Privacy Policy

Last updated: 9 September 2026 · Virium, Ho Chi Minh City, Vietnam

Virium ("we") provides an AI workforce platform to employers ("customers"). This policy explains what we collect, why, and how long we keep it. It applies to virium.ai, the Virium web app and the Virium mobile apps.

What we process

• Account data your employer provides to create your profile: name, work email or phone, job title, team, employment dates.
• Documents your employer uploads (policies, handbooks, training material) so the assistant can answer questions with citations.
• Activity data generated when you use Virium: questions asked, quiz and course results, roleplay sessions, check-ins, e-signature records, and manager notes. This is the evidence the platform uses to support HR and management decisions.
• Device data needed to run the app: device token for notifications, app version, language, crash logs.

Who controls the data

Your employer is the data controller for employment data and decides who in the company can see what. Virium processes data on the employer's instructions under a data-processing agreement. If you have a question about your data at work, contact your HR team first; you can also write to us at contact@virium.ai.

How we protect it

• Each customer's data lives in its own isolated database schema; one company can never read another company's data.
• Files are stored in encrypted object storage and served only through short-lived signed links (one hour). No file is publicly reachable.
• Secrets and integration keys are encrypted at rest (AES-256-GCM). All traffic uses HTTPS.
• Screens that show pay, contracts or bank details are protected from screenshots on Android and hidden in the app switcher on iOS.
• Analytics never store your plain user ID; identifiers are hashed per company.

AI processing

Questions you ask and the documents your employer uploads are sent to third-party language-model providers (OpenAI, Anthropic, Cohere) to generate answers and rankings. These providers process the data to return a result and do not use it to train their models under our agreements. Answers always cite the company document they come from; when no document supports an answer, the assistant says so and refers you to HR.

Retention

• Chat history: 90 days, then permanently deleted.
• Employment records (onboarding, contracts, training results): for as long as your employer keeps your account, and as required by Vietnamese labour law.
• Backups: point-in-time recovery for 7 days.

Your rights

Under Vietnam's Personal Data Protection Decree (13/2023/ND-CP) and, where applicable, the laws of your country, you may ask to access, correct or delete your personal data. Employees can request account deletion inside the app (Profile → Delete account) or through their HR team; we complete deletion within 30 days except where the law requires retention.

Children

Virium is a workplace tool and is not directed at anyone under 18.

Changes

We will post changes here and update the date above. Material changes will be announced in the app.

Contact

Virium · Ho Chi Minh City, Vietnam · contact@virium.ai