Personal data protection policy

My Tasco Car · Version 1 · Effective 18 October 2026

1. Data processor and contact

This Policy describes how Tasco Joint Stock Company (“Tasco” or the “Operator”) collects, uses, stores, shares and protects the personal data of users (“you”) when you use the My Tasco Car app and the connected-vehicle and vehicle rental services. Tasco is the personal data controller for the data described in this Policy, as defined by personal data protection law. This Policy takes effect on 18 October 2026.

Operator: Tasco Joint Stock Company;
Address: Floors 1 and 20, Tasco Building, Lot HH2-2, Pham Hung Road, Tu Liem Ward, Hanoi, Vietnam;
Tax code: 0600264117;
Hotline: 024 6668 6863;
Support email: info@tasco.com.vn;
Personal data protection contact: the Tasco personal data protection team, reachable through the support email above.

2. Legal basis

This Policy is prepared and applied in accordance with the following documents:

the Law on Personal Data Protection No. 91/2025/QH15, adopted by the National Assembly on 26/06/2025 and effective from 01/01/2026;
Decree No. 356/2025/NĐ-CP of 31/12/2025 of the Government detailing a number of articles and measures for implementing the Law on Personal Data Protection, effective from 01/01/2026 and replacing Decree No. 13/2023/NĐ-CP;
the Law on Cybersecurity No. 116/2025/QH15, effective from 01/07/2026;
the Law on Electronic Transactions No. 20/2023/QH15;
the Law on Consumer Protection No. 19/2023/QH15;
the Civil Code No. 91/2015/QH13 and other relevant legal documents.

Where these documents are amended, supplemented or replaced, Tasco applies the new provisions and updates this Policy where needed.

3. Data collected

Depending on the features you use, Tasco collects the following groups of data:

Profile: phone number, full name, email address (if provided), profile photo (if set) and the credentials used to sign in;
Vehicle and digital key: vehicle identification number (VIN), plate number, model, your role for the Vehicle, the member list and Temporary keys, and the public key of the Digital key;
Location and trips: Vehicle location and trip history (route, time, distance, consumption) sent by the Vehicle; your phone’s location when you allow it in the operating system, used for the map, finding charging stations, sending a destination and reporting an incident;
Vehicle status: battery level, range, lock and door status, charging status, cabin temperature, tyre pressure, alerts and software update status;
Command and audit logs: Commands, sender, time, result, IP address, and the version of the terms accepted;
Device and session: device identifier, device name, operating system, App version, language, last active time, and sign-in sessions;
Push notifications: the notification identifier issued by the operating system, the notification content and its read status;
Voice data: processed on your phone; only text and metrics are sent, and only when you choose to share for research (section “Voice data and research sharing”); Tasco does not record audio;
Rental: bookings, rental period, rented vehicle, price, deposit, payments and refunds, the handover record with vehicle photos, and incident reports you submit;
Content you create: personal preferences and the profile photo you upload.

Identity verification data for vehicle rental is described in the next section because of its sensitive nature.

4. Identity verification data for vehicle rental

When you choose to use the Rental service, Tasco collects a verification file consisting of: photos of the front and back of your identity document, a photo of your driving licence, a portrait photo, full name, date of birth, document number, licence class, issue date and expiry date. This is personal data that needs a high level of protection; Tasco collects it only with your consent and as needed to verify your eligibility to rent.

The protection measures applied to the verification file:

document photos are kept in a private, non-public store and encrypted at application level with AES-256-GCM;
document numbers are encrypted in the database, and the interface shows only partly masked numbers;
photos are re-processed to remove the metadata embedded in the image file (EXIF) before they are stored;
only authorised staff can view the file, and every view is recorded in the audit log;
the portrait photo is checked manually against the documents by authorised staff; the file is not used for advertising and is not sold.

Purposes: verifying eligibility to rent, preparing and performing the rental contract, preventing fraud and resolving disputes, and meeting legal obligations. Retention periods are in the section “Retention periods”. You may ask for the file to be deleted under the section “Rights of the data subject”.

5. Purposes and legal grounds

Tasco processes personal data for the following purposes:

providing the service: authentication, showing Vehicle status, sending Commands, managing digital keys and key sharing, recording trips, and performing the Rental service;
safety and security: command auditing, detecting and preventing unauthorised access, abuse and fraud;
sending notifications about the Vehicle, alerts and operational information;
customer support and handling complaints;
research and improving voice command understanding: only if you agree;
complying with legal obligations and requests from competent state authorities.

The legal grounds include your consent, performance of contracts and service agreements to which you are a party, Tasco’s legal obligations, and other grounds under the Law on Personal Data Protection. You choose whether to allow or refuse access to your phone’s location, camera, photo library, microphone and notifications in the operating system; refusing may stop some features from working.

6. Voice data and research sharing

Speech recognition and command understanding run on your phone. Audio is not sent to Tasco servers.

Sharing data for research is optional, off by default, and separate from your acceptance of the Terms and this Policy. You choose one of three levels:

No sharing: no data is sent;
Metrics only: the processing result of each command (command type, processing time, success or failure) is sent, without the content of what you said;
With utterance text: the text of what you said, converted to writing, is also sent.

The protection measures applied to research data:

identifying information is masked on your phone before sending and checked again on the server: phone numbers, plate numbers, emails, long digit sequences and place names are replaced with placeholders;
places and Vehicle location are not included in the research data set;
identity in the data set is an anonymous code produced by a keyed hash of the user identifier; the user identifier is not stored in the data set;
data is used only to evaluate and improve Vietnamese command understanding; Tasco does not sell the data or use it for advertising.

Research data is kept for at most 180 days from recording and is then deleted automatically. You withdraw consent by opening Settings, choosing Voice data sharing and setting it to No sharing: sending stops immediately, and data already sent is not deleted automatically. To delete data already sent, choose Delete sent data in Settings: all turns, labels and consent records tied to your anonymous code are deleted.

The audit log of Vehicle commands is a separate stream for safety and investigation and does not depend on whether you share research data.

8. Retention periods

Tasco keeps data no longer than necessary for the purposes of processing and legal obligations:

profile and Account data: while the Account is active; when you ask to delete the Account, the Account is locked at once, and sessions, devices, push tokens, notifications and Vehicle access are removed; the profile is deleted or anonymised after Tasco has reviewed the resulting obligations, within the time limits set by law;
detailed Vehicle operating data (location, status, routes): 90 days from recording, then deleted automatically;
alerts from the Vehicle: 365 days from recording, then deleted automatically;
in-app notifications: 90 days; a push notification identifier expires on its own if it is not refreshed within 60 days;
command and audit logs: 1,095 days (3 years) from recording, for safety, investigation and legal obligations, then deleted automatically; after the profile is deleted or anonymised, the logs refer only to the internal Account code;
identity verification and rental records: while the rental relationship is in force and until the resulting obligations are settled; afterwards deleted or anonymised when you ask to delete the Account or the file, except for what the law requires to be kept, including accounting and tax law;
voice data shared for research: at most 180 days;
backups: at most 30 days from creation, so deleted data may remain in backups until the end of this period.

9. Rights of the data subject

Under Article 4 of the Law on Personal Data Protection, you have the following rights, and can exercise them directly in the App where possible:

the right to be informed about processing: through this Policy;
the right to consent, to refuse, and to withdraw consent: set Voice data sharing to No sharing, turn off location, camera, microphone and notification permissions in the operating system;
the right to view, correct or request correction: view your profile, signed-in devices, trips and notifications; edit your name, profile photo and password in your Account;
the right to request a copy, erasure, restriction of processing and to object to processing: choose Delete sent data, or Delete account, in Settings; send other requests to the contact above;
the right to complain, denounce and bring legal proceedings under the law.

Send requests through the contact above; Tasco may ask for further information to verify that you are the data subject. Tasco acknowledges and handles requests within the time limits set by personal data protection law.

Under Article 14 of the Law on Personal Data Protection, Tasco erases data when you request it, except where erasure could obstruct or infringe the lawful rights and interests of the State, or of other agencies, organisations or individuals, or where the data may be processed without the data subject’s consent. Withdrawing consent does not affect the lawfulness of processing carried out before; some data is needed to provide the service, so if it is withdrawn or deleted you may no longer be able to use the related features.

Instructions for deleting your account and data, including when you can no longer use the App, are on the page “Delete account and data”.

10. Security

Tasco applies suitable technical and organisational measures to protect data, including:

encryption of traffic between the App and the servers;
storage of sign-in session data and keys in the device’s secure storage;
role-based permissions for each Vehicle, additional confirmation for sensitive operations, and command signing with the Digital key;
encryption of identity verification files, audit logging, rate limiting and monitoring of unusual access.

No measure guarantees absolute safety on a network; you need to keep your password, PIN and one-time codes confidential and protect your device. When an incident affects personal data, Tasco notifies the competent state authority and you, and handles it as the law requires.

11. Children

The service is not intended for people under 18. Tasco does not knowingly collect children’s personal data. If Tasco finds that it has collected data of a person under 18, it deletes that data; a parent or guardian may contact us through the contact above.

12. Transfer of data abroad

App data is stored and processed on server infrastructure located in Vietnam. The Apple and Google push notification services may process the device identifier and notification content outside Vietnam.

When personal data is transferred abroad, Tasco prepares the impact assessment dossier for the transfer of personal data abroad and carries out the procedures under Article 20 of the Law on Personal Data Protection.

13. Changes to the policy

Tasco may update this Policy. For changes of legal significance, Tasco raises the version number, notifies you in the App and asks you to accept again before you continue. Sharing data for research does not turn on by itself when you accept a new version.

14. Contact

For any request or question about personal data, contact:

Operator: Tasco Joint Stock Company;
Address: Floors 1 and 20, Tasco Building, Lot HH2-2, Pham Hung Road, Tu Liem Ward, Hanoi, Vietnam;
Hotline: 024 6668 6863;
Support email: info@tasco.com.vn;
Website: https://tasco.com.vn.