Privacy Policy

This policy explains how PT Ikara Digital Nusantara ("IKARA", "we") processes personal data on ikara.id, IKARA Console, all IKARA subscription products (such as IKARA Samaya), and custom systems built and operated by IKARA, in accordance with Indonesian Law No. 27 of 2022 on Personal Data Protection.

Data we process

Source	Data	Purpose
Contact & demo/trial request forms on ikara.id	Name, organization, position, email, WhatsApp/phone number, city, message, IP address	Responding to your request and following up on your needs
Job applications (by email or the application form listed in a job posting)	Name, contact details, position applied for, CV, portfolio link	Recruitment
Clients	Organization name, address, tax ID, PIC name & contact, billing email, subscription, invoices, payments	Providing, billing, and supporting the service
Application users	Name, email, role, sign-in records (time, IP address, device type), activity log	Account security and audit trail
Client application technical data	Version, health status, usage counts (without client document contents)	Monitoring and technical support
Client data and documents in the application (e.g. agreements, assets, records, uploaded files)	As uploaded by the client	Solely to run the service for that client; stored separately per client

ikara.id does not use tracking or advertising cookies. Visit statistics, if used, are counted without identifying individual visitors.

Basis & retention

• Contact and demo forms are processed based on your consent (checkbox on the form) and kept for up to 2 years after the last contact, unless they lead to a business relationship.
• Job applications are kept for up to 6 months after the recruitment process ends and then deleted, unless you ask us to keep them for future openings.
• Client data is kept while subscribed. After the subscription ends, data can be exported during the retention period, then deleted and recorded in a deletion report. Financial records are kept as required by tax regulations.

Supporting service providers

To run our services, IKARA works with supporting service providers that are bound by confidentiality and data protection obligations, process data only on IKARA's instructions, and receive only the data needed for their task:

• Data center & hosting: runs the applications, stores primary data in data centers in Indonesia, and sends service email.
• Backup storage: stores backup copies that are encrypted before leaving the server; only IKARA holds the encryption key.
• Payment gateway licensed by Bank Indonesia: processes online payments (Virtual Account, QRIS, e-wallet) when a client chooses to pay online.
• Artificial intelligence (AI) services: process requests for AI features; party names and identifiers are replaced with pseudonyms before sending, and data is not used to train models.
• Messaging services: deliver reminders to the messaging app chosen and enabled by the user.

Some supporting services (for example encrypted backup storage and AI processing) may be located outside Indonesia. Such transfers are made with an equal or higher level of protection, as required by Indonesian personal data protection law. Provider details can be shared with clients under a confidentiality or data processing agreement.

We do not sell personal data and do not use it for advertising.

Use of Google data (Google Drive)

IKARA Console connects IKARA's own Google Drive account solely to store encrypted backup copies, with the drive.file scope, so it can only access files it created in the "IKARA Cadangan" folder. Data from Google is not shared, sold, or used for advertising or AI model training, and its use complies with the Google API Services User Data Policy, including the Limited Use requirements.

Security

Detailed security measures are described on our Security & Compliance page. Servers are located in Indonesia. Application access is protected by password, two-factor authentication, and new-device sign-in alerts; each client's data is isolated; keys, tokens, and off-site backups are encrypted; every important change is recorded in a tamper-evident log.

Your rights

You may request access to, correction, export, or deletion of your personal data, or withdraw your consent, by contacting us. We respond within 3 business days.

Contact

PT Ikara Digital Nusantara · Denpasar, Bali · Email: info@ikara.id

The Indonesian version of this policy is the governing version.