1. Introduction
KonversiMAX (“we,” “us,” or “our”) is operated by PT Akses Digital Indonesia, a company incorporated in South Jakarta, Indonesia. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the KonversiMAX platform and services.
By registering for and using our services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our services.
This policy applies to all users of KonversiMAX, including business owners, agency operators, and their staff members.
2. Information We Collect
2.1 Information You Provide Directly
- Account Data: Name, email address, password (stored as a cryptographic hash), phone number, and company name upon registration.
- Billing Information: Payment details processed through third-party payment processors. We do not store raw credit card data.
- Support Communications: Messages, emails, or chat records when you contact our support team.
2.2 Information Collected Automatically
- Platform Usage Data: Pages visited within the dashboard, features accessed, session duration, and in-app activity.
- Technical Data: IP address, browser type, operating system, device identifiers, and referring URLs.
- Log Data: Error logs, API access logs, and diagnostic information for maintenance and security purposes.
2.3 Data from Your Business Operations
When you use KonversiMAX for your business, we process the following data on your behalf (acting as a data processor):
- Website visitor data (via the tracking JavaScript snippet)
- WhatsApp conversation data with your customers
- Conversion and transaction data you record
- Phone numbers and contact information of your customers
For this data, you are responsible for ensuring a lawful basis exists for its collection and processing under applicable laws.
3. How We Use Your Information
We use the information collected to:
- Provide, operate, and improve KonversiMAX services
- Verify identity and prevent fraud and abuse
- Send transactional notifications, product updates, and service communications
- Deliver technical support and customer service
- Analyze platform usage for product development and optimization
- Comply with applicable legal obligations and regulations
- Protect the security and integrity of the platform
We do not use your data for third-party advertising or sell your data to third parties.
4. Sharing of Information
We only share your information in the following circumstances:
- Service Providers: Infrastructure partners such as hosting providers, transactional email services, and payment processors — all bound by data processing agreements.
- Integrations You Enable: When you connect advertising platforms (Meta, Google, TikTok), conversion data is transmitted per your instructions.
- Meta (WhatsApp): Data necessary to operate the WhatsApp Business API, in accordance with Meta's platform policies.
- Legal Requirements: When required by Indonesian law, valid court orders, or to protect the rights and safety of users and the public.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
5. Data Security
We implement appropriate technical and organizational security measures, including:
- Encryption of sensitive data in transit (HTTPS/TLS) and at rest
- Multi-guard authentication with separate tokens for owners and staff
- Production-grade webhook signature validation (HMAC-SHA256)
- Strict workspace data isolation — one workspace cannot access another's data
- Daily automated database backups with optional off-site storage
- Rate limiting and intrusion detection mechanisms
No method of data transmission or storage is 100% secure. We cannot guarantee absolute security, but we continuously work to improve our security practices.
6. Your Rights
Subject to applicable law, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data, subject to our legal retention obligations.
- Data Portability: Request your data in a machine-readable format.
- Objection: Object to certain types of data processing.
To exercise any of these rights, please contact us at privacy@konversimax.com. We will respond within 30 business days.
7. Cookies
We use cookies and similar technologies to:
- Maintain your login session
- Remember your preferences
- Analyze platform usage in aggregate
We use functional cookies (required for the service to operate) and optional analytics cookies. You may configure your browser to reject cookies, though this may affect platform functionality.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account closure:
- Account configuration data is deleted within 30 days
- WhatsApp conversation data is deleted within 90 days
- Aggregate and anonymized analytics data may be retained longer
- Financial records are retained for 5 years in accordance with Indonesian tax regulations
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-platform notification at least 14 days before the changes take effect. Continued use of the service after changes take effect constitutes acceptance of the updated policy.
10. Contact Us
For any questions, concerns, or requests regarding your privacy:
- Email: privacy@konversimax.com
- Address: PT Akses Digital Indonesia, Conclave Simatupang, Kawasan Komersial Cilandak No. 410, Jl. Cilandak KKO, South Jakarta, Indonesia
- Website: konversimax.com/kontak