1. Introduction

PT Digital Engineering Indonesia ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platforms.

1.1 Platforms Covered

This Privacy Policy applies to all platforms operated by PT Digital Engineering Indonesia:

Unified Account: Your account is shared across all our platforms. A single registration provides access to GoValid and NexHub with the same credentials.

2. Information We Collect

2.1 Personal Information

• Name and email address
• Phone number (optional)
• Company/organization information
• Billing and payment information
• Account credentials (encrypted)

2.2 Identity Verification Data

For account verification purposes, we collect:

• Government-issued identification documents (ID card, passport, or driver's license)
• Facial photograph/selfie for identity matching
• Verification status and timestamps

2.3 QR Code and Hub Data

GoValid:

• QR code content and metadata
• QR code scan analytics (location, device type, timestamp)
• Custom forms and collected responses
• Documents and files uploaded for verification

NexHub:

• Hub profile information and links
• Hub visitor analytics (views, clicks, device type)
• Social media profile connections
• Elite Link subdomain configurations

2.4 Technical Information

• IP address and browser information
• Device identifiers
• Usage patterns and preferences
• Cookies and similar technologies

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Process transactions and send billing information
• Send administrative information and updates
• Respond to inquiries and provide customer support
• Monitor and analyze usage patterns to improve our services
• Detect, prevent, and address technical issues
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information:

• With your consent
• To comply with legal obligations or respond to lawful requests
• With service providers who assist in operating our platform
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection

6. Data Retention and Control

You have full control over your data. You can delete your QR codes and associated files at any time. Deleted QR codes are moved to a trash folder where they remain for 30 days before permanent deletion. All encrypted files are deleted when you delete the associated QR code.

6.1 Identity Verification Data Retention

• Compliance with Indonesian financial regulations and anti-money laundering (AML) requirements
• Fraud prevention and security investigations
• Legal dispute resolution if necessary
• Re-verification purposes if account changes occur

After the 5-year retention period, verification documents are permanently and securely deleted from our systems. You may request early deletion of verification data, subject to legal and regulatory requirements.

7. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information
• Object to processing of your information
• Export your data in a portable format
• Withdraw consent at any time

7.1 Account Deletion

You can permanently delete your account and all associated data at any time:

• Web: Go to Account Settings → Delete Account
• Mobile App: Settings → Account → Delete Account

When you delete your account, all your QR codes, scan history, profile data, documents, and personal information will be permanently removed from our servers. This action is irreversible.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate users and prevent fraud
• Analyze site traffic and usage
• Personalize content and features

You can control cookies through your browser settings, but disabling them may affect functionality.

9. Data Ownership and Encryption

You retain full ownership of all data and files you upload. All uploaded files are encrypted using AES-256-GCM encryption. We cannot access or decrypt your files - only you have control over your data through your encryption keys.

10. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

11. Third-Party Services

Our platform may contain links to third-party services. We are not responsible for the privacy practices of these services. Please review their privacy policies before providing any information.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

14. Consent

By using GoValid or NexHub, you consent to our Privacy Policy and agree to its terms.