Privacy Policy

Depending on how you use the service, we process the information you submit and limited technical records needed to provide and secure it.

• Identity and contact details: name, email, phone or messenger handle, company and preferred language.
• Enquiry, proposal, contract and transaction information: messages, scope, deliverables, invoice amount, currency, payment status and correspondence.
• Electronic acceptance evidence: agreement version and checksum, signer name and email, date and time, IP address and browser information.
• Account and security data where an account is used: login session, verification status, IP address, user agent and security audit events.
• Essential cookies: session and locale preferences. We do not use advertising or cross-site tracking cookies on this website.

We use data to respond to requests, prepare and perform contracts, issue invoices, provide support, prevent fraud and abuse, keep legally required business records, establish or defend legal claims, and comply with lawful requests. Processing is based on steps requested before a contract, performance of a contract, legal obligations, legitimate security and operational interests, and consent where the law requires it.

Data is shared only as needed with hosting and infrastructure suppliers, email and Telegram communication providers, banks and regulated payment providers, and authorised professional or service partners. Regulated travel, immigration, notarial, legal or property work may require data to be sent to the independently contracted licensed provider or public authority.

• The payment page may be hosted by a bank or payment provider. This website does not collect or store card PAN, expiry date or CVV.
• Telegram, email, hosting and payment suppliers may process data outside Indonesia. We limit disclosure, use access controls and rely on the provider's contractual and security safeguards as applicable.
• We may disclose data when required by law, a court, regulator, bank or payment-network investigation.

We keep data only for the operational or legal period applicable to the record. Enquiries are normally reviewed for deletion after 24 months. Expired login tokens and sessions are removed through operational housekeeping. Contracts, invoices, payment and accounting records may be retained for up to 10 years or a longer period required by law, an audit, dispute, bank or tax authority. Backups expire on their normal rotation schedule.

We use HTTPS, access control, hashed session or verification tokens, rate limits, audit logs and restricted administrative access. No internet system is risk-free.

• Subject to Indonesian law, you may ask for access, correction, deletion, withdrawal of consent, restriction or information about processing.
• Send a request or complaint to shaakiriy@gmail.com. We may verify your identity and may retain records that the law requires us to keep.
• If an incident creates a legally reportable risk, we will notify affected persons and the competent authority within the period required by applicable law.