Loading...
Terakhir diperbarui: April, 2026
This Privacy Policy explains how PT Immenzo Jaya International (“Immenzo,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects Personal Data in connection with:
This Policy should be read together with our Cookie Policy and any applicable customer agreement.
Immenzo acts as a Personal Data Controller when we determine why and how Personal Data is processed, including for:
When a business customer submits documents or other data to the Immenzo platform and determines the purposes of that processing, the customer normally acts as the Data Controller and Immenzo acts as its Data Processor.
In those circumstances:
The Personal Data we collect depends on how a person interacts with Immenzo.
We may collect:
Payment-card information may be processed directly by an authorized payment provider. Immenzo should not claim that it stores full payment-card information unless it actually does so.
Customer Content may include:
Customer Content may contain Personal Data relating to the customer’s employees, suppliers, customers, applicants, recipients, or other individuals.
Customers are responsible for ensuring that they have an appropriate legal basis and authority to submit Customer Content to the Services.
When a person uses our website or Services, we may collect:
We collect advertising or non-essential analytics information only in accordance with the choices presented through our cookie-consent mechanism.
We may receive information from:
We process Personal Data for the purposes and legal bases described below.
| Purpose | Typical legal basis |
|---|---|
| Creating and administering accounts | Performance of a contract or steps requested before entering a contract |
| Providing document-processing and related Services | Performance of a contract and the customer’s documented instructions |
| Processing payments and managing subscriptions | Performance of a contract and legal obligations |
| Providing support and responding to enquiries | Performance of a contract or legitimate interests |
| Protecting accounts, systems, and users | Legitimate interests and legal obligations |
| Detecting abuse, fraud, or security incidents | Legitimate interests and legal obligations |
| Maintaining audit and transaction records | Contractual necessity, legitimate interests, and legal obligations |
| Improving reliability and product performance | Legitimate interests or consent where required |
| Sending requested product or service communications | Contractual necessity or legitimate interests |
| Sending optional promotional communications | Consent or another lawful basis permitted by applicable law |
| Website analytics | Consent where required |
| Advertising measurement and targeted advertising | Consent |
| Complying with legal requests and obligations | Legal obligation |
| Establishing or defending legal claims | Legitimate interests and applicable legal rights |
| Conducting a merger, financing, acquisition, or restructuring | Legitimate interests and applicable legal obligations |
Where we rely on legitimate interests, we consider the purpose, necessity, impact on individuals, and available safeguards.
Where we rely on consent, consent may be withdrawn through the method provided when consent was collected or by contacting us.
Immenzo uses automated systems and artificial-intelligence technologies to provide functions such as:
Unless separately agreed in writing, Immenzo does not use Customer Content to:
Immenzo may use appropriately aggregated or de-identified operational information to maintain security, measure reliability, diagnose technical issues, and improve system performance, provided the information cannot reasonably identify a customer or individual.
Any third-party AI provider that processes Customer Content on our behalf must be treated as an authorized service provider or Sub-Processor and subject to contractual data-protection restrictions.
Immenzo’s outputs may require human review. Customers remain responsible for decisions made using extracted or generated information, particularly where a decision may have legal, financial, employment, educational, health, or similarly significant consequences.
We may disclose Personal Data to:
Providers supporting:
These providers may process Personal Data only for authorized purposes and subject to appropriate contractual obligations.
We may transmit data to systems or recipients selected by a customer, including:
Where we use AppLovin to advertise Immenzo, AppLovin may receive limited website and advertising information after the necessary consent has been obtained.
The information may include:
We do not intentionally provide AppLovin with Customer Content, uploaded documents, health information, financial-account information, government identifiers, communication contents, or other sensitive Personal Data.
We may disclose Personal Data where reasonably necessary to:
Personal Data may be disclosed to professional advisers, investors, lenders, or prospective transaction parties in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and data-protection safeguards.
We may disclose information that has been aggregated or de-identified so that it cannot reasonably identify an individual.
We do not sell Personal Data for monetary payment.
We use cookies and similar technologies to:
Strictly necessary technologies may operate without optional consent where permitted.
Analytics and advertising technologies are activated only in accordance with the choices presented through our cookie-consent mechanism.
Users can review or change their choices through the consent options presented on our website.
Further information is available in our Cookie Policy.
The locations used to process Personal Data depend on the applicable Service, customer agreement, and service providers.
Where an Order Form or service specification includes an Indonesia-only processing commitment, we will process the relevant data according to that commitment.
Otherwise, Personal Data may be processed in Indonesia and in other countries in which Immenzo or its authorized service providers operate.
Before transferring Personal Data outside Indonesia, we apply a transfer mechanism permitted under applicable law, which may include:
Additional information about customer-specific processing locations and Sub-Processors may be provided in the applicable agreement or Sub-Processor list.
We retain Personal Data only for as long as reasonably necessary for the relevant purpose, contractual requirement, security need, or legal obligation.
Retention considerations include:
Typical retention categories should be documented internally and, where appropriate, disclosed as follows:
| Data category | Retention approach |
|---|---|
| Customer Content | According to the customer agreement and configured retention period |
| Account information | For the account term and a limited period afterwards |
| Billing and contractual records | For the period required by applicable accounting, tax, and legal rules |
| Support communications | For the period needed to resolve and document the request |
| Security and access logs | For a defined period appropriate to security and audit needs |
| Marketing information | Until consent is withdrawn, the person opts out, or the information is no longer required |
| Cookie consent records | For the period needed to demonstrate and respect the person’s choices |
When retention is no longer necessary, Personal Data is deleted, destroyed, anonymized, or isolated from ordinary use in accordance with applicable requirements.
We use technical and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, destruction, or unlawful processing.
These measures may include, where implemented and appropriate:
No system is completely secure. We therefore continually assess and improve safeguards according to the nature and risk of the processing.
Specific security commitments are governed by the applicable customer agreement, security addendum, or service specification.
Subject to applicable law and permitted exceptions, an individual may have the right to:
Rights may be subject to identity verification, legal restrictions, security considerations, the rights of other persons, and applicable retention obligations.
To submit a request, email:
Subject line:
Immenzo Privacy Rights Request
Please include enough information for us to identify the relevant relationship and verify the request.
Where Immenzo processes Personal Data solely on behalf of a customer, we may refer the request to that customer or assist the customer in responding.
The customer remains responsible for determining whether and how the request should be fulfilled.
A person may stop receiving promotional emails by:
A person may continue to receive non-promotional communications necessary for:
Immenzo’s website and Services are intended for businesses and professional users and are not directed to children.
We do not knowingly collect Personal Data directly from children through our website for advertising purposes.
We do not initialize or use AppLovin advertising technologies in connection with users known to be children or digital properties directed exclusively toward children.
Where a customer lawfully submits children’s Personal Data through the Services, that processing must be specifically authorized under the customer agreement and subject to the safeguards required by applicable law.
We may update this Privacy Policy to reflect changes in:
The latest revision date will appear at the top of the Policy.
Where a change materially affects how Personal Data is processed, we will provide appropriate notice.
Where processing depends on consent and the information relevant to that consent materially changes, we will request renewed consent where required.
Questions, privacy requests, or complaints may be sent to:
PT Immenzo Jaya International Email: [email protected] Support: [email protected] Address: [Complete registered or correspondence address]
If Immenzo has formally appointed a person responsible for the personal-data-protection function:
Privacy and Data Protection Contact Email: [email protected]
Where required, this Privacy Policy should also be made available in Bahasa Indonesia. The Bahasa Indonesia and English versions should communicate materially equivalent information.