Privacy Policy

Information We Collect

When you sign up for Brain Sparkzone, we gather specific information to create your account and provide our financial categorization services. Here's what that looks like in practice.

Account Information

You'll provide basic details when registering: your name, email address, and a password you create. If you're accessing paid features, we'll also need billing information – though we don't store complete credit card numbers on our servers. Payment processing happens through secure third-party processors who meet international security standards.

Financial Data You Share

The core of our service involves analyzing your financial transactions to help with budget categorization. You might upload bank statements, connect financial accounts through secure APIs, or manually enter transaction data. We see transaction amounts, dates, merchant names, and categories you assign. But here's what we don't collect: we never ask for your banking passwords directly, and we don't access accounts without your explicit permission.

Usage Information

Like most web platforms, we automatically collect certain technical data. This includes your IP address, browser type, device information, and how you interact with our platform – which features you use most, how long you spend on different pages, and which categorization tools you find helpful. This helps us improve the platform and fix issues before they become problems.

How We Use Your Information

Everything we collect serves specific purposes. We're not in the business of hoarding data – we use what we need to make Brain Sparkzone work for you.

We process your financial data to generate spending reports, identify patterns in your expenses, and suggest budget categories. Sometimes we use anonymized, aggregated data to train our categorization algorithms – but this never includes personally identifiable information.

Data Protection and Security

Security isn't just a checkbox for us. Given that we're handling financial information, we've built multiple layers of protection into our systems.

Technical Safeguards

• Encryption: All data transmission uses TLS 1.3 encryption. Your financial data sits encrypted in our databases using AES-256 encryption standards.
• Access controls: Only authorized team members can access user data, and even then, access is limited to what they specifically need for their role. We maintain detailed logs of who accesses what and when.
• Infrastructure security: Our servers are hosted in certified data centers with physical security measures, redundant power systems, and regular security audits.
• Regular testing: We conduct quarterly security assessments and penetration testing to identify vulnerabilities before they can be exploited.

Your Rights and Control

This is your data. While we need certain information to provide our services, you maintain significant control over what happens with your personal information.

How to Exercise These Rights

Send requests to info@brain-sparkzone.com with "Privacy Request" in the subject line. We'll verify your identity – usually by confirming your email address – and respond within 15 business days. For complex requests, we might need the full 30 days that regulations allow.

Data Sharing and Third Parties

We don't sell your personal information. Period. But we do work with certain service providers to keep Brain Sparkzone running smoothly.

Service Providers We Work With

• Payment processors: Handle billing securely without us storing your full payment details
• Cloud hosting providers: Store our databases and application files with enterprise-grade security
• Email service providers: Send you account notifications and service updates
• Analytics tools: Help us understand how people use the platform (with anonymized data only)

Each of these partners signs agreements requiring them to protect your data and use it only for specified purposes. They can't repurpose your information for their own business needs.

When Law Requires Disclosure

Sometimes we're legally obligated to share information – for example, if we receive a valid court order or need to comply with Vietnamese financial regulations. We'll notify you about such requests unless we're legally prohibited from doing so.

Data Retention

We keep your data as long as your account remains active. After you delete your account, here's what happens:

• Most personal information gets deleted within 90 days
• Financial transaction records might be retained for up to 7 years to comply with Vietnamese accounting and tax regulations
• Anonymized usage data may be kept longer for analytics purposes, but it won't be linkable back to you
• Backup systems might retain data for up to 6 months before automated purging, though you won't be able to access it

If you stop using Brain Sparkzone but don't formally delete your account, we'll send reminder emails after 12 months of inactivity. After 24 months without login activity, we may archive your account and limit data processing to essential storage only.

International Data Transfers

Brain Sparkzone operates primarily within Vietnam, but some of our service providers maintain servers in other countries. When your data crosses borders, we ensure it receives equivalent protection through:

• Contractual agreements requiring international privacy standards
• Data processing agreements that specify security requirements
• Regular audits of third-party security practices
• Encryption during transfer and at rest, regardless of location

Changes to This Policy

Privacy practices evolve, and so might this policy. When we make changes, we'll update the "Last Updated" date at the top of this page. For significant changes that affect how we handle your data, we'll send email notifications at least 30 days before the changes take effect.

You can always find the current version of this policy on our website. We also maintain an archive of previous versions if you want to see what's changed over time.