1 Who we are
PT. Konsula Nara Digital ("Hostinga.id"), registered in Indonesia, operates this platform. We are committed to protecting your personal data in accordance with the Indonesian Personal Data Protection Law (UU PDP) and GDPR principles for our global users.
2 Information we collect
- Identity data: Name, email address, business name, billing address.
- Technical data: IP address, browser type, device information, usage logs.
- Account data: Login credentials (encrypted), project preferences.
- Payment data: Processed securely via third-party gateways; we do not store full credit card numbers.
3 Where your data is processed
Transparency regarding data location is core to our mission:
- Domain & email metadata: Stored on Infomaniak servers in Switzerland.
- Basic website data: Hosted on Hostinger Horizons in Lithuania (EU).
- Pro / Enterprise application data: Hosted on Infomaniak Jelastic Cloud in Switzerland.
- Support tickets & logs: Processed on our secure backend, backed up in Indonesia and Switzerland.
We do not transfer data to countries without adequate data protection levels unless necessary for service provision and protected by standard contractual clauses.
4 How we use your data
- Service delivery: To deploy websites, manage domains, and send transactional emails.
- Communication: To contact you regarding account status, billing, and support.
- Improvement: To analyze system performance and improve AI generation logic (anonymized).
- Legal compliance: To fulfill tax obligations and respond to legal requests.
5 Third-party services
We utilize trusted partners who adhere to strict privacy standards:
- Infomaniak: Infrastructure and DNS management (Swiss privacy laws).
- Hostinger: Basic hosting infrastructure (GDPR compliant).
- Proton Mail: Transactional email delivery (zero-knowledge encryption).
- Bunny.net: WAF and CDN security.
- Payment processors: Stripe / PayPal (PCI-DSS compliant).
6 Cookies & tracking
- Strictly necessary: Essential for login and session management.
- Analytics: We use self-hosted Matomo / Plausible (no Google Analytics) to understand traffic patterns anonymously. No cross-site tracking cookies are used.
You can opt out of non-essential cookies via your browser settings.
7 Data security
We implement industry-standard security measures:
- Encryption in transit (TLS 1.3) and at rest.
- Regular security audits and penetration testing.
- Multi-Factor Authentication (MFA) required for admin access.
- Role-Based Access Control (RBAC) to limit internal data exposure.
8 Your rights
Depending on your location, you may have the right to:
- Access: Request a copy of your data.
- Rectification: Correct inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Portability: Receive your data in a machine-readable format.
- Withdraw consent: Opt out of marketing communications.
To exercise these rights, contact privacy@hostinga.id. We will respond within 30 days.
9 Data retention
We retain your data only as long as necessary:
- Active accounts: As long as the subscription is active.
- Churned accounts: 30 days for backups, then 6 months for legal compliance, then permanent deletion.
- Invoices: Retained for 7 years as per Indonesian tax law.
