Privacy Policy

Last updated: September 15, 2026

Zeforc Platform ("Zeforc", "we", "us", or "our") provides digital products, software infrastructure, and identity services within the Zeforc ecosystem, including Zeforc Apps (Sổ Lịch, Sổ Thu Chi, DeboxHub), Zeforc Key, Zeforc Launchpad, and Zeforc ID (collectively, the "Services").

This Privacy Policy explains how Zeforc collects, uses, stores, protects, and shares personal information when you interact with our website (zeforc.com) and our centralized authentication service, Zeforc ID.

Zeforc ID is the centralized identity and account service used to authenticate users and provide access across supported Zeforc applications.

1. Introduction

We prioritize data minimization, transparent practices, and account security. This Privacy Policy outlines our obligations to you and how we safeguard your personal information across our services.

2. Information We Collect

Depending on how you interact with Zeforc services, we collect information in the following categories:

  • Account information: when you create a Zeforc account, we collect basic profile details such as your name, email address, profile avatar, and internal account identifier.
  • Authentication information: authentication provider identifiers, login timestamps, active session tokens, and security-related account metadata (such as multi-factor authentication enrollment status).
  • Contact form submissions: when you submit an inquiry through our contact form, we collect your name, email address, and message content to respond to your request.
  • Technical & log information: for service reliability and security, our servers automatically log standard network information such as IP address, browser type, device information, operating system, authentication event logs, and error diagnostics.

We do not use tracking pixels, behavioral profiling, third-party analytics trackers, or third-party advertising cookies on our website or within Zeforc ID.

3. Sign in with Google

Zeforc ID supports Sign in with Google as an optional authentication method to create or access your Zeforc account.

Google user data we access: When you choose Sign in with Google, Google requests your authorization to provide Zeforc ID with basic account information, including your full name, verified email address, profile picture, and a unique Google Account identifier. Zeforc ID requests only the minimum necessary Google OAuth scopes: openid, https://www.googleapis.com/auth/userinfo.email, and https://www.googleapis.com/auth/userinfo.profile. Zeforc ID does not receive or store your Google Account password.

How we use Google user data: We use Google user data only to: (1) create or identify your Zeforc ID account, (2) authenticate you securely, (3) link your Google Account as a sign-in method, (4) maintain account security and prevent unauthorized access, and (5) provide access to supported Zeforc applications.

How Google user data is stored and shared: Google user data required to maintain your Zeforc ID account may be stored as part of your account record for as long as necessary to provide authentication and account functionality. Zeforc does not sell, rent, trade, or use Google user data for targeted advertising, advertising profiling, credit evaluation, or data brokerage. Google user data may only be shared with service providers acting on behalf of Zeforc where necessary to operate and secure Zeforc ID, or where disclosure is required by applicable law. These service providers are bound by confidentiality and are not permitted to use Google user data for their own independent purposes.

How Google user data is protected: Google user data is protected using appropriate technical and organizational safeguards, including encrypted network communications (HTTPS/TLS), authentication and access controls, restricted access to personal information, and continuous security monitoring. Access to Google user data is strictly limited to systems and personnel that require it to operate, maintain, or secure Zeforc ID.

Google user data retention and deletion: Google user data associated with a Zeforc ID is retained only for as long as necessary to provide authentication and account functionality. When your Zeforc ID is deleted, the associated Google Account mapping and related personal information are permanently deleted or irreversibly anonymized in accordance with our data deletion procedures, except where limited retention is required by law or legitimate security obligations.

Zeforc ID's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Information

We use the information collected strictly for legitimate operational, security, and contractual purposes:

  • To provide, maintain, and operate Zeforc ID and connected Zeforc services
  • To authenticate users and verify authorization to access applications
  • To secure user accounts and protect against unauthorized access, fraud, and abuse
  • To process and resolve user support inquiries
  • To maintain session preferences, such as language selection and display themes
  • To comply with applicable legal obligations and regulatory standards

5. How We Share Information

Zeforc does not sell personal information or Google user data. We only share information in the following limited circumstances:

  • Infrastructure service providers: with hosting, database, and cloud infrastructure vendors acting on our behalf under strict confidentiality and data-protection terms, solely as necessary to host and operate our services.
  • Legal compliance: when required by law, subpoena, valid court order, or applicable governmental authority.
  • Safety and rights protection: when necessary to investigate, detect, or prevent fraud, security breaches, technical issues, or violations of our terms of service.

6. Data Storage and Security

Zeforc implements appropriate technical and organizational measures designed to protect your personal information against unauthorized access, loss, destruction, alteration, or disclosure.

These security controls include:

• Encrypted network communications in transit using HTTPS/TLS • Encryption and access controls applied to stored personal information and credentials where applicable • Principle of least privilege and strict access controls for internal systems • Continuous security logging and anomaly detection

While we employ industry-standard safeguards to secure your data, no transmission over the Internet or digital storage system is 100% impenetrable.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, provide our services, maintain security, comply with applicable legal requirements, resolve disputes, and enforce agreements.

Account data associated with your Zeforc ID, including Google user data, is retained only for as long as your account remains active and necessary to provide authentication and account functionality. If you delete your account, your personal information and Google Account mapping are permanently deleted or irreversibly anonymized in accordance with our deletion procedures, except where limited retention is mandated by applicable law or security auditing obligations.

8. Account and Data Deletion

You have the right to request the deletion of your Zeforc ID account and all associated personal data at any time.

You can initiate account and data deletion through either of the following methods:

  • Self-Service via Account Center: sign in to the Zeforc Account Center at https://account.zeforc.app and navigate to Security & Account Settings to permanently delete your account.
  • Direct Email Request: contact our data protection team directly by sending an email to account@zeforc.com from the email address registered with your Zeforc account.

Upon receipt of a valid deletion request, Zeforc will permanently delete or anonymize your personal data from our active databases within 30 days, unless a longer retention period is required by applicable law.

9. Third-Party Services

Our services integrate with third-party authentication providers (such as Google and Apple). When you choose to authenticate via these providers, your relationship with each provider is governed by their respective privacy policies and terms of service.

We encourage you to review Google's Privacy Policy (https://policies.google.com/privacy) and security settings to understand how Google manages your account data.

10. Children's Privacy

Zeforc services, including Zeforc ID, are not intended for children where processing their personal information would require parental or guardian consent under applicable law. We do not knowingly collect personal information from children.

If Zeforc becomes aware that personal information has been collected in a manner inconsistent with applicable legal requirements, appropriate steps will be taken to address the issue and delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect enhancements in our services, updates to Zeforc ID, or changes in applicable legal frameworks.

When changes occur, we will update the "Last updated" date at the top of this page. For significant modifications, we will provide additional notice through our website or via email notification.

12. Contact Us

If you have questions, feedback, or requests regarding this Privacy Policy, your personal information, or the Zeforc ID service, please reach out to us:

• General Inquiries: hello@zeforc.com • Account & Data Privacy Inquiries: account@zeforc.com • Contact Page: https://zeforc.com/contact