CortexMind

Overview

At CortexMind, we believe privacy is fundamental to trust. This policy explains how we collect, use, and protect your personal information when you interact with our private blockchain solutions and services.

We operate under Vietnam's cybersecurity and data protection laws, ensuring your information receives appropriate legal protection. Our commitment extends beyond compliance — we view privacy as essential to the blockchain technology relationships we build with our clients.

This policy applies to all CortexMind services, including our website, blockchain consulting, implementation services, and ongoing technical support.

Information We Collect

Information You Provide Directly

When you engage with CortexMind, we collect information you voluntarily provide:

Contact details including name, email address, phone number, and company information
Business requirements and technical specifications during consultation processes
Communication preferences and feedback about our services
Payment and billing information for our blockchain implementation services
Technical requirements and infrastructure details relevant to blockchain deployments

Automatically Collected Information

Our systems automatically gather certain technical information to improve service delivery:

Website usage patterns, including pages visited and time spent on our platform
Device information such as browser type, operating system, and IP address
Performance metrics from blockchain implementations we manage
Security logs and access patterns for system protection purposes

Blockchain-Specific Data Collection

For private blockchain implementations, we may collect network performance data, transaction volumes (not content), and system health metrics. This information helps us optimize your blockchain infrastructure and ensure reliable operation.

How We Use Your Data

We use your information for specific business purposes that directly benefit our working relationship:

Service Delivery and Support

Designing and implementing private blockchain solutions tailored to your requirements
Providing technical support and system maintenance for blockchain networks
Processing payments and managing billing for our services
Communicating project updates, system alerts, and important service information

Business Improvement and Development

Analyzing service performance to identify areas for improvement
Developing new blockchain features based on client needs and industry trends
Conducting security assessments to protect client blockchain networks
Creating anonymized case studies that demonstrate blockchain implementation success

We never use your personal information for unrelated marketing activities or share business-sensitive details without explicit consent.

Data Sharing and Third-Party Relationships

CortexMind maintains strict control over your information. We limit data sharing to specific scenarios that support our service delivery:

Essential Service Providers

We work with carefully selected partners who help us deliver blockchain solutions:

Cloud infrastructure providers for secure blockchain hosting environments
Security firms that assist with penetration testing and vulnerability assessments
Payment processors for handling billing and financial transactions
Technical consultants who provide specialized blockchain development expertise

Legal and Regulatory Requirements

We may disclose information when required by Vietnam law or to protect legitimate business interests:

Compliance with court orders, government investigations, or regulatory requests
Preventing fraud, security breaches, or other illegal activities
Protecting CortexMind's intellectual property and business operations
Responding to valid legal processes from Vietnamese or international authorities

Client Blockchain Data

Information stored on private blockchain networks remains under your control. CortexMind does not access, share, or analyze the content of transactions within your blockchain unless explicitly requested for technical support purposes.

Your Privacy Rights

As a CortexMind client, you have specific rights regarding your personal information. We've designed clear processes to help you exercise these rights effectively.

Access and Transparency Rights

Right to Access: Request copies of all personal information we hold about you
Right to Information: Understand how we process your data and who we share it with
Right to Portability: Receive your data in a structured, commonly used format

Control and Correction Rights

Right to Rectification: Correct inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal data when legally permissible
Right to Restriction: Limit how we process your information in specific circumstances
Right to Object: Opt out of certain types of data processing activities

Exercising Your Rights

To exercise any of these rights, contact our privacy team at support@cortex-mind.com. We respond to all requests within 30 days and provide status updates for complex requests that require additional time.

When submitting requests, please include your full name, email address, and specific details about the information you want to access or modify. This helps us process your request accurately and securely.

Request Type	Processing Time	Required Information
Data Access	7-14 business days	Name, email, account details
Data Correction	3-7 business days	Specific fields to update, corrected information
Data Deletion	14-30 business days	Account verification, reason for deletion
Processing Restriction	5-10 business days	Specific processing activities to restrict

Data Security Measures

Protecting your information is fundamental to our blockchain expertise. We implement multi-layered security measures that reflect industry best practices and our deep understanding of cryptographic protection.

Technical Security Controls

End-to-end encryption for all data transmission using AES-256 standards
Multi-factor authentication for all system access points
Regular security audits conducted by independent third-party firms
Automated threat detection and response systems monitoring our infrastructure
Blockchain-based audit logs that provide tamper-evident security records

Physical and Administrative Security

Restricted access data centers with biometric security controls
Employee background checks and regular security training programs
Incident response procedures tested quarterly through simulated security events
Data backup systems with geographic redundancy and encrypted storage

Our security approach extends to the private blockchain networks we implement for clients. We use the same rigorous standards to protect your blockchain infrastructure, ensuring your business data remains secure and accessible only to authorized personnel.

Blockchain-Enhanced Security

Where appropriate, we use blockchain technology to secure our own internal processes. This includes tamper-proof audit logs, cryptographic verification of data integrity, and decentralized backup systems that eliminate single points of failure.

Data Retention and Deletion

We retain your information only as long as necessary to provide services and meet legal obligations. Our retention periods balance business needs with privacy protection principles.

Standard Retention Periods

Data Category	Retention Period	Reason for Retention
Contact Information	3 years after last contact	Business relationship maintenance
Project Documentation	7 years after project completion	Technical support and legal compliance
Financial Records	10 years after transaction	Vietnam accounting and tax requirements
System Logs	2 years from creation	Security monitoring and troubleshooting
Marketing Communications	Until opt-out request	Ongoing business communication

Secure Deletion Procedures

When retention periods expire or you request data deletion, we follow strict procedures:

Cryptographic wiping of digital storage devices to prevent data recovery
Physical destruction of storage media containing sensitive information
Verification procedures to ensure complete data removal from backup systems
Documentation of deletion activities for compliance and audit purposes

Some information may be retained longer if required by law, pending legal proceedings, or necessary for legitimate business purposes such as fraud prevention or security investigations.

Vietnam Law Compliance

CortexMind operates in full compliance with Vietnam's cybersecurity and data protection regulations. Our practices align with the Cybersecurity Law, Decree 15/2020, and related government guidance on data protection.

Local Data Protection Requirements

Personal data localization requirements for sensitive information categories
Notification procedures for data breaches affecting Vietnamese residents
Consent requirements for processing personal information of Vietnam citizens
Cross-border data transfer restrictions and approval procedures
Regular compliance audits and reporting to relevant government authorities

Government Authority Cooperation

We maintain cooperative relationships with Vietnamese regulatory bodies and respond promptly to legitimate government requests for information. Our legal compliance team regularly reviews regulatory updates to ensure our practices remain current with evolving requirements.

For blockchain implementations serving government or critical infrastructure sectors, we follow additional security and data protection requirements as specified by relevant Vietnamese ministries and agencies.

International Client Considerations

While we're based in Vietnam, we work with international clients and understand global privacy requirements. We can implement additional privacy controls to meet GDPR, CCPA, or other international standards when required by your business needs.

Privacy Policy