Privacy Policy

1. Who we are and what this app does

NhàLo is an app for landlords and the managers they authorise. It helps manage rental properties, rooms, tenants, contracts and electricity and water meter readings, and it creates and sends monthly rent invoices with a bank transfer QR code.

Tenants do not install this app and have no account in it. Tenants only receive invoices one way, by Zalo or email.

2. Two roles to distinguish

The app handles two different sets of data, with different responsibilities:

• Your account data (landlord / manager). You register and enter it yourself. We are the controller of this data.
• Tenant data. Entered into the app by the landlord in the course of managing a rental. For this data the landlord is the controller and we act only as a processor on the landlord's instructions. Landlords are responsible for informing their tenants and obtaining their consent before entering their details into the app.

3. Data we collect

3.1. Account data (provided by you)

• Phone number — used to sign in and to receive one-time passcodes via Zalo. Required.
• Full name.
• Email address (if you provide one).
• National ID number (if you provide one).
• Profile photo (if you upload one).
• Password — stored hashed; we never see your plaintext password.

3.2. Operational data you enter

• Properties: name, address, description, photos, default utility prices.
• Payment details: bank account holder name, account number and bank, used to generate the VietQR payment code printed on invoices.
• Rooms: room number, area, rent, amenities, photos.
• Tenants: full name, phone number, date of birth, sex, email, national ID number (optional), notes.
• Contracts: term, rent, deposit, utility unit prices, service fees, billing cycle.
• Electricity and water meter readings per room and per period.
• Invoices: line items, totals, status, sent and collected timestamps.

The national ID number is optional. Enter it only where genuinely needed to manage the tenancy or draw up the rental contract, and only with the tenant's consent.

3.3. Technical data collected automatically

• Push notification device token issued by Firebase Cloud Messaging, used to deliver in-app notifications.
• Server technical logs: access timestamps, operation type, error codes, used to operate the service and troubleshoot problems.
• Language preference and the phone number you asked us to remember at sign in — stored on your own device only, never sent to our servers.

3.4. What we do NOT collect

We do not collect your location, contacts, browsing history, or the content of messages or calls on your device. We do not use your data for advertising, do not sell data to third parties, and do not build tracking profiles of users.

4. Device permissions

• Camera and Photo library — opened only when you actively take or pick a photo of a property, a room or your profile picture. The app never accesses them in the background.
• Notifications — to alert you about invoices due and in-app reminders. You can turn this off at any time in your device settings.

5. How we use the data

1. To create and protect your account and to verify sign-in by phone and OTP. 2. To store and display your property, room, tenant and contract records. 3. To calculate and produce invoices and generate payment QR codes. 4. To deliver invoices to tenants by Zalo or email at your instruction. 5. To send push notifications about activity in the app. 6. To keep the service secure, detect abnormal access and fix defects.

Messages go to tenants only when you press send — the app never contacts your tenants on its own.

6. Sharing with third parties

We share data only to the minimum extent necessary, with the following service providers:

• Amazon Web Services (AWS) — all account and operational data, to run our servers, host the database and store photos.
• Zalo (VNG) — recipient phone number, one-time passcodes and invoice or notification details, to deliver messages via Zalo.
• Email delivery provider — recipient email address and email content, to send invoices and data copies by email.
• Google Firebase — the device's push notification token, to send push notifications.
• Apple, Google — receive no personal data from the app; they only distribute and update it.

We may also disclose data when lawfully required by a competent authority, or where necessary to protect our legal rights and those of our users.

We do not sell, trade or rent personal data.

7. Where data is stored

Data is stored on Amazon Web Services cloud infrastructure in the Seoul, South Korea region. Zalo delivery is operated by a provider based in Vietnam. Transfers of data outside Vietnam are carried out in accordance with Personal Data Protection Law No. 91/2025/QH15 and Decree 356/2025/ND-CP, together with the safeguards described in the Security section.

8. Retention

• Account and operational data are kept for as long as you use your account.
• When you delete your account, the account and its data are permanently deleted: they cannot be restored and you cannot sign in again with that account.
• Records we are legally required to keep (for example, documents relating to tax obligations) are kept separately for the statutory period and then deleted.
• Backups are rotated and purged within 90 days at most.
• Technical logs are kept for at most 12 months.

9. Security

• All connections between the app and our servers are encrypted with HTTPS/TLS.
• Passwords are one-way hashed and never stored in readable form.
• Our servers check permissions on every request: an account can read and write only the data of properties it has been granted access to.
• Your sign-in session is kept in the phone's secure storage.
• Invoices sent to tenants are viewed through a random lookup code that cannot be guessed and contains no sign-in information.

No system is perfectly secure. If a personal data breach occurs, we will notify affected users and the competent authorities as required by law.

10. Your rights

Under Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and its implementing Decree 356/2025/ND-CP you have the right to:

• Know what data about you is being processed.
• Access and obtain a copy of your data.
• Correct inaccurate or outdated data — most of it directly in the app.
• Delete your data and your account (see section 11).
• Withdraw consent you previously gave.
• Restrict or object to processing.
• Lodge a complaint with the competent data protection authority.

Send requests to biztownofficial@townsoftvina.com. We acknowledge within 72 hours and complete the request within 30 days.

If you are a tenant and wish to see, correct or delete your information, please contact your landlord, who entered and controls that data. You may also write to us and we will forward your request to the relevant landlord.

11. Account deletion

You can delete your account directly in the app: go to Profile & Settings → Delete account and enter your password to confirm. Before deleting, you can email yourself a copy of your data.

Deletion is permanent: the account and all of its data are erased, you cannot sign in again with this account, and we cannot restore the data. To use the app again you need to register a new account.

Deleting a landlord account also deletes the properties, rooms, tenants, contracts, meter readings and invoices that belong to it. Properties you only manage for someone else stay unchanged; only your access is removed.

If you cannot open the app, follow the instructions at https://biztown.vn/nhalo/delete-account, or email biztownofficial@townsoftvina.com from your registered address (or include the account's phone number) with the subject "Account deletion request". We verify your identity and permanently delete the account within 30 days.

12. Children

The app is intended for people aged 16 and over. We do not knowingly collect children's data. If we learn that we have, we delete it promptly.

13. Changes to this policy

When this policy changes we update this page and revise the effective date at the top. For material changes we will also notify you inside the app before the change takes effect.

14. Contact

Townsoft Vina Co.Ltd Address: 6th Floor, No. 6, Lane 7, Le Duc Tho, Tu Liem Ward, Hanoi City, Vietnam Email: biztownofficial@townsoftvina.com Phone: +84 382366608