Privacy Policy

📌1. Introduction

MLP (MeLi) supports authorized internal work, communication, notifications, digital workflows, document processing, and AI-assisted features. The data controller is Merap Group JSC (MerapLion), Vietnam. Privacy questions: support@meraplion.com.

🗂️2. Data We May Collect

• Account and profile data such as employee ID, name, email, phone, department, role, profile photo, address, identification and tax information, subject to role and business scope.
• Device, installation, push-notification, application-version, security and diagnostic metadata.
• Business content such as messages, files, photos, videos, audio, tasks, orders, customer information, approvals and digital-signing records.
• IP address and connection metadata for authentication, security, abuse prevention and audit.
• AI prompts, business context, documents or images that the user actively submits to an AI feature.
• When authorized users capture or select a Citizen ID card or business registration certificate, the image may contain identity numbers, name, date of birth, address and business-registration data. MLP (MeLi) first attempts on-device OCR; if more information is needed, the image may be sent to MLP Document Vision after the user is informed and agrees.
• Photos or files selected by the user may contain device metadata, including location metadata, if it has not been removed before upload.

🎯3. How We Use Data

• Authenticate users and enforce permissions.
• Provide authorized business, communication, workflow, document, notification and signing features.
• Recognize document images and suggest customer fields; OCR results must be reviewed before saving or submitting.
• Process user-requested AI tasks, translation and document recognition.
• Maintain security, auditability, stability and application updates.

🛡️4. Security

We apply appropriate technical and organizational safeguards to protect data against unauthorized access, loss, alteration or disclosure. Access is controlled by account, role, organization and business scope.

🔐5. Sharing

MLP (MeLi) does not sell personal data or share it for third-party advertising. Data may be processed within approved internal systems, by Google/Firebase for notifications and diagnostics, by approved communication infrastructure, or by an AI/OCR provider configured by the organization. Document images are shared with OCR services only for the requested feature and after user consent; they are not used for advertising or profiling.

📊7. Diagnostics and Updates

Firebase Analytics/Crashlytics and Shorebird may process application, device, installation, update and crash metadata needed for stability and safe updates. MLP (MeLi) does not use this data for advertising and does not collect Advertising ID for advertising or remarketing.

💾8. Storage and Retention

Data may be stored on the device or on approved centralized systems. Account and business data are retained while needed for the account, business relationship, legal, contractual, security or audit obligations. Citizen ID and business-registration images follow the retention period of the customer-record process and applicable law. Temporary app copies follow the app cache lifecycle; files saved outside the app must be deleted at their storage location.

👤9. Your Rights

• Request access, correction, deletion or restriction of data, subject to legal, contractual, security and audit requirements.
• Withdraw AI data-sharing consent.
• Request deletion of document images and OCR data when there is no valid retention basis.
• Ask about diagnostic data and processing purposes.

Accounts are issued by the organization. Contact your administrator or email support@meraplion.com; identity may be verified before a request is processed.

🔄10. Changes

This policy may be updated when the application, operating processes or applicable law changes. The latest version is published on this page.

📬11. Contact

For privacy or security questions, contact support@meraplion.com or your organization’s system administrator.