1. Purpose of collecting information

Information MITABO collects:

To register to use the MITABO social network, Users may be required to provide some basic personal information such as: full name, email address, phone number, and other necessary information. Users are responsible for ensuring that the information provided is accurate, complete, and lawful. MITABO is not responsible for any legal issues arising from Users providing inaccurate or unlawful information.

In addition, MITABO may automatically collect certain information related to Users' access to and use of the platform, including but not limited to: number of visits, number of views, links accessed, and other interaction data. MITABO may also collect information from cookies and similar technologies provided by the User's browser, such as: IP address, browser type, language used, access time, and referring addresses, in order to optimize the experience and remember the User's settings for subsequent visits.

Purpose of collecting information:

• Assist Users in the process of registering, creating, and managing accounts on the MITABO social network;
• Provide Users with the latest information, content, and updates on the MITABO platform;
• Receive and respond to Users' requests and questions;
• Conduct surveys and analyze usage behavior to improve and enhance service quality;
• Ensure information safety, system security, and support transactions (if any) carried out on the platform;
• Implement communication and promotional activities related to MITABO's products and services in accordance with the law;
• Develop new functions, features, and services according to evolving trends and preferences, and improve the quality of the social network service.

2. Scope of information use

MITABO collects and processes Users' information on a basis consistent with the operational purposes of the MITABO social network, while ensuring compliance with the provisions of this Information Security Policy and relevant laws.

In certain necessary cases, MITABO may use Users' information in order to:

• Make direct contact to facilitate the provision of services;
• Send notifications about the activities of the MITABO social network;
• Communicate with and resolve matters for Users in necessary cases;
• Improve the quality of support services for social network service users;
• Provide technical support, ensure security and confidentiality, or resolve arising requests.

3. Information storage period

Contact may be carried out through various methods such as: phone, email, message, or notification on the platform.

The personal data of social network service users is stored by MITABO on appropriate servers and backup systems in accordance with the law.

MITABO stores Personal Data for the period necessary to fulfill the purposes agreed upon with Users or as required by law, and applies appropriate technical and organizational measures to protect Personal Data throughout the storage process.

A minimum of 02 (two) years for information about accounts, login and logout times, IP addresses of MITABO social network service users, and logs of processing posted information; deletion of the information of service users in Vietnam after the storage period expires in accordance with the law.

4. Access to information

Organizations and individuals entitled to access the information of MITABO social network service users include:

Certain internal departments of MITABO that access User data within the scope necessary to operate the system, including:

• Technical and system administration department;
• Content management department;
• Support and customer care department for social network service users;
• Information security and data protection department.

Access to data by these departments must ensure authorization according to job functions; comply with internal security regulations; and be recorded and controlled on the system.

In certain cases necessary for system operation, MITABO may use services from technical partners or service providers, including:

• Server infrastructure providers;
• Data storage service providers;
• System security solution providers.

MITABO's partners may only access data within the scope necessary to provide technical services and must comply with confidentiality terms and not use the data for any purpose other than providing services to MITABO.

Competent state authorities, upon lawful request: MITABO is responsible for cooperating in providing the personal information of MITABO social network service users when requested by a state authority. The provision of information is carried out within the correct scope, for the correct purpose, and in accordance with the order and procedures prescribed by law.

In addition, MITABO may process or share personal data without the consent of the personal data subject in the following cases as prescribed by the Law on Personal Data Protection 2025:

• In emergency situations to protect the life and health of social network service users or other persons;
• When Personal Data is required to be made public in accordance with the law;
• To serve the operations of a competent state authority in accordance with the law;
• In special cases concerning national defense, security, social order, disasters, epidemics, or counter-terrorism and crime prevention in accordance with the law;
• When necessary to perform obligations under a contract to which the social network service user is a party, including activities such as domain registration, dispute resolution, handling technical requests, etc.;
• To protect the legitimate rights, property, or prevent legal violations of MITABO, the social network service user, or a third party.

5. Address of the unit collecting and managing personal information

• Unit name: MITABO COMPANY LIMITED
• Tax code: 0402142413
• Head office address: No. 12, Hoi Kieng 11 Street, Group 64, Ngu Hanh Son Ward, Da Nang City, Vietnam
• Phone number: 0988.359.047

6. Means and tools for Users to access and edit personal data

Users may access, view, update, or modify the personal information they have provided to the MITABO social network at any time through the account management functions or corresponding links provided by MITABO on the platform. Users have the following rights:

• To be informed about personal data processing activities;
• To consent or not consent to, and to request the withdrawal of consent for, the processing of personal data;
• To view, edit, or request the editing of personal data;
• To request the provision, deletion, or restriction of personal data processing; to submit objections to personal data processing;
• To complain, denounce, file lawsuits, and request compensation for damages in accordance with the law;
• To request competent authorities or related organizations and individuals involved in personal data processing to implement measures and solutions to protect their personal data in accordance with the law.

When a social network service user wishes to access and edit their personal data, the User contacts the Customer Care Department of the MITABO social network - Phone number 0246.328.7866 / 0902.195.488. Upon receiving such feedback, we will confirm and respond within 48 hours from the time of receipt, explain the reasons, and guide the social network service user to restore and re-secure their information.

7. Deletion of Personal Data

When a social network service user ceases to use MITABO's products and services and submits a valid request to delete Personal Data, provided that such request is consistent with the provision process corresponding to each type of MITABO's products and services, we will delete the Personal Data that the social network service user has provided and/or that we have collected during the use of the products and services, except in the following cases:

• The law does not permit data deletion or mandatorily requires data storage;
• Personal data is processed by a competent state authority for the purpose of serving the operations of the state authority in accordance with the law;
• Personal data has been made public in accordance with the law;
• Personal data is processed to serve legal requirements, scientific research, or statistics in accordance with the law;
• In situations of national defense emergency, national security, social order and safety, major disasters, dangerous epidemics; when there is a threat to security and national defense that has not yet reached the level of declaring a state of emergency; prevention of riots, terrorism, crime, and legal violations;
• Responding to emergency situations threatening the life, health, or safety of the social network service user or other individuals.

8. Mechanism for receiving and resolving Users' complaints related to the misuse of personal information

MITABO social network service users have full rights related to their personal data in accordance with the law, including but not limited to the rights to: consent to or refuse the processing of personal data; withdraw previously given consent; access, view, edit, or request the editing of personal data; request a copy of the data; request the deletion, restriction of processing, or objection to the processing of personal data; as well as request competent authorities and organizations to apply measures to protect personal data as prescribed.

In the event that a User discovers that their personal data is being misused, used beyond the notified scope, or shows signs of being leaked or accessed without authorization, the User has the right to submit a complaint to MITABO for review and handling.

Users may contact the Customer Care Department of the MITABO social network through the following channels:

• Phone: 0246.328.7866 / 0902.195.488
• Or other official support channels announced by MITABO from time to time.

After receiving the request, MITABO will:

• Confirm receipt of the complaint;
• Conduct a review and verification of the reported content;
• Implement necessary measures to prevent and remedy (if a violation has occurred);
• Respond with the resolution results to the User within no more than 48 hours from the time of receipt (except for complex cases requiring additional verification time).

During the handling process, MITABO may request the User to provide additional necessary information and documents to verify identity and clarify the content of the complaint to ensure that the resolution is accurate and consistent with the law.

MITABO is committed to receiving and handling all complaints related to personal data seriously, transparently, and promptly, and to cooperating with competent authorities when necessary to protect the legitimate rights and interests of Users.

9. Responsibilities of MITABO social network service users

Due to the technical nature of the internet environment, no system can guarantee 100% absolute safety for transmitted data. Therefore, MITABO cannot commit to completely eliminating all risks related to unauthorized access to personal data. MITABO is not responsible for cases arising from the User's fault, including but not limited to voluntarily providing or sharing personal information to third parties or failing to implement necessary security measures. If a User does not agree with the above terms, the User should consider whether to provide personal information and/or use the service.

Users are responsible for providing accurate and timely information, proactively updating it when there are changes, securing their own account information, including username and password, and not sharing it with any other individual or organization. When using public or shared devices, Users should proactively log out of their accounts and close all sessions before leaving the device. MITABO provides a password change function and recommends that Users periodically update their passwords to enhance security. MITABO is not responsible in cases where Users are unable to access or where risks arise related to their account due to the disclosure of login information.

MITABO social network service users are obligated to respect privacy and must not infringe upon or use MITABO's services to commit acts that violate privacy, unlawfully collect personal data, send spam, distribute malware, or carry out cyberattacks. They are responsible for promptly cooperating with MITABO and competent state authorities in the event of an information security incident or upon lawful request for investigation and verification.

MITABO social network service users are responsible for updating and complying with this Policy throughout the use of the service.

10. Changes to the information security policy

This Policy applies to all services, websites, and applications of the MITABO social network. Where necessary, MITABO may provide additional detailed information for each specific service.

We may update, supplement, or amend this Information Security Policy to reflect changes in the law, state management requirements, or adjustments in service provision activities.

In the event that the Policy is changed in a way that affects the legitimate rights and interests of social network service users, MITABO will notify or simultaneously inform social network service users through one or more appropriate means, including but not limited to the MITABO social network application that the user has registered, or a public announcement on the website www.mitabo.digital.

The updated version of the Information Security Policy takes effect from the time it is publicly posted, as indicated in the "Last Updated" section at the top of the Website or another display with similar content, unless the changed content requires the explicit, separate consent of the social network service user as prescribed by law, in which case MITABO will collect consent through an appropriate form.

The continued use of MITABO's services by a social network service user after the time the Policy is updated is understood as the user having read, understood, and accepted the content of the latest privacy policy, for content that does not fall under cases requiring separate consent as prescribed by law.