Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, use our services, or contact us for support.

Personal Information

• Name, email address, and contact information
• Account credentials and authentication data
• Organization and billing information
• Communication preferences

Usage Information

• How you use our platform and services
• Documents and data you create or process
• Integration and API usage patterns
• Performance and error logs

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services.

• Provide and operate the DocaFlex platform
• Process documents and automate workflows
• Communicate with you about our services
• Provide customer support and technical assistance
• Improve and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

3. Data Storage and Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Security Measures

• AES-256-GCM encryption for data at rest and in transit
• Two-factor authentication and access controls
• Regular security audits and penetration testing
• SOC 2 Type II and ISO 27001 compliance

Data Location

Your data is stored in secure data centers located in Indonesia and Singapore, ensuring compliance with Indonesian data sovereignty requirements.

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except as described in this policy.

We may share information:

• With your consent or at your direction
• With service providers who assist in our operations
• To comply with legal obligations or protect our rights
• In connection with a business transaction or reorganization

5. Your Rights and Choices

You have certain rights regarding your personal information, including:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data
• Objection: Object to certain processing activities

6. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

7. International Transfers

If we transfer your personal information outside of Indonesia, we ensure appropriate safeguards are in place to protect your information in accordance with applicable privacy laws.

8. Children's Privacy

Our services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last updated" date.

10. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us: