Row-Level Security (RLS)
Every organization is isolated by TenantId at both the database RLS layer and application query layer (fail-closed).
PRIVACY & DATA LIFECYCLE · VERSION 2026.10
Privacy Policy & Data Processing
Multi-tenant data isolation, zero training on customer data, and compliance with Vietnam PDPD & GDPR principles.
Protected IP & Context
Customer documents, records and conversations are never used to train public or third-party AI models.
Instant Off-Switch & Purge
External integrations run only when enabled by your Admin. Deletions take effect immediately on primary storage.
1. Scope & Data Processing Roles
This policy governs how Fizibox Corporation ("Data Processor") processes personal and enterprise data on behalf of the Customer ("Data Controller") across Fizibox Luna and Fizibox.OS, in compliance with Vietnam’s Personal Data Protection Decree 13/2023/ND-CP and GDPR principles.
Processed data is strictly limited to what is required to deliver the service: work email, display name, role/team scope, OTP sign-in logs, uploaded knowledge documents, work conversations, business records and verified field events.
2. Data Flow, Storage & Controls by Feature
| Feature | Data Processed | Infrastructure & Storage | Customer Control |
|---|---|---|---|
| Q&A & Two-Brain Review | Prompt + permitted knowledge passages | Fizibox AI Infrastructure (no training on customer data); stored per tenant (default 90 days) | Users delete sessions; Admin sets retention window |
| Knowledge Base & Doc Studio | Uploaded files & approved canonical docs | Encrypted storage on Fizibox Infrastructure; vector index isolated by tenant | Deleting a file purges its index immediately; revoke public links anytime |
| Physical Infra (Fizibox.OS) | RTSP/sensor streams processed locally at the edge | No continuous raw video upload; only verified events sync to Fizibox Cloud | Configure edge privacy mode or disconnect nodes in settings |
| External Channels (SMTP, Zalo) | Notifications, OTP codes, approved outbound messages | Routed via your organization’s own configured SMTP or official APIs | Disabled by default until enabled by your Admin |
| Operational Telemetry | Error codes, latency & tenant ID only — never business content | Fizibox operational monitoring infrastructure (retained up to 90 days) | Disable in admin settings or on dedicated deployments |
3. Technical Security & Identity Protection
• End-to-End Encryption: All data is encrypted in transit (TLS 1.2+) and at rest on Fizibox infrastructure. Encryption keys and system secrets are protected in Fizibox’s dedicated key vault and never stored in source code.
• Passwordless & Step-Up OTP: Members sign in via 10-minute work-email OTP codes with rate limiting and portal-isolated session cookies. Sensitive operations require step-up OTP re-authentication.
• Automated Isolation Testing: Every release runs automated tenant-isolation tests verifying zero cross-tenant data leakage. Enterprise customers may also request a dedicated data instance.
4. Retention, Data Export, Deletion & Breach Notification
• Self-Service Transparency & Deletion: Users can inspect, edit or delete personal memory entries at any time. Organization Admins can delete documents and conversations immediately on primary storage (and within 30 days on rolling backups).
• Contract Termination: Upon request, we export all organization data (original files + JSON conversations) within 15 days, permanently purge all copies within 30 days, and provide written confirmation.
• Incident Response & Data Protection Contact: Any personal-data breach is reported to the Customer within 72 hours of discovery along with impact scope and remediation steps. For data-subject requests or a signed DPA copy, contact privacy@fizibox.com or support@fizibox.com (response within 10 business days).