XomSom Privacy Policy

1. Data we process

• Account: when you sign in to post, we receive your account identifier and sign-in email so we know which posts are yours. They are never shown to viewers.
• Post content: kind, industry, title, description, price, image / video links, contact details (phone, Zalo, link), the address and the map pin if you add one.
• Post statistics: views (the card was shown) and opens (a viewer opened the details), as totals only — not tied to any particular viewer.
• Place names you enter are added to a shared place list used to suggest places to later posters.
• Technical logs (IP address, request time) are processed briefly by the infrastructure to prevent abuse and enforce rate limits.

2. What is public

Everything in a post (including contact details, address and map pin) is public to anyone viewing while the post runs, and can be found through the search box. View / open counts are visible only to the post owner.

3. Data on your device

• The list of posts you have seen is kept in your own browser until those posts expire, so old posts are not shown again. This list is not sent to our servers.
• Your chosen place, filters and display level are kept in your browser, and light / dark mode and language in cookies, so the app reopens the same way. Search keywords are not stored.
• Your sign-in session is kept in your browser so you do not have to sign in every time.
• Clearing site data in your browser removes all of the above.

4. Third parties

• Images you upload from your device are stored by the ImgBB service under a public link; images added by URL load directly from their source. Videos are links only (e.g. YouTube) embedded from their source.
• The service runs on Cloudflare infrastructure (servers and database). Sign-in uses our own account system.
• The "Map" button opens Google Maps at the post's address or pin; Google then processes data under its own policy.
• We do not use third-party advertising or tracking tools on the site.

5. Retention and deletion

• A post runs for 24 hours; once expired it is kept 7 more days (visible only to its owner, for renewal) and then deleted from the database by a daily automatic job.
• You can hide or delete your posts at any time in "My posts"; deleting is immediate and cannot be undone.
• Images uploaded to ImgBB may remain reachable by their link after the post is deleted.

6. Your rights

You can view, edit, hide and delete your posts right in the app. Under Vietnamese personal-data protection law you also have the right to be informed, to access, correct, delete, restrict and object to the processing of your data — including when someone else's post contains your information. Send requests to kimthiendung@gmail.com; we respond within the period the law sets.

7. Security and children

• Data is always encrypted in transit (HTTPS); account identifiers never appear in public posts.
• People under 18 may post only with a parent's / guardian's consent. If we learn a child's data was posted improperly, we remove it.

8. Changes to this policy

When this policy changes, the new version is published on this page with its effective date at the top.

9. Contact

XomSom is run by GOLDEN KEY IT SOLUTIONS JOINT STOCK COMPANY · Tax code pending registration · 670 Đoàn Văn Bơ, Khu phố 16, Phường Xóm Chiếu, TP. HCM · Email: kimthiendung@gmail.com.