Privacy Policy

1 Interpretation and Definitions

1.1. Interpretation

Words with capitalized initials have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

1.2. Definitions

• Account means a unique account created for You to access our Service.
• Company refers to ZERION GAMES STUDIO.
• Country refers to: Vietnam and California, USA.
• Device means a computer, mobile phone, or digital tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Application and the Website.
• Service Provider means any person or entity that processes data on behalf of the Company.
• Usage Data refers to data collected automatically.
• You means the individual accessing or using the Service.

2 Collecting and Using Personal Data

2.1. Personal Data

When using our Service, we may ask You to provide certain personally identifiable information:

• Account information: Name, email, phone number
• Job application: CV, date of birth, experience, skills
• Contact: Messages, feedback, support requests
• Usage Data

2.2. Usage Data

Collected automatically when using the Service:

• IP address of the Device
• Browser type and version
• Pages visited, time and date of access
• Unique device identifiers, diagnostic data

When accessing via mobile device:

• Mobile device type and unique ID
• Mobile IP address
• Mobile operating system and browser type

2.3. In-Game Information

• Progress, achievements, interactions (non-identifying)
• Data from Google Play/App Store (rating, public reviews)
• Analytics from Firebase Analytics (anonymized)

3 Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• Provide and maintain Service: Including monitoring usage.
• Manage Your Account: Manage registration, access to different features.
• Contract performance: Develop, comply, and perform purchase contracts.
• Contact You: Email, phone, SMS, push notifications about updates.
• Provide information: News, special offers, similar events.
• Manage requests: Receive and manage requests sent to us.
• Business transfers: Evaluate or conduct merger, divestiture, restructuring.
• Analytics: Usage trends, campaign effectiveness, improve experience.

4 Sharing Personal Information

We may share information in the following situations:

• With Service Providers: To monitor, analyze, and contact.
• Business transfers: During merger, asset sales, financing.
• With Affiliates: Requiring affiliates to honor this Policy.
• With Business Partners: To provide products, services, promotions.
• With other users: In public areas.
• With Your consent: For other purposes.

5 Legal Basis for Data Processing (GDPR)

Under GDPR, we process data based on:

• Consent: When you apply or subscribe
• Contract: To execute the recruitment process
• Legitimate interests: Improving services, system security
• Legal obligations: Comply with labor and tax laws

7 Deleting Your Personal Data

You have the right to delete or request our assistance in deleting Personal Data we have collected.

You can update, modify, or delete your information at any time by signing into your Account and visiting the settings section. You can also contact us to request access, correction, or deletion.

Note We may need to retain some information when we have a legal obligation.

8 Your Rights

Rights under GDPR (EU)

• Right of access: Request a copy of your data
• Right to rectification: Correct inaccurate information
• Right to erasure: "Right to be forgotten"
• Right to restriction: Restrict processing
• Right to portability: Receive data in structured format
• Right to object: Object to data processing
• Right to withdraw consent: Withdraw consent at any time

Rights under CCPA (California, USA)

• Right to know: Know what information is collected
• Right to delete: Request deletion of personal information
• Right to opt out of sale: We do NOT sell personal information
• Right to non-discrimination: No discrimination for exercising rights

📧 To exercise your rights: [email protected] — response within 30 days.

9 Disclosure of Your Personal Data

9.1. Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Personal Data may be transferred. We will provide notice before transfer.

9.2. Law Enforcement

The Company may be required to disclose Personal Data if required by law or in response to valid requests from public authorities.

9.3. Other Legal Requirements

• Comply with legal obligations
• Protect the rights or property of the Company
• Prevent or investigate possible wrongdoing
• Protect personal safety of Users
• Protect against legal liability

10 Security of Personal Data

We apply industry-standard security measures:

• Encryption: TLS/SSL for all connections, AES-256 for sensitive data
• Access control: RBAC, 2-factor authentication
• Monitoring: 24/7 monitoring, intrusion detection, audit logs
• Backups: Periodic backups, disaster recovery
• Training: Staff trained on data security

11 Data Retention

• Job applications: 12 months from submission
• Employee records: Per Vietnamese labor law
• Game data: Until you delete the app or request deletion
• System logs: 90 days
• Analytics data: 26 months (anonymized)

12 Transferring Your Personal Data

Your data may be processed at:

• Vietnam: Main servers and company office
• Singapore/USA: Cloud services (Google Cloud, Firebase)

When transferring data outside the EEA:

• Standard Contractual Clauses (SCCs) with providers
• Only use GDPR-compliant providers

13 Links to Other Websites

Our Service may contain links to other websites not operated by us.

We recommend that You review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party site or service.

14 Third-Party Service Providers

✓ We do NOT sell, rent, or trade your personal information.

We only share information with:

• Service providers: Cloud hosting, analytics (under DPA contracts)
• Legal requests: Authorities with court order
• Merger/Acquisition: Prior notice will be given

Service providers:

• Google Firebase (Analytics, Crashlytics) — Privacy Policy
• Google AdMob (Ads) — Privacy Policy

15 Cookies and Tracking Technologies

The website uses the following types of cookies:

You can manage cookies in your browser settings. Disabling cookies may affect some functionality.

16 "Do Not Track" Signals

Our website currently does not respond to "Do Not Track" (DNT) signals from browsers. However, you can opt out of analytics cookies via browser settings or Google Analytics Opt-out.

17 Changes to This Privacy Policy

We may update this policy periodically. Material changes will be communicated via:

• Website notification
• Email (if you are subscribed)
• Update of the "Last updated" date at the top of the page

18 Contact Us

If you have questions about the privacy policy or wish to exercise your rights:

EU Representative: If you are in the European Union, please contact us via email above. We will respond within 30 days.