Privacy Policy

1Who we are

Pasapot is a company established in Ho Chi Minh City, Vietnam (“Pasapot”, “we”, “us”). We decide how and why your personal data is processed, which makes us the controller of that data under the laws of Vietnam, including the Law on Personal Data Protection.

This policy covers the Pasapot app, the website pasapot.com, the partner portals at artist.pasapot.com and spot.pasapot.com, our forms and emails, and your messages to us. It does not cover services run by others, such as your sign-in provider or payment provider, which have their own policies.

For anything about your data, write to [email protected].

2What we collect

When you visit our websites

When you open a page on pasapot.com, we count the visit without cookies. We keep the type of page (for example, the artists page), the name of the website that sent you, and a daily visitor code. The code is calculated with a secret key from your connection address, your browser type and the date, so the same visitor gets a different code every day and cannot be followed from one day to the next. We do not store your IP address, your full browser details or a device ID. If your browser sends Do Not Track or Global Privacy Control, we do not count the visit at all.

The partner portals, artist.pasapot.com and spot.pasapot.com, only show information for now. They do not collect personal data.

Our hosting and network providers process your IP address to deliver pages and protect the websites from attacks, as described in section 6.

When you fill in a form

• Waitlist: your email, the language of the page and which form you used.
• Artist application: your name, email, city, medium, portfolio links, what you would like to make, spots you would like to draw, your note, whether you can visit spots in Ho Chi Minh City, and the page language.
• Spot application: the spot’s name, type and address or map link, your name and role, email, phone or Zalo, social links, what makes the spot special, the artist who invited you, what you are interested in, and the page language.

To stop spam, we also keep short-lived codes made from your connection and email with a secret key. We do not store your IP address with your form.

When you use the app

The app is launching soon. This policy already describes what it will collect, so you can read it before you sign up.

• Account: from your sign-in provider, your account ID with that provider, your name and email, and your profile photo if the provider shares it. Then the display name, handle and picture you choose, and your language.
• Check-ins: your precise location at the moment you check in, to confirm you are inside the spot’s area; the live photo you take; the spot and the time. We also collect basic device signals, such as the device model, the app and system version, and whether the location looks simulated, to stop cheating. We do not use face recognition on your photos.
• Nearby reminders, if you turn them on: your location while the app is in the background, only to tell you when you are near a spot.
• Your passport: your stamps, arts, collections, perks used, the artists you follow, the notes and memories you add, and the pages you share.
• Tips and purchases: the amount, what it was for, who received it, the status and time, the type of payment method and the transaction reference, plus a delivery address when you order a print. Your card or bank details are handled by the payment provider, not stored by us.
• Messages: the note you add to a tip, and what you send us.
• Notifications and diagnostics: a push notification token, and crash and performance reports with the app version, device type and error details.

If you are an artist or a spot partner

Your profile and portfolio, your contact details, the stamps and arts you make or offer, and your use of the partner dashboard. For payouts, the name and bank account you give us, and the tax details the law requires. For spots, when staff confirm a perk on the staff screen, we record the confirmation and the time.

3Location and other sensitive data

Under the laws of Vietnam, location data is sensitive personal data. We only collect your precise location after you allow it, both in your phone’s settings and in the app, and we explain what it is for before we ask. You can withdraw permission at any time; check-ins will then stop working until you allow it again.

We do not collect biometric data, and we do not ask for information about your health, religion, political views or similar matters. Please do not include them in notes or photos you share.

4Why we use your data

We do not use your personal data for automated decisions that have legal or similarly significant effects on you. If we remove a check-in for suspected cheating, a person on our team reviews it, and you can ask us to look again.

5What others can see

• Other people on Pasapot see your display name, handle and picture, and the passport pages and memories you choose to share. Your passport is private by default.
• Spots see totals about their visits, such as the number of verified visits, how many guests came back, perks used and the mix of visitors by country or language. They do not see your name or photos unless you choose to share them. When you use a perk, staff see the live perk screen you show them.
• Artists see how often their stamps are pressed and their arts collected, and who follows them. When you tip, the artist sees the amount and your note, and your name only if you choose to show it.
• Brands and partners that sponsor a collection get campaign totals, such as verified visits, completions and shares. Never your personal data.

6Who we share it with

We do not sell your personal data, and we do not share it with others for their own advertising. We share it only with:

These providers may only use your data to do their work for us, under contracts that require them to protect it. We also share data when the law requires it, for example with competent authorities in Vietnam, and if Pasapot is part of a merger or acquisition, in which case we will tell you first.

7Where your data is stored

Our main servers are in Singapore, and some providers process data in other countries. When we transfer the personal data of people in Vietnam abroad, we do it as the laws of Vietnam require, including a transfer impact assessment and contracts that protect the data.

8How long we keep it

We may keep data longer when the law requires it, or to deal with a dispute or a security incident, and only for as long as needed.

9How we protect it

All connections are encrypted. Access to personal data is limited to the few people and systems that need it, and our databases cannot be read directly from the websites. We use codes made with secret keys instead of raw identifiers where we can, for example for spam protection and visit counts. If a data breach happens, we will notify the authorities within the time the law requires, and tell you when it could affect you.

10Your rights

Under the laws of Vietnam you have the right to:

• know how your data is processed, and give or withdraw your consent;
• see your data and get a copy of it;
• have it corrected, and have it deleted;
• restrict or object to its processing;
• complain, and seek compensation for damage as the law provides.

You can do most of this in the app settings. You can also write to [email protected] from the email linked to your account. We may need to confirm it is you, and we will reply within the time the law requires. Withdrawing consent does not affect what was done before, but some features, such as check-ins, need it to work.

If you live in another country or region with privacy laws, such as the European Union, the United Kingdom, Korea, Japan or Thailand, you may have similar rights. Write to us and we will help.

11Your choices in the app

• Location: allow it while using the app to check in. Background location is only for nearby reminders and is off unless you turn it on.
• Camera: used for the live photo at check-in. The app does not need access to your photo library.
• Notifications: turn them on or off in the app or in your phone’s settings.
• Sharing: choose what to share, and stop sharing a page at any time.
• Emails: every news email has an unsubscribe link.

12Children

Pasapot is not meant for children under 16 without a parent or guardian. We only process a child’s data with the consent of a parent or guardian, and also the child’s own consent where the law requires it. If you believe a child is using Pasapot without that consent, write to [email protected] and we will delete the account and its data.

13Cookies and storage in your browser

Our websites do not use advertising cookies or tracking cookies. They save a few small settings in your browser’s storage, which stay on your device and are not sent to us:

• your language choice (pasapot.lang);
• whether you turned sound on (pasapot-sound);
• on our error pages, how many times the page has retried, for that tab only.

You can clear them at any time in your browser settings. The app keeps your sign-in session and settings on your device in the same way.

14Changes to this policy

We will update this policy when the Service or the law changes, and change the date at the top of the page. For important changes, we will tell you in the app or by email before they take effect, and ask for your consent again where the law requires it.

15Contact and complaints

Write to [email protected] with any question or request about your data. Pasapot is a company established in Ho Chi Minh City, Vietnam.

If you are not happy with our answer, you can complain to the authority responsible for personal data protection in Vietnam, the Department of Cybersecurity and High-Tech Crime Prevention (A05) of the Ministry of Public Security, or to the data protection authority where you live.