Privacy Policy

Centricom (operating the Centry assistant, hereafter “Centry,” “we,” “us”) provides an AI-powered productivity assistant for businesses via the Zalo Official Account messaging channel and a companion web application at centricom-web.vercel.app. This policy describes what information we collect, how we use it, and the choices you have.

1. Information we collect

1.1 Information you provide

• Account information: name, email, phone number, profile photo.
• Organization information: company name, branches, team members.
• Tasks and notes you create through Centry, including content, assignees, deadlines, and attachments.
• Project, contact, and alias information you configure for your personal organization (e.g. labelling a teammate as “tài xế”).
• Messages you exchange with the Centry assistant via Zalo or the web app.

1.2 Information from connected services

If you choose to connect a Google account to Centry, we request specific permissions (“scopes”) to provide the features you ask for. As of this version, the only Google scope we request is:

• https://www.googleapis.com/auth/calendar.events — to view, create, and modify calendar events on your behalf when you instruct the Centry assistant to schedule, move, or cancel a meeting.

1.3 Automatically collected information

• Activity logs: actions you take in Centry (task created, task updated, messages sent), including timestamps.
• Technical data: IP address, browser type, device identifiers, error logs, performance metrics.
• Cookies and similar technologies for authentication and preference storage.

2. How we use your information

• Provide the Centry service: route messages, create and update tasks, schedule reminders, send notifications, and generate digests.
• Personalize your experience: remember the people, projects, and venues you reference so the assistant can resolve them without asking again.
• Connected-service actions: if you connected a Google account, perform calendar actions (create event, send invite, update event) when you specifically instruct the assistant to do so.
• Improve the service: analyze aggregated usage patterns to improve features. Aggregated data is not used to train third-party models.
• Security and compliance: detect abuse, debug errors, comply with legal obligations.

3. AI processing

Centry uses third-party AI models (currently Anthropic Claude) to interpret your messages and generate replies. When you send a message to Centry, the relevant message text and the minimum context needed to answer (e.g. your active project, recent tasks, contact directory) are sent to the AI provider for processing. The AI provider does not retain your data for training or other secondary purposes under our agreement.

4. How we share information

We do not sell your personal information. We share information only in the following limited circumstances:

• With your team: tasks you create for others, and updates you make, are visible to the people involved (assignees, watchers, and project members you explicitly add). Personal projects and personal contact directories remain private to you.
• With service providers: we use vendors for hosting (Vercel), database (Supabase), AI inference (Anthropic), and messaging delivery (Zalo). These providers process data on our behalf under contractual obligations.
• Where required by law: we may disclose information in response to lawful legal process or to protect rights, property, or safety.
• Business transfers: if Centricom is acquired or merged, we will notify users and ensure equivalent protections.

5. Data retention and deletion

• We retain your information for as long as your account is active.
• You can delete individual tasks, messages, and projects at any time from the web application.
• You can revoke Centry’s access to your Google account at any time by visiting myaccount.google.com/permissions. When you revoke access, we delete the access tokens stored for your account and stop accessing your Google data.
• To delete your entire Centry account, email us (see contact below). We will delete or anonymize personal data within 30 days, except information we are required to retain for legal or security reasons.

6. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, role-based access controls, and audit logging. No system is perfectly secure; if you suspect unauthorized access to your account, contact us immediately.

7. Your rights

You have the right to access, correct, export, and delete your personal data. You can exercise most of these rights directly from the Centry web application, or by contacting us. We will respond to verifiable requests within 30 days.

8. International data transfers

Your data may be processed in countries other than your own (notably the United States, where our service providers operate). Where required, we use appropriate safeguards such as Standard Contractual Clauses.

9. Children

Centry is intended for use by businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced through the Centry web app or via email. The “Last updated” date at the top reflects the most recent revision.