Privacy Policy

Your privacy is important to PT Brick Teknologi Indonesia ("BOIVA", "us", "we" or "our"). Hence, BOIVA has developed this Privacy Policy for all users ("you", "your" or "yours") of its website, applications, API, and identity verification services (collectively, termed as "Services") to describe how we collect, use, disclose, store, and transfer your personal data and information ("personal information").

Please read our Privacy Policy thoroughly to ensure you understand our data processing practices for our Identity Verification Services provided, directly to you or on behalf of our clients, and to build trust in our system. We recommend that you check our website from time to time for any changes in the Privacy Policy.

A. Collection of Personal Information

1. The personal information is any information that is used to identify individuals, either separately or in combination with any other information, directly or indirectly through electronic or non-electronic systems.

2. Before and during your use of our identity verification service, some personal information is collected, manually or automatically, with your consent, including but not limited to:

Personal identifiers such as but not limited to name, email address, mailing address, phone number, place and date of birth, information on identity card (KTP), passport, photo, and biometric data;
Document information such as identity document images, document numbers, and document verification results;
Commercial information such as billing information, products or services purchased;
Geolocation;
Device and usage information;
Transactional data including verification requests, verification results, and audit logs;
Cookies and related technologies; and
Additional information related to identity verification Services.

3. While we collect the personal information from you, we can also combine the collected personal information with other information in our possession or that we may receive from third-party sources, including our clients, service providers, and authorized government databases (such as Dukcapil), as per the law to share your personal information with us.

4. If you have an Account and want to use our Service or want to use more than one Service, we may also combine and link various personal information provided by you at various times to facilitate your access and use of the Identity Verification Service.

5. Whenever you use our website or application, certain information may also be collected on an automated basis using cookies. Cookies are small application files stored on your computer, laptop or mobile device. Cookies are used to track your activity to enhance user interface and experience. Most websites and applications support the use of cookies. You can adjust the settings on your computer, laptop or mobile to reject several types of cookies; however, doing so may affect the functionalities available on our website and application.

B. Use of Personal Information

6. The personal information collected from you will be stored and used by BOIVA for the following purposes:

to provide our Identity Verification Services;
to diagnose and fix the issues and improve the Services;
to evaluate and develop new Services;
to comply with legal obligations and law enforcement;
to process payments;
to support business functions and marketing purposes; and
for other uses related to identity verification.

7. The accuracy of the Identity Verification Service we provide depends on the accurate and complete personal information provided by you.

C. Disclosure of Personal Information

8. BOIVA will not disclose your personal information to any third party without your consent or in a manner that would be considered "a sale" under applicable laws, unless there is a legally binding order to do so.

9. However, we may necessarily share your information with various third parties with your consent for the purposes of:

a. Clients: When BOIVA's identity verification services are integrated with our clients' products and services, or BOIVA's products and services are a prerequisite for you to use before using our clients' products and services. In both scenarios, both BOIVA and the clients need to share their personal information amongst themselves for transaction implementation, records, compliance, and audit. The clients may have their own privacy policy.

b. Service Providers: Similar to the relationship we have with our clients, we may also have with our service providers. We may share information with other companies we use to support our Services. These companies provide services like analytics, authentication systems, and customer support. We have contracts with service providers, who are obligated by policy and agreement to provide sufficient privacy protections for that information. At their level, they may also have their own privacy policy.

c. Government Authorities: We may share your personal information with law enforcement officials, government authorities and other parties:

To respond to an emergency that threatens the life, health, and safety of a person
For the public interest or during a pandemic, i.e., public health crisis, contact tracing purposes, or safeguarding our community
Under applicable law, to audit or to respond to legal processes.

d. Authorized Identity Databases: For identity verification purposes, we may query authorized government databases and identity verification systems (such as Dukcapil) to verify the accuracy of the information you provide. This is essential for providing accurate identity verification services.

D. Retention of Personal Information

10. BOIVA keeps your personal information for no longer than necessary for the purposes for which it is processed and/or as required to comply with applicable laws. Where there are technical limitations that prevent deletion or anonymization, we safeguard personal information and limit active use of it.

E. User (Your) Rights

11. The following rights you may be entitled to:

to ask us about the processing of your personal information;
to obtain a copy of the personal information we possess;
to ask us if you believe your information is being processed or stored in violation of the Privacy Policy or applicable laws and regulations;
request transfer of your personal information to another organization in a machine-readable format;
to withdraw your consent to the processing of personal data (where processing of personal data is based on your consent); and
to access your Account and at any time, to add, remove, modify, or update any information that you have provided.

However, please note that certain personal information is required so that we can provide the Identity Verification Services to you. If you request deletion, you may no longer be able to access or use our services.

F. Data Security & Confidentiality

12. BOIVA takes special measures to ensure the safety and security of your data. We ensure that any information provided by you to access or use the BOIVA Account and Service is equipped with standard security features to protect the confidentiality and security of your information, as well as minimize risks associated with data loss, misuse, unauthorized access, and unauthorized disclosure and alteration.

13. BOIVA will notify you in the event there is a failure to protect the confidentiality of your personal data and information in BOIVA's electronic system in accordance with applicable laws and regulations.

G. Third Party Platforms

14. The BOIVA website or application may contain links to other websites or applications, including advertisements or promotional materials, operated by third parties. BOIVA is not liable or responsible for the content on these third-party applications or websites and for the collection, use, storage, sharing, or disclosure of any personal information provided by individuals to these third parties. Please consult the terms and conditions of the third-party websites to find out how they collect and use information.

H. Acknowledgement & Consent

15. By accepting and providing consent to the Privacy Policy for BOIVA Identity Verification Services, you are acknowledging that you have read and agree to accept the Privacy Policy and all its terms. Other specific consents that are required for the data collection, processing, and storage will be provided in each web page/application page where your data is requested.

I. Changes to Privacy Policy

16. BOIVA reserves the right to modify or edit this Privacy Policy at any time at its sole discretion. The revised Privacy Policy will take effect from the time it is uploaded on BOIVA's website. We recommend that you check the site for any changes in the Privacy Policy from time to time. By continuing to access our Identity Verification Services, you have deemed to have agreed to the revised Privacy Policy.