Privacy Policy

The vantenza.com site is run by PT Vantenza Teknologi Indonesia ("Vantenza", "we", or "us"), a sole-founder limited company (PT Perorangan) with NIB 0310260019605. For the personal data described in this policy, Vantenza is the controller of that personal data: we decide what it is processed for and how. "You" means anyone who opens this site or contacts us.

This policy covers the vantenza.com site, the chat on this site, and your communication with us by email or phone. LiveChat AI and Vantenza AI have their own sites and privacy policies: the LiveChat AI Privacy Policy and the Vantenza AI Privacy Policy.

This policy supplements the Terms & Conditions of this site. Privacy questions can be sent to cs@vantenza.com. Our address and full contact details are in the Contact section at the end of this policy.

The data we process depends on how you use this site:

• When you open the site: usage and technical data recorded by Vantenza CMS, our own measurement system, such as a random visitor ID, the pages you open, clicks, campaign source, IP address, and browser. The full list is in the Cookies and measurement section.
• Server security logs: IP address, time, the page requested, and browser. Cloudflare, our network and security provider, also processes the IP address and request data of every visit.
• When you use the chat: the content of your messages, and any name, email address, or phone number you write in the chat. Chat messages may be answered by AI or by our team. To prepare answers, chat messages are processed by third-party AI providers that may be located outside Indonesia.
• When you email or call us: your email address or phone number, your name, and the content of your message or what you tell us.
• When you request a refund by email: the data asked for in the Refund Policy, such as proof of payment, and bank account or e-wallet details that we use only to send you the refund.

Please do not send passwords, PINs, OTP codes, card numbers, or other sensitive data through the chat or by email.

We use your data to:

• reply to your chats, emails, and calls, and handle questions, consultations, and refund requests;
• measure how this site is used and which campaigns bring visitors;
• measure and improve our ads, as described in the Ads and ad platforms section;
• keep the site secure, detect bots, and prevent abuse;
• improve the site;
• keep transaction records required by law.

The legal bases for processing under the UU PDP:

• Your consent: measurement for ads and analytics in countries whose rules require consent. You can withdraw your consent at any time.
• Performance of a contract, including steps you ask for before a contract is made: replying to your chats, including answers prepared by AI, answering questions and consultations about our products, and handling refund requests.
• Legal obligation: keeping transaction records.
• Legitimate interests: security and abuse prevention, including bot detection; measurement with an option to refuse in countries that allow it; and improving the site.

To measure visits and ads, this site uses Vantenza CMS, a measurement system we built and run ourselves. A small script on each page sends data to an address on the same site domain (under /_vz/). That data is handled by our own server (cms.vantenza.com), not by a third party.

Vantenza CMS may record: a random visitor ID; the pages you open and the page you came from (referrer); clicks on contact, chat, and purchase links, and similar actions; campaign parameters in the page address (utm_*) and ad click IDs (gclid, gbraid, wbraid, fbclid, ttclid, twclid, li_fat_id, msclkid, ScCid, epik, rdt_cid); IP address; browser and device type (user agent); page language; the country Cloudflare determines from the IP address; the Global Privacy Control signal; whether you have interacted with the page; and your consent choice.

Email addresses or phone numbers from purchases or from prospective customers (leads) are stored only as a one-way hash (SHA-256), never in plain text, and only when ads consent applies.

Vantenza CMS uses the following first-party cookies, set by our server on this site's domain:

• _vz: random visitor ID. Expires after 90 days. This cookie can only be read by the server (HttpOnly).
• _vzc: your consent choice for ads and analytics. Expires after 180 days.
• _fbp and _fbc: browser identifier and ad click identifier in Meta's format. Both expire after 90 days. Used only to match conversions with Meta when sending data to Meta is turned on.

If we turn on the Google tag for remarketing or Google Analytics, that tag may set the _ga cookie and similar Google cookies. The Google tag loads only after you interact with the page and only with ads consent.

We also use Cloudflare Web Analytics, which only produces aggregate visit statistics and uses no cookies. Cloudflare may also set the __cf_bm security cookie to tell visitors apart from bots, which lasts at most 30 minutes. The chat feature keeps a conversation identifier in your browser storage so that the chat stays connected.

How we ask for consent depends on your country, which we determine from your IP address:

• Indonesia, Malaysia, the Philippines, and other countries without specific rules: we show a notice with an option to refuse. Measurement for ads and analytics runs until you refuse.
• Thailand, European Union and European Economic Area countries, the United Kingdom, and Switzerland: no measurement for ads or analytics until you agree.
• United States: a notice with an option to refuse. We treat a Global Privacy Control signal from your browser as a refusal for ads.
• Vietnam: no measurement at all.

The consent banner appears after your first interaction with the page, such as scrolling, tapping the screen, or pressing a key. Your choice is stored in the _vzc cookie. To change it, delete this site's cookies in your browser settings so that the banner appears again, or email cs@vantenza.com.

To measure and improve our ads, our server may send conversion events, such as a consultation request or a purchase, directly to ad platforms. This runs from server to server, and only for visitors whose ads consent applies under the country rules in the Cookies and measurement section.

The ad platforms we use or may use include Meta (Facebook, Instagram), Google (Google Ads, Google Analytics), and TikTok. The data sent is a hash of the email address or phone number, the IP address, user agent, ad click ID, and the event itself. We never send email addresses or phone numbers in plain text.

Ad platforms process that data under their own terms and privacy policies, and may process it outside Indonesia.

We do not sell your personal data. You can refuse measurement for ads through the consent banner.

To run this site, your data may be received or processed by the following parties:

• DigitalOcean: our server provider, with a data center in Singapore.
• Cloudflare: network, security (protection from DDoS attacks and bots), DNS, and Cloudflare Web Analytics. Cloudflare processes IP addresses and request data on its network in many countries.
• Third-party AI providers: process chat messages to prepare answers.
• Email delivery services: carry email between you and us.
• Ad platforms, such as Meta, Google, and TikTok: only when ads consent applies, as described in the Ads and ad platforms section.

The chat feature uses LiveChat AI, which Vantenza runs itself at chat.vantenza.com. Vantenza CMS is also our own system, not a third party.

Our servers are in a DigitalOcean data center in Singapore, so your data is stored outside Indonesia. Cloudflare, AI providers, and ad platforms may also process data outside Indonesia.

We transfer personal data outside Indonesia in line with the UU PDP: to countries with an equal or higher level of personal data protection, with adequate and binding personal data protection, or with your consent.

We keep data for the following periods:

• Visit data in Vantenza CMS, namely events (including IP address and user agent), visitor records, and campaign data: 90 days.
• Logs of events sent to ad platforms: 30 days.
• Records of consent choices: 2 years, as proof of consent.
• Cookies: for the expiry periods given in the Cookies and measurement section.
• Server security logs: for a limited period, then deleted on a regular basis.
• Data from chat, email, and phone: as long as needed to reply to and handle your requests, and to meet legal obligations.
• Refund data: as long as needed to process the refund, and to meet legal obligations, such as keeping transaction records.

Data already received by ad platforms or other service providers is kept under those parties' own policies.

We protect your personal data in ways that include the following:

• email addresses and phone numbers for ad measurement are stored only as one-way hashes;
• the visitor ID cookie can only be read by our server (HttpOnly);
• Cloudflare protects the site from DDoS attacks and bots;
• we use server security logs to detect and handle incidents;
• staff actions in Vantenza CMS are recorded in an audit log that is kept for 2 years, without visitor data.

We never ask for your PIN, password, OTP code, or card number. No system is completely secure. If a personal data protection failure affects your data, we will notify you and the competent authority as required by the UU PDP.

Under the UU PDP, you have the right to:

• get information about the processing of your personal data, including its purpose and basis;
• access and get a copy of your personal data;
• correct and update your personal data;
• request the deletion or destruction of your personal data;
• withdraw your consent at any time;
• object to processing for direct marketing or profiling, and to decisions based solely on automated processing;
• delay or restrict the processing of your personal data;
• get your personal data in a commonly used format, as far as the UU PDP provides;
• file a complaint with the authority responsible for personal data protection.

To exercise your rights, email cs@vantenza.com and describe your request. To protect your data, we may verify your identity before acting on your request. We respond to requests within the time limits set by the UU PDP. Data we are required by law to keep, such as transaction records, is kept for as long as that obligation applies.

For measurement and ads, you can also refuse directly through the consent banner, or change your choice as described in the Cookies and measurement section.

This site is not meant for children. If you are under 18 years old, using services that require personal data must be done with the consent of a parent or guardian. A parent or guardian can contact us at cs@vantenza.com to ask for their child's data to be deleted.

We may update this Privacy Policy, for example because of changes to the site, services, service providers, or regulations. The latest version is always available on this page, with the update date at the top. Changes apply from that date and do not apply retroactively.

This document is written in Indonesian. Translations into other languages are provided for convenience. If the content of the Indonesian version and a translation differ, the Indonesian version prevails.

Questions and requests about this Privacy Policy and your personal data can be sent to cs@vantenza.com.

• Email: cs@vantenza.com
• Phone: 0811-6884-2424
• Address: Dsn Gisikan RT 002 RW 005, Desa Banjarsari, Kec. Bandarkedungmulyo, Kab. Jombang, Jawa Timur 61462 (opens in a new tab)

All the ways to contact us are on the Contact Us page.