Privacy Policy

Last Updated: June 2026

GOSU Online Corporation ("GOSU", "we", "our", or "us") respects the privacy of our employees, contractors, and authorized users. This Privacy Policy explains how the Home ERP application ("Application") collects, uses, stores, and protects personal information.

By using the Application, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

The Application may collect the following information:

Account Information

• Employee ID
• Full name
• Email address
• Department
• Position
• Profile information

Device Information

• Device model
• Operating system version
• Application version
• Device identifier used for security and authentication purposes

Usage Information

• Login activity
• Attendance records
• Task management activities
• Internal service requests
• Application usage logs

Camera Data

The Application may access the device camera when required for:

• Employee attendance check-in/check-out
• Identity verification
• Profile photo updates
• Document uploads

2. How We Use Information

Collected information is used to:

• Authenticate users
• Manage attendance records
• Process internal requests
• Support task management functions
• Improve application performance
• Maintain security and prevent unauthorized access
• Comply with company policies and legal obligations

We do not use personal information for advertising purposes.

3. Data Storage and Security

All collected information is stored on systems operated by GOSU Corporation or authorized service providers.

We implement reasonable administrative, technical, and physical safeguards to protect information against unauthorized access, disclosure, alteration, or destruction.

Access to employee information is restricted to authorized personnel with legitimate business purposes.

4. Face Data Collection and Retention

Face Data Collected

When facial recognition or face verification features are enabled, the Application may collect:

• Facial photographs
• Facial biometric templates (face embeddings) generated from facial images

The Application does not collect or store 3D facial scans or government-issued biometric identifiers.

Purpose of Face Data Collection

Face data is collected solely for:

• Employee identity verification
• Attendance management
• Fraud prevention
• Secure access authentication

Face data is not used for:

• Advertising
• Marketing
• User profiling
• Third-party analytics

Face Data Storage

Face data is securely stored on servers operated and controlled by GOSU Corporation.

Access to face data is limited to authorized systems and personnel responsible for employee identity verification and attendance management.

Face Data Sharing

GOSU Corporation does not sell, rent, disclose, or share face data with any third parties.

Face data is only processed within GOSU's internal systems unless disclosure is required by applicable law.

Face Data Retention

Face data is retained only as long as necessary to support attendance and identity verification services.

Facial photographs and biometric templates will be permanently deleted:

• Within 30 days after employment termination;
• Within 30 days after account deactivation;
• Or earlier upon a valid request where permitted by law.

User Consent

Users are informed about face data collection before enrollment and provide consent before facial information is submitted to the Application.

5. Push Notifications

The Application may send notifications related to:

• Attendance reminders
• Task assignments
• Workflow approvals
• Company announcements
• System alerts

Users may manage notification preferences through their device settings where applicable.

6. Data Sharing

GOSU Corporation does not sell personal information.

Information may only be disclosed:

• To authorized service providers supporting system operations;
• To comply with legal obligations;
• To protect the rights, security, and property of GOSU Corporation.

7. User Rights

Users may request:

• Access to personal information;
• Correction of inaccurate information;
• Deletion of information where legally permissible.

Requests may be submitted through the Human Resources Department or IT Department.

8. Children's Privacy

The Application is intended solely for authorized employees, contractors, and business users.

The Application is not directed to children under the age of 13.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Any updates will be posted within the Application or on the applicable company website.

10. Contact Information

For questions regarding this Privacy Policy, please contact:

GOSU Online Corporation
Website: https://www.gosu.vn
Email: support@gosu.vn
Address: 108 Lò Đúc, Hai Bà Trưng District, Hanoi, Vietnam