1 Introduction
The RoiMaxx System is operated by SELLNITY CO., LTD ("Sellnity", "we"), providing online advertising infrastructure & account management solutions on Meta for business customers under a signed Service Contract. This policy implements Article 6 (Personal Data Protection & Information Security) of the Service Contract, in accordance with Vietnam's Civil Code No. 91/2015/QH13, Cybersecurity Law No. 24/2018/QH14, Decree No. 13/2023/ND-CP on personal data protection, and the Meta Platform Terms/Developer Policies.
This policy applies to data collected from the customer (Party A under the Service Contract) and personnel authorized by the customer to access and use the RoiMaxx System or connect a Meta advertising account.
2 Information we collect
Consistent with the scope defined in the Service Contract, data processed on the RoiMaxx System covers only the business customer (Party A) and its authorized personnel:
- Login account information: name, phone number, and email of the customer's staff/administrators, encrypted password, and assigned role (Admin/Accountant/Staff).
- Business information: company name, tax code, and bank account details for payment reconciliation when required.
- Transaction history & wallet balance changes: top-up/withdrawal history, activation deposits, and service-fee payments per Order.
- Spend reports & ad account status: spend figures, campaign performance, and account status (active/locked/restricted).
- Technical data: IP address, browser, device, and activity/audit logs for security and incident investigation.
3 Data collected from Meta Related to Meta API
When the customer authorizes RoiMaxx to manage Meta advertising accounts, we access only the limited Platform Data required through the Meta Graph API / Marketing API, including ad account name and ID, Business Manager information, balance, spend cap, amount spent, and aggregated campaign insights.
Platform Data is used only to operate the service described in the Contract: displaying balances, synchronizing account status, reconciling spend, alerting on locked/restricted accounts, and supporting budget reallocation. We do not sell, rent, or disclose Platform Data to third parties beyond what is necessary to operate the service.
Meta Platform Data is stored with role-based access controls and is accessible only to authorized personnel for technical support, appeals, or budget-transfer requests from the customer.
4 Purposes for using data
Collected data is used to:
- Provide, operate, and maintain the advertising-account management service, budget wallet, and related features under the Service Contract.
- Reconcile spend, process budget acceptance records, and handle remaining budget when an ad account is locked/restricted, per Article 1.4 of the Service Contract.
- Verify the identity of the actual user, prevent fraud, and protect financial transactions.
- Provide customer support, handle complaints, and respond to technical requests through the assigned Account Manager (AM).
- Issue VAT invoices, prepare acceptance records, and comply with legal, accounting, and tax obligations and lawful requests from competent authorities.
5 Sharing data with third parties
Sellnity never exploits, discloses, shares, or sells the customer's spend data, account information, or advertising strategy to any third party for commercial purposes — per the commitment in Article 6.3 of the Service Contract.
Data is shared only in these limited cases: with payment partners to complete wallet transactions; with Meta through API calls required under the customer's authorization; or when lawfully requested by a competent state authority following due legal process, or under Meta's platform policy.
Where information is provided under such a lawful request, Sellnity will notify the customer as soon as possible, unless prohibited by law from doing so.
6 Data storage and security
Sellnity applies appropriate cybersecurity measures to protect operational data, spend figures, and account information: encryption in transit (TLS/HTTPS), role-based internal access controls, and activity/audit logging for traceability. Passwords and sensitive authentication data are one-way encrypted and never stored as plain text.
The customer (Party A) is responsible for securing its own login credentials and for managing access permissions (Admin, Accountant, Staff...) on the RoiMaxx System for its personnel, as well as for all actions and transactions arising from accounts it has authorized.
Data is retained while the Service Contract remains in effect and for the period necessary to meet legal obligations after the Contract ends, per section 8 below.
7 Your rights over personal data
You have the following rights over your personal data:
- Access: request to view personal data stored by Sellnity on the RoiMaxx System.
- Correction: update inaccurate information in your account profile.
- Withdraw consent: revoke RoiMaxx access to your Meta account at any time.
- Deletion: request deletion of all or part of your personal data as described in section 8.
8 Data deletion at contract termination & deletion request process
Per Article 6.4 of the Service Contract, within 30 days of the two parties settling the Contract, Sellnity will close/delete the customer's access account on the RoiMaxx System, except data legally required to be retained for accounting and tax purposes.
You may also proactively request Sellnity to delete personal data and related Meta Platform Data at any time while the Contract is in effect. Please follow these steps:
- Email contact@sellnity.com with the subject "Personal data deletion request" and the email address or phone number used to register.
- Sellnity will acknowledge your request within 3 business days and verify your identity.
- After successful verification, eligible data is deleted from active systems within 30 days, except information that must be retained by law for accounting/tax purposes.
- Sellnity will send a confirmation email once deletion is completed.
10 Intended users
The RoiMaxx System is a B2B platform for business customers and their authorized personnel; it is not designed for users under 18 and does not knowingly collect children's personal data. If such a case is identified, related data will be deleted after verification.
11 Changes to this policy
This Privacy Policy may be updated to reflect changes to the Service Contract, our operations, legal requirements, or Meta policies. The latest version and update date will always be published on this page; material changes will be notified by email or on the RoiMaxx System.
Contact about privacy
For questions, complaints, or data-rights requests related to this Privacy Policy, please contact:
- Data protection email: contact@sellnity.com
- Hotline: 0986.648.684
- Office: Floor 2, 531 Tran Hung Dao Street, An Hai Ward, Da Nang City
