• The organizing entity controls the recording, and only authorized people can view it.
• A recording is stored for 30 days and then deleted automatically, unless the organization deletes it sooner or the contract provides otherwise.
• The organizing entity is responsible for giving notice and obtaining any consent required from participants before recording. If a learner is a child, consent from a parent or legal representative is required.

When the organizer enables Mega Live, images, audio, display names and content shared during the class are broadcast publicly on the platform selected by the organizer, such as Facebook, YouTube or TikTok. Data on those platforms is processed under each platform's policy.

Only an authorized teacher or administrator can start a live stream. While a stream is active, every participant can see a "Live" indicator.

The organizing entity is responsible for giving notice and obtaining consent from each person who appears in the stream. Where a student is a child, publishing the child's image or information must comply with Article 24 of the Personal Data Protection Law, including consent from a child who is at least seven years old and from the child's parent or legal representative.

Learners join OMeet classes through their school or training provider. Children's personal data is processed in accordance with Article 24 of the Personal Data Protection Law.

The organizing entity is responsible for giving notice and obtaining consent from a parent or legal representative and, where required by law, from a child who is at least seven years old.

A parent or legal representative may exercise the rights described under "Your rights" on the child's behalf, either through the organizing entity or by contacting us directly.

OMeet does not use children's data for advertising or marketing profiles.

• Other participants in the same class: your display name, image, audio and content when you choose to share them.
• The organizing entity and Workspace administrators: attendance reports and class recordings.
• The live-streaming platform and public viewers when the organizer enables Mega Live.
• The organization's systems, such as an LMS, application or learner portal, when the organization connects OMeet through the API.
• Subprocessors that provide infrastructure, transmission, email and support services under written agreements requiring equivalent data protection. See Subprocessors.
• Competent state authorities as required by law.

We share data only to the extent necessary for the purposes described above.

Data is stored at [confirmation required: primary hosting location].

[confirmation required: whether personal data is transferred outside Vietnam]

At the end of the applicable period, data is deleted or de-identified. Backups are deleted on a 30-day cycle.

• Encryption of data in transit (HTTPS/TLS); audio and video streams are encrypted in transit
• Role-based access control within each Workspace
• Restricted and logged personnel access to customer data
• Confidentiality undertakings for personnel with access to data
• Encryption of class recordings at rest
• Regular backups and recovery testing
• Regular security reviews and testing

If a personal data protection breach occurs, OWS notifies the personal data protection authority within the Ministry of Public Security within 72 hours after detecting it and notifies affected people as required by law. For class data, OWS notifies the organizing entity so that the parties can respond together.

• To be informed about the processing of your personal data.
• To consent or withhold consent and to withdraw consent.
• To access and correct your personal data or request its correction.
• To request provision or deletion of personal data, restrict its processing or object to processing.
• To request measures to protect your personal data.
• To lodge a complaint or denunciation, bring legal proceedings and claim compensation as provided by law.

To exercise a right, submit a Data Requests or email privacy@omeet.vn.

These periods reflect Article 5 of Decree No. 356/2025/ND-CP. The calculation method remains subject to legal confirmation before publication. We will explain when the period for third-party coordination applies.

We may need to verify your identity before acting on a request. Do not send an image of an identity document through the form. If verification is needed, we will explain a secure method.

For class data, under OWS's pending internal operational target, we forward the request to the organizing entity within 2 business days and assist that entity with its response. This forwarding target is not the statutory time limit applicable to a third party.

Withdrawing consent does not affect the lawfulness of earlier processing, but it may prevent us from continuing to provide some services.

The website and classes use cookies, localStorage and sessionStorage that are necessary for sign-in, security and remembering your choices. See the Cookie Policy for details.

We may update this Policy when the service or applicable requirements change. The version and effective date are always shown at the top of this page, and the version history appears at the end.

We will give notice of a material change affecting your rights or data by email or in the Console at least 15 days before it takes effect.

OWS Vietnam Joint Stock Company · 14 Nguyen Canh Di Street, Dinh Cong Ward, Hanoi, Vietnam

Privacy email: privacy@omeet.vn