Privacy Policy

1. Who we are and what this document covers

timi (the "Site", "we") is a classifieds board for Russian-speaking residents and visitors of Vietnam: housing rentals, vehicles, goods and services. The Site operator and the party that determines the purposes and means of processing personal data (controller / operator) is [Наименование оператора], registration no. [регистрационный номер], country of registration [страна регистрации], address: [адрес].

This Policy explains what personal data we process, why, on what legal basis, who receives it, how long we keep it and how you can control it. It is prepared with regard to Vietnam's Law on Personal Data Protection No. 91/2025/QH15 and Government Decree No. 13/2023/ND-CP (to the extent still in force) and, for citizens of the Russian Federation, Russian Federal Law No. 152-FZ "On Personal Data" to the extent it applies to the Site.

This Policy forms part of the Terms of Use. If you do not agree with it, please do not register or post listings.

2. Data we process

We do not receive your phone number from Telegram, do not request passport data and do not process special (sensitive) categories of data. Please do not publish other people's data, photos of documents or health information in listings and messages.

3. Purposes and legal bases

We do not make decisions producing legal effects for you solely by automated means. Automated checks (e.g. a "looks like a prepayment request" warning) only warn; a moderator makes the final decision on blocking.

You may withdraw consent at any time (see section 8). Withdrawal does not affect processing before it, but without login data we cannot provide you with an account.

4. Listings imported from Telegram

To bring housing and vehicle offers into one place, the Site reads public Telegram groups and channels where people post offers themselves. Posts that look like listings are automatically (using a language model) turned into a card: category, price, area, photos and a link to the original post. The author is shown on the Site as a "shadow" profile with their Telegram name.

What we do to keep this fair and safe:

• we always show the source and a link to the original post;
• the author's contacts are shown only to logged-in users so that bots cannot harvest them;
• if the author deletes the post in Telegram, we unpublish the listing;
• the author can log in with the same Telegram account — the listings become theirs to edit or delete;
• anyone can ask us to remove or correct a listing without logging in; we reply within 10 days and hide obvious violations sooner.

The basis for processing such data is that the author made it publicly available themselves in order to find a tenant or buyer, and we use it for the same purpose. If you object, use the form or email [email для обращений] and we will remove the listing.

5. Who receives data

We do not sell personal data or share it with advertisers. Data is received only by those the Site cannot work without:

Where available, we use provider settings under which submitted texts are not retained or used to train models.

6. Cross-border transfer

Our providers (Telegram, language model providers, hosting) may be located outside Vietnam and Russia, so your data is transferred abroad. By using the Site and accepting this Policy you consent to such transfer for the purposes in section 3. We transfer only the necessary minimum and prepare the documents required by the law of the country of transfer (including the cross-border transfer impact assessment under Vietnamese law).

7. Retention

If the law requires longer storage, we keep data for the required period and only for that purpose.

8. Your rights

Depending on applicable law, you have the right to:

• know what data we process about you and why, and get a copy;
• correct inaccurate data — most of it you can edit yourself in your profile and listings;
• delete your data and account;
• withdraw consent;
• restrict or object to processing;
• receive data in a machine-readable format where technically feasible;
• lodge a complaint with a supervisory authority: in Vietnam — the Department of Cybersecurity and High-Tech Crime Prevention of the Ministry of Public Security (A05); in Russia — Roskomnadzor; elsewhere — your local data protection authority.

How to exercise your rights: email [email для обращений] or use the request form. We may ask you to confirm that the account is yours (e.g. by writing from the same Telegram). We acknowledge requests within 72 hours and fulfil them within the period required by applicable law — as a rule, no later than 10 days.

9. Deleting your account or data

• Account — "Profile → Settings → Delete account". Your listings with photos, favorites, saved searches, Telegram link and all login sessions are deleted. Your messages and your reviews of other people stay with them, but your name is replaced by "Deleted user" — otherwise their conversations would stop making sense.
• A single listing — in "My listings".
• A Telegram post, if you have no account — via the "Remove or correct" form.
• Bot notifications — turn off the saved search or block the bot in Telegram.

10. Cookies and similar technologies

We use only strictly necessary (functional) cookies: the login token (httpOnly), chosen language, currency and city. Without them the Site cannot, for example, remember that you are logged in. We do not use third-party advertising or analytics cookies, which is why we do not show a cookie consent banner: consent is generally not required for strictly necessary cookies. If this changes, we will ask for your consent in advance. See the Cookie Policy.

Visit statistics. We count visits ourselves — without cookies, third-party services or identifiers stored in your browser. The server derives an irreversible hash from your IP address and browser string using a secret key that changes every day and is then deleted. So we can see how many people visited on a given day, but cannot recognise you the next day; we do not keep the IP address or the full browser string in the statistics — only the device type and browser and OS names. If you are logged in, the visit is linked to your account, so we can see how many users come back. If Do Not Track or Global Privacy Control is enabled in your browser, no statistics about you are collected.

The login page loads the Telegram widget and pages with maps load OpenStreetMap tiles; these services receive your IP address and may set their own cookies under their own policies.

11. Security

Connections to the Site are encrypted (HTTPS). The login token is kept in an httpOnly cookie that page scripts cannot read. Login is only via Telegram — we hold no passwords of yours. For reports we store an irreversible hash instead of the IP address. Only staff with a separate password can access the admin panel. No system is perfectly secure; in case of a breach affecting your rights we will notify you and the competent authority within the time required by law.

12. Children

The Site is intended for persons over 18. We do not knowingly collect children's data. If you believe a child has given us data, email [email для обращений] and we will delete it.

13. Changes

We may update this Policy, e.g. when we add features or the law changes. The version date is shown at the top of the page. We will announce material changes in advance on the Site or in Telegram.

14. Contacts

• Operator: [Наименование оператора], [адрес]
• Email for data requests: [email для обращений]
• Data protection officer: [ответственный за персональные данные, email]
• Telegram: [Telegram поддержки]
• "Remove or correct" form

This document is drawn up in Russian; English and Vietnamese translations are provided for convenience. In case of discrepancy the Russian version prevails unless the law requires otherwise.