Privacy Policy

1. Personal Data We Collect

• Account data: email address, name, and login credentials (including Google login if you choose it).
• Business/profile data: company name, entity type, representative name, tax ID, invoice number, address, phone, and industry.
• Content you upload: receipts, invoices, bank statements (CSV), payroll data, and client data — which may contain third-party Personal Data.
• Technical data: IP address, device/browser type, and cookie data (see Cookie Policy).
• Payment data: for subscriptions, processed via a payment provider; we do not store full card details.

2. Legal Basis for Processing

Under Article 20 of the PDP Law, we process Personal Data based on: (a) your consent; (b) performance of a contract (providing the Service); (c) compliance with legal obligations; and/or (d) the Company’s legitimate interests that do not override your rights.

3. Purposes of Use

• To provide, operate, and maintain the Service.
• To read documents automatically (AI/OCR) to produce journals and reports.
• To manage accounts, authentication, and security.
• To communicate about the Service and provide customer support.
• To comply with legal and tax obligations.

4. AI/OCR Processing

Documents you upload may be sent to AI/OCR providers for data extraction. This processing is necessary for the automated reading feature. Please avoid uploading sensitive Personal Data not relevant to bookkeeping.

5. Data Sharing and Sub-Processors

We do not sell your Personal Data. We may share data with trusted service providers that help operate the Service, including cloud infrastructure and database providers, an authentication provider, and AI/OCR providers.

Sub-processors may only process data on our instructions and for the purpose of providing the Service.

6. Cross-Border Data Transfer

Some sub-processors may process data outside Indonesia. In accordance with Article 56 of the PDP Law, such transfers are made by ensuring an equivalent level of protection, or based on your consent. By using the Service, you understand and consent to such transfers to the extent necessary to provide the Service.

7. Data Retention

Personal Data is retained while the account is active and for as long as necessary for the processing purposes or to meet legal obligations (e.g. retention of financial records).

When no longer needed, data is deleted or anonymized in accordance with applicable rules.

8. Security

We apply reasonable technical and organizational measures, including encryption in transit, access controls, and data isolation between users, to protect Personal Data. However, no system is entirely risk-free.

9. Rights of the Data Subject

Under the PDP Law, you have the right to:

• Obtain information about and access your Personal Data.
• Correct or update inaccurate Personal Data.
• Erase Personal Data (the right to be forgotten) where applicable.
• Withdraw consent and restrict/object to processing.
• Obtain and port your Personal Data (portability).
• Lodge a complaint with us and/or the competent authority.

10. Cookies

The Service uses cookies and similar technologies. Details and settings are provided in the Cookie Policy.

11. Children’s Data

The Service is not intended for children under 18. Processing of a child’s Personal Data may only be done with parental/guardian consent under the PDP Law.

12. Data Breach Notification

In the event of a Personal Data protection failure, we will notify you and the competent authority in accordance with the PDP Law, including the prescribed notification timeframe.

13. Changes to this Policy

We may update this Privacy Policy. Material changes will be notified in the app or by email.

14. Data Protection Contact

To exercise your rights or for privacy questions, contact our data protection contact at official@kazena.net, by phone at 0813-1300-749, or PT KAZENA GLOBAL BUSINESS, Office Tower Eightyeight@Kasablanka Unit 9A, Jalan Casablanca Kav. 88, Menteng Dalam, Tebet, Jakarta Selatan, DKI Jakarta 12870, Indonesia.