Our commitment to protecting personal data, IoT optical measurement data, grain inspection records, and processing information transparently under Decree 13/2023/ND-CP. Gạo Việt Holding (the "Platform", "we", or "us") is an AgTech computer-vision artificial intelligence and IoT rice grading inspection solution owned and operated by Viet Rice Holdings Joint Stock Company (Tax ID: 0319682798, Legal Representative: Phan Trong Hieu, Registered Date: August 19, 2026). We recognize the importance of protecting personal data and the business privacy of our customers, milling partners, and rice exporters. This Privacy Policy explains how we collect, use, store, process, and protect personal data and PIONE GrainScan IoT sensor measurement data, and describes your legal rights under Vietnam's Decree 13/2023/ND-CP on personal data protection. By accessing the website, submitting a contact form, or requesting a solution consultation and scanner trial from Gạo Việt Holding, you confirm that you have read, understood, and agreed to the processing described in this Policy. SECTION 01 General data protection principlesThe core principles guiding every data-processing and IoT measurement activity at Gạo Việt Holding. Every process involving personal and operational data at Gạo Việt Holding follows applicable privacy and enterprise information-security regulations: Lawfulness and transparencyPersonal and operational data is collected and processed only on a clear legal basis or with the customer's voluntary, informed consent when interacting with the website or activating scanning equipment. Purpose limitationData is used only for specific, lawful purposes disclosed in advance (such as consultation, technical proposals, grain sample inspection analysis, and certificate issuance) and is never used outside this defined scope. Data minimizationWe collect only the information necessary to communicate with you, evaluate milling facility needs, or operate digital grain quality inspection equipment. Confidentiality and integrityAppropriate technical safeguards and governance procedures are applied to protect personal and agricultural inspection data from loss, leakage, or unauthorized access. Enterprise agricultural inspection data isolation principle Gạo Việt Holding commits never to use proprietary purchasing volumes, rice blending recipes, trade pricing, or private sample images from partner mills for commercialization or public AI model training without written consent. SECTION 02 Types of data collectedInformation categories received when you interact with the website and IoT inspection hardware. We collect only data that is actually generated when you access the website and use Gạo Việt Holding inspection services: 1. Information you provide through forms- Name of the representative, mill owner, or person submitting an inquiry.
- Work email for technical documentation and solution proposals.
- Contact phone number, where provided.
- Company name, rice mill, agricultural cooperative, processing capacity (tons/day), and target export markets.
- Solution requirements (PIONE GrainScan M0 for milled rice, GrainScan P0 for paddy, weighbridge integration, or rice export traceability).
- Requests for Non-Disclosure Agreements (NDA) or proof-of-concept (PoC) sample testing.
2. Technical data generated while browsing- Public IP address of the connecting device.
- Basic browser, operating system, and display language information.
- Access logs recorded for cybersecurity monitoring and to detect or prevent DDoS attacks and automated spam.
3. IoT optical scanning and sensor data (PIONE GrainScan Data)- High-resolution optical images of grain samples placed on the anti-stick optical scanning tray.
- Detailed geometric dimensions of individual kernels (length, width, L/W ratio, surface area, chalkiness area).
- Percentage classification metrics: broken kernels, chalky kernels, yellow/damaged, red-streaked, peck/spotted grains, and foreign matter under TCVN / international export standards.
- Sensor moisture readings, batch identifiers (Batch ID), sampling timestamps, and weighbridge coordinates used to generate digital inspection certificates.
4. Data processed in a proof-of-concept environment- When parties conduct a PoC, customer rice samples delivered to our lab or scanned on-site at the mill are processed in an isolated sandbox under separate NDA terms.
SECTION 03 Purposes of data collection and processingThe lawful purposes for which collected information is used. We use collected information for the following specific purposes: Receiving and responding to consultation requestsContacting you to answer questions, analyze rice inspection digitization requirements, and share PIONE GrainScan technical specifications or customized deployment plans. Coordinating 1-on-1 scanner demos and grain testingArranging live sample evaluations (on-site at your rice mill or at Gạo Việt Holding R&D centers) with AgTech solution specialists. Issuing digital quality certificates and enabling traceabilityAutomatically extracting grain grading metrics, generating verifiable QR codes, and anchoring blockchain quality certificates for export trade and customs documentation. Protecting IoT infrastructure and preventing grading fraudMonitoring GrainScan connectivity telemetry and verifying sensor integrity to prevent unauthorized alterations to grading results. Improving website experienceRemembering interface preferences (dark or light mode) and monitoring overall traffic trends to optimize page performance. SECTION 04 Legal basis under Decree 13/2023/ND-CPThe legal grounds governing data processing activities. Personal data processing at Gạo Việt Holding is conducted under the legal grounds set out in Vietnam's Decree 13/2023/ND-CP on personal data protection: • Consent of the data subject: applies when you voluntarily submit contact forms, request GrainScan demos, or register for a PoC on the website. • Pre-contractual steps: processing contact details and mill specifications at your request in anticipation of entering into an equipment supply or PoC agreement. • Legitimate interests: maintaining cybersecurity, defending IoT hardware against attacks, and preserving system uptime. • Statutory legal obligations: complying with Vietnamese law regarding cybersecurity, technical logs, and agricultural traceability requirements. SECTION 05 Technical measures and IoT information securitySensor data protection safeguards benchmarked against recognized international security standards. Information security is central to the Gạo Việt Holding architecture. Our security governance practices draw on recognized standards including ISO/IEC 27001, OWASP Top 10, and zero-trust concepts: Data in transit encryptionAll traffic between user browsers, website servers, and PIONE GrainScan IoT devices to cloud endpoints is encrypted over HTTPS/TLS 1.3 and MQTT over TLS. Edge AI securityIntegrated edge processing units inside GrainScan hardware utilize secure enclaves to protect local vision inference models and prevent physical tampering. Internal access controls and weighbridge permissionsInspection records and contact data are restricted to authorized mill operators, QC inspectors, and authenticated system administrators. Form protection and automated-attack defensesThe website applies honeypots, rate limiting, and server-side payload validation to defend against injection attacks and automated spam. Statement on real-world information security Gạo Việt Holding applies commercially reasonable technical and organizational measures in line with technology-industry practices. We do not claim an absolute guarantee against every conceivable security risk on the open internet. SECTION 06 Data retention periodCriteria used to determine how long information is kept. Gạo Việt Holding retains personal data no longer than necessary for the purposes set out in this Policy: • Consultation and inquiry data: retained for the duration of discussions, problem scoping, and commercial evaluation. When you ask to end communication or remove your details, we delete the information from active operational systems. • Server logs: retained on standard operational schedules for cybersecurity monitoring and automatically rotated or overwritten in normal hosting maintenance. SECTION 07 Data sharing and traceability disclosureClear rules prohibiting commercialization of personal data and enabling authorized export traceability. Gạo Việt Holding and PIONE Group do not sell, rent, or commercialize customer contact information or inspection records to third parties for independent advertising. Information may be disclosed only in the following limited circumstances: 1. Export traceability and customs clearance: When exporting mills configure digital quality certificates to be shared with customs authorities, international certifiers, or overseas buyers through the PIONE BOS Chain traceability portal. 2. Infrastructure providers: Cloud and hosting partners necessary to deliver the website and IoT backend services, subject to contractual confidentiality commitments. 3. Competent authorities: Where legally required in writing by Vietnamese law-enforcement or regulatory authorities under statutory procedure. SECTION 08 Cookies and local storageHow browser storage is used to improve the browsing experience. Our website uses cookies and browser local storage in a limited manner: • Essential cookies: session-security and cross-site request forgery protection. • Interface preferences: local storage is used to remember your dark-mode or light-mode setting across visits. You can clear or block cookies in your browser settings at any time without losing access to core website content. SECTION 09 Data subject rightsYour statutory rights under Decree 13/2023/ND-CP. Under Vietnam's Decree 13/2023/ND-CP, you have comprehensive rights regarding your personal data, including: 1. Right to be informed and right to consent: understand processing purposes before providing data and give or decline consent freely. 2. Right of access and data provision: request review or a copy of the personal data you provided to us. 3. Right to correction: request correction or updates to changed contact information. 4. Right to deletion: request deletion when you no longer need Gạo Việt Holding consultation, unless otherwise required by law. 5. Right to withdraw consent: withdraw permission for processing at any time by notifying us. Personal-data request channel To exercise these rights, email info@pioneai.com or send a written request to Viet Rice Holdings Joint Stock Company's headquarters at 18 Phuoc Thien Street, Long Binh Ward, Ho Chi Minh City, Vietnam. The responsible team will receive and respond to the request as required. SECTION 10 Amendments and policy updatesHow changes to privacy rules are communicated. Viet Rice Holdings Joint Stock Company may periodically update this Privacy Policy to reflect changes in technology or newly enacted legal requirements. All amendments will be published on this page with an updated date. We encourage users to review the Policy periodically to stay informed about current privacy standards. |
