Legal

Privacy Policy

We value your trust. This page explains what data we collect, why, and how you stay in control of it.

Effective: October 7, 2026Last updated: October 7, 2026

1. Scope

This policy applies to the Rivertide Technologies ("we", "us") website and to communications you have with us through the website, WhatsApp, email, and Instagram. It is written with reference to Indonesian Law No. 27 of 2022 on Personal Data Protection (the "PDP Law").

For projects we deliver for clients, including AI projects, data processing is further governed by the contract or data processing agreement with that client.

2. Data we collect

Data you provide

  • Contact form: name, email address, service of interest, and your message.
  • Direct communication: WhatsApp number, email address, Instagram handle, and conversation content when you contact us.
  • Project data: documents, business information, or other data you share during discussions or project work.

Technical data

  • Our hosting provider automatically records server logs, such as IP address, browser type, pages visited, and access time, for security and operational purposes.
  • This website does not use tracking cookies, advertising, or third-party analytics.

3. How the contact form works

The form on our website does not store data on our servers. When you press send, your message is assembled in your browser and opened in:

  • WhatsApp, if you choose "Send via WhatsApp". The message is only sent once you tap send in WhatsApp, and is subject to WhatsApp's (Meta's) privacy policy.
  • Your email app, if you choose "Send via Email". The message is only sent once you press send in your email app.

4. How we use data

We use your data only to:

  • Respond to questions and consultation requests.
  • Prepare proposals, quotes, and contracts.
  • Deliver, support, and maintain agreed projects.
  • Keep the website secure and prevent abuse.
  • Meet legal obligations, such as administration and tax.

We do not sell your personal data and do not use it for advertising.

5. Legal basis

In line with the PDP Law, we process data based on:

  • Your consent when you contact us and share data.
  • Performance of a contract, including pre-contract steps such as preparing a proposal at your request.
  • Legal obligations that apply to us.
  • Legitimate interests, such as keeping our systems secure.

6. Third parties

We only share data with third parties needed to provide our services:

  • Website hosting provider (Vercel), which processes server logs.
  • Communication providers such as WhatsApp (Meta), email services, and Instagram, depending on the channel you choose.
  • Infrastructure and AI service providers for specific projects, only with the client's approval and as set out in the contract.
  • Competent authorities, where required by law.

Some of these providers may process data outside Indonesia. Where this happens, we ensure an adequate level of data protection as required by the PDP Law.

7. Data in AI projects

  • Client data is never used to train public AI models.
  • Data is processed only for the agreed project purpose, with access limited to team members who need it.
  • For sensitive data, solutions can run in a private cloud or on the client's own servers.
  • When a project ends, data is returned or deleted as agreed in the contract.

8. Retention and security

We keep data only as long as needed for the purposes above. Conversations and inquiries that do not become projects are kept for no more than 2 (two) years after the last communication, unless you ask us to delete them sooner. Project data and contract documents are kept according to the contract and legal requirements.

We apply reasonable security measures, including encrypted connections (HTTPS), access restrictions, and non-disclosure agreements (NDAs) where needed. If a personal data breach occurs, we will notify you and the relevant authority as required by the PDP Law.

9. Your rights

As a data subject, you have the right to:

  • Be informed about how your data is processed.
  • Access and obtain a copy of your data.
  • Correct inaccurate data.
  • Request deletion or destruction of your data.
  • Withdraw your consent.
  • Suspend or restrict processing.
  • Object to decisions based solely on automated processing.
  • Receive your data in a portable format.

To exercise these rights, email info@rivertide.tech. We may ask you to verify your identity and will respond within 3 x 24 hours as required by the PDP Law.

10. Children

Our services are intended for businesses and are not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time, for example if we add analytics tools or new services. The "Last updated" date at the top of this page always shows the current version.

12. Contact us

Questions or requests about personal data can be sent to:

This English version is a translation. If there is any difference, the Indonesian version prevails.