IWAS
FeaturesPricingAboutBlogFAQ
Sign In
PRIVACY POLICYVERSION 1.0
Cập nhật lần cuối:29/07/2026

Privacy Policy

Privacy policy governing how IWAS System (9xLayer) collects, uses, stores, and protects personal data of users and WiFi Captive Portal guests.

MINIMAL DATA COLLECTION
Only what's needed

We collect only essential data required to operate Captive Portal and RADIUS — zero web tracking or data selling.

STANDARD TLS / HTTPS
Zero-Trust Architecture

All API connections, WireGuard Tunnels, and Captive Portals are securely encrypted. Multi-factor access control with audit logs.

DATA PRIVACY COMPLIANT
Information Security

Access log storage and personal data processing in full compliance with Decree 13/2023/ND-CP on Personal Data Protection in Vietnam.

1. Information We Collect

This Privacy Policy explains how 9xLayer ("IWAS", "We", "Us") collects, uses, and protects information when you register an administrative account ("Venue Owner") or connect to guest WiFi via the Captive Portal ("Guest User").

  • Admin Account Information: Full name, mobile phone number, official contact email, store/venue name, tax ID, and primary bank account details configured to receive VietQR package payments.
  • WiFi Device Technical Data: Device MAC address, IP address, device user-agent signature, wireless network name (SSID), and Access Point ID when guests connect via the Captive Portal.
  • Session Accounting Logs: Login/logout timestamps, session durations, uploaded/downloaded byte volumes, and selected WiFi access plans.
  • PayOS Payment Transaction Data: Transaction IDs, payment amounts, bank transfer reference codes, and VietQR processing statuses. IWAS NEVER stores credit card credentials or personal banking PINs.

2. How We Use Collected Data

All collected data is processed strictly for system operations, financial settlement, and technical support:

  • RADIUS & Portal Operations: Authenticating connecting devices, enforcing bandwidth limits, and managing session quotas based on purchased plans.
  • VietQR Payment Processing: Automatically granting WiFi access immediately upon payment confirmation via the PayOS gateway.
  • Revenue Analytics & Reporting: Providing the Admin Dashboard to track visit metrics and generate WiFi package sales reports for Business Owners.
  • Maintenance & Technical Support: Auditing connection logs to diagnose network connectivity issues or assist with plan activation errors.
  • Legal & Regulatory Compliance: Retaining network access logs to comply with cybersecurity and telecommunications regulations under Vietnamese jurisdiction.

3. Data Sharing & Data Protection

  • Zero Data Commercialization: IWAS does not sell, rent, or commercialize personal data or network connection histories to third parties.
  • Responsibility Allocation: Venue guest data collected at a location belongs to the Business Owner. IWAS acts as the cloud SaaS technology provider processing data under venue authority.
  • Authorized Infrastructure Partners: VietQR transaction data is processed via PayOS. Cloud RADIUS servers are operated on secure Data Center infrastructure located in Vietnam.
  • Law Enforcement Requests: IWAS discloses network access logs only when served with official written requests from competent state authorities under applicable law.

4. Data Retention & Your Rights

  • Retention Period: Administrative account details are retained throughout active subscription terms. WiFi Connection Logs are retained for a minimum of 06 months as required by cybersecurity legislation.
  • Your Rights: You have the right to inspect, rectify account details, or submit requests for personal data export or erasure.
  • Support Workflow: For any data-related inquiries, please contact hello@getiwas.com. Technical support will verify and respond within 72 business hours.

5. Technical Data Security Safeguards

We deploy standard technology solutions to safeguard system and data integrity:

  • Encrypted Transmission: 100% of connections between MikroTik Gateway Routers and Cloud RADIUS nodes run over encrypted WireGuard VPN Tunnels. API endpoints and Captive Portals use standard TLS / HTTPS encryption.
  • Internal Access Controls: Role-Based Access Control (RBAC), Multi-Factor Authentication (2FA) for operations staff, and tamper-evident system Audit Logs.
  • Automated Daily Backups: Databases and transaction records are backed up automatically every day to ensure 100% disaster recovery capabilities.

6. Policy Amendments & Contact Information

This Privacy Policy may be updated to reflect new product capabilities or statutory legal changes. The latest version will always be published on getiwas.com/privacy.

Powered by 9xLayer.