Data privacy

When you connect a Zalo Official Account to NEOO, we receive and store the content of messages between you and your customers: the text of each message, when it was sent, and the sender’s Zalo display name and user ID.

To be unambiguous: we store the message content itself, not just statistics about messages. If a customer writes “I’d like to order the brown three-seat leather sofa,” that sentence is stored in our system.

We also store what you enter yourself: your name, email and phone number, the same for the customers you manage, along with notes, deal values and callback times. And basic technical data from using the product: sign-in times, device type, IP address.

The entire value of NEOO is that you never re-type information that is already in a message. We read the conversation to extract, automatically: which product the customer is asking about, whether they have committed, at what price, and when they asked you to follow up.

That information flows into the customer record and into today’s list of things to do. That is the only purpose. We do not use your message content for anything else.

When you connect a Facebook Page to NEOO through the NeooAds app, we receive the messages people send to that Page through the Messenger Platform: text, attachments, timestamps, display name and Page-scoped ID. We use them to show the conversation, suggest replies with AI, and send your replies within the 24-hour window Meta allows. Your staff can always review a reply or take over the conversation.

When you connect an ad account, we read ad spend and performance data (the ads_read permission) to report cost per conversation and per order. This data is aggregated and contains no personal information about people who saw the ads.

Data received from Meta is used only to operate your own Pages and ad accounts, in line with the Meta Platform Terms. We do not sell it, pass it to data brokers or ad networks, or use it to build user profiles.

Meta processes messages and ad data under its own policies. You can remove access for NeooAds at any time in your Facebook settings.

We do not sell, rent, or trade your data with anyone.

We do not use message content for advertising, ours or anyone else’s.

NEOO staff do not read your messages. Processing is automated. The single exception: when you raise a support request and explicitly allow us to look at a specific conversation to find a fault. In that case we ask first, every time.

Message content is retained for as long as your account is active, or until you or your customer asks us to delete it. Customer records and the notes you write are kept for as long as your account is active.

When you close your account, we delete all of your data within 30 days. That window exists so you can change your mind or export your data. After 30 days it cannot be recovered.

• The people you invite into your workspace. You control that list and can revoke access at any time.
• The infrastructure providers that store our data and run our systems. They hold it encrypted and have no right to read the content.
• Zalo, because messages pass through their platform before they reach NEOO. Zalo’s handling of that data follows Zalo’s own policy, which we cannot change.
• Government authorities, where there is a lawful written request. In that case we notify you, unless the law forbids us from doing so.

Under Decree 13/2023/ND-CP on personal data protection, you have the following rights. To exercise any of them, email the address at the foot of this page; we respond within 72 hours.

• See all the data we hold about you, and export it as a file.
• Correct anything that is wrong.
• Withdraw your consent for us to read Zalo messages, at any time. This stops the automated part of the product but does not delete your account.
• Request deletion of your data, in part or in full.
• Request that we pause processing while an unresolved dispute is outstanding.
• Object to how we process your data, and receive an explanation.
• Complain to the competent authority if you believe we have acted wrongly.

You, or anyone who has messaged your Page, can ask us to delete their data at any time. The steps are on our data deletion instructions page.

• The Zalo Official Account API — the source of messages. Without this connection NEOO does not function.
• Server and database infrastructure providers, used to store data and run the system.
• Meta Messenger Platform and Marketing API (through the NeooAds app) — to receive messages from the Facebook Pages you connect and read your advertising data.
• AI model providers — they receive only the part of a conversation needed to draft a suggested reply.

We do not use third-party behavioural tracking on this website.

The data controller is HỘ KINH DOANH HỒ THỊ BẢO NGỌC, household business code 8464361579-001, registration number 28A8017742. Registered address: Số 621 đường Mai Thúc Loan, Phường Đồng Môn, Thành phố Hà Tĩnh, Tỉnh Hà Tĩnh, Việt Nam. Phone: +84 964 680 180.

For any question or request about personal data, write to: contact@neoo.vn

If we change this policy in a way that affects you, we will tell you by email before the change takes effect.