Account and Transaction Data

• Account data — May include an individual's or organization's name, contact information, account/login information according to the service model, roles, and information required to manage the relationship with Vietnam Office.
• Customer data — May include Customer ID, customer type, organization details, contact person, address, and information required for transactions or invoicing.
• Order Data — May include Order ID, Product, Version, Platform, Quantity, Channel, order creation time, Order status, and related commercial information.
• Payment Data — May include payment method, Payment reference, amount, currency, timestamp, Payment status, and confirmation results from the payment provider.
• Full card data is not required to be retained where unnecessary — Where Card payments are handled by a payment provider, Vietnam Office uses only the information required for transaction processing and reconciliation under the applicable integration model.
• Invoice Data — May include buyer/organization name, tax identification number, address, invoice information, Order reference, amount, VAT, issue date/time, and Invoice status.
• Transaction-generated Entitlement Data — When an Order/Payment becomes eligible, the system may create or associate the applicable Product Entitlement, Version Entitlement, Platform Entitlement, License, and Quantity.
• Dealer/Project transaction data — For Dealer or Project transactions, the system may process Dealer ID, Project ID, Contract reference, Platform, Quantity, transaction value, and entitlement-allocation status.
• Purposes of processing — Data is used to receive and process Orders, confirm Payments, issue Invoices, grant entitlements, provide support, perform reconciliation and accounting, prevent fraud, and satisfy legal obligations.
• Linking transaction and licensing data — Vietnam Office may link Order/Payment information with License/Entitlement to establish entitlement origin and support Activation, Restore, Refund, or status verification.
• Retention — Order, Payment, and Invoice data may be retained for the period required for operations, accounting, tax, disputes, fraud prevention, and legal obligations.
• Sharing — Transaction data may be shared with banks, payment providers, electronic-invoice providers, service providers, or competent authorities where necessary and lawful.
• Data protection — Access to account and transaction data is limited according to function and role; related systems must apply appropriate protection measures.

Principle: process only the account/transaction data required to complete Order → Payment → Invoice → Entitlement → support and related operational/legal obligations.