Personal data protection policy

From customers

• Your phone number and an encrypted password, used to sign in.
• Your approximate location when you actively choose to search near you. That location is used for that search only and is not saved to your account.
• The reviews you write, linked to your account.
• Your IP address and browser details when you tap to make contact or submit a report, used to group duplicate actions together and to prevent abuse.

From therapists

• Photographs of both sides of the national ID card, used to check identity. This is sensitive personal data.
• We deliberately do not store the ID number or the name printed on the card in our database. An administrator reads them from the photograph while reviewing the profile.
• Public profile information: display name, gender, years of experience, service areas, prices, profile picture and gallery photos.
• Coordinates of the service area. On the public profile these coordinates are rounded to roughly 100 metres, and the full address is never shown.
• The version of the undertaking accepted, together with the time and IP address, kept as a record of consent.
• Wallet transaction history and promotion packages purchased.

• Running the platform: showing profiles, searching by location, and connecting customers with therapists.
• Checking identity documents and reviewing profile content before it is published.
• Preventing abuse: grouping duplicate contact events, detecting fake reviews, and handling reports.
• Producing visibility statistics for therapists and reconciling wallet balances.
• Meeting obligations at the request of a competent state authority.

We do not sell personal data. A therapist phone number is released to a customer only at the moment that customer actively taps to make contact, and it is never shown publicly on the profile page.

ID card photographs and certifications are never shown publicly. They are accessible only to administrators during profile review, through short-lived links.

We use infrastructure providers to store data and files. They process data on our instructions and may not use it for their own purposes.

Account data is kept for as long as the account is active. When you ask us to delete your account, we delete your personal data except for anything we are legally required to keep.

Visibility statistics are kept for at most six months and then deleted automatically. Wallet transaction history is kept longer for reconciliation and dispute resolution.

Under Decree 13/2023/ND-CP you have the following rights over your personal data:

• The right to know what data of yours is being processed and for what purpose.
• The right to access your data and to request a copy of it.
• The right to have inaccurate data corrected.
• The right to withdraw consent you have given.
• The right to request deletion of your data and your account.
• The right to object to processing or to request that it be restricted.
• The right to complain to a competent state authority.

To exercise any of these rights, please contact us. We respond within 72 hours of receiving a valid request.

Personal data enquiries: lienhe@masgo.vn

Passwords are hashed one way and cannot be recovered in their original form. Connections to the platform are encrypted. Identity documents are stored separately and are reachable only through time-limited links.

No system is completely secure. If an incident affects personal data, we notify the people affected and the competent authority as required.

The platform is not intended for anyone under 18. We do not knowingly collect data from children and will delete it as soon as we become aware of it.

We use a technical cookie to keep you signed in. It is not used for advertising and is not shared with third parties.

Your browser stores a few display preferences on your own device: the area you last chose, whether you have read the notice for therapists, whether you have seen the trial-phase notice, and whether the filter prompt has appeared during this session. This data is never sent to our servers, and you can remove it by clearing site data in your browser.

When this policy changes, the effective date at the top of the page is updated. Where a change materially affects your rights, we will tell you directly.