1. Introduction
PT Digital Engineering Indonesia ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platforms.
1.1 Platforms Covered
This Privacy Policy applies to all platforms operated by PT Digital Engineering Indonesia:
GoValid
govalid.org, my.govalid.org
QR code verification and document security platform
NexHub
nexhub.earth, linkhub.earth
Digital identity hub and sustainable link platform
Unified Account: Your account is shared across all our platforms. A single registration provides access to GoValid and NexHub with the same credentials.
2. Information We Collect
2.1 Personal Information
- Name and email address
- Phone number (optional)
- Company/organization information
- Billing and payment information
- Account credentials (encrypted)
2.2 Identity Verification Data
For account verification purposes, we collect:
- Government-issued identification documents (ID card, passport, or driver's license)
- Facial photograph/selfie for identity matching
- Verification status and timestamps
Security Note: All identity verification data is encrypted using AES-256-GCM encryption and stored securely. Access is strictly limited to authorized verification staff only. This data is used solely for identity verification purposes and is never shared with third parties.
2.3 QR Code and Hub Data
GoValid:
- QR code content and metadata
- QR code scan analytics (location, device type, timestamp)
- Custom forms and collected responses
- Documents and files uploaded for verification
NexHub:
- Hub profile information and links
- Hub visitor analytics (views, clicks, device type)
- Social media profile connections
- Elite Link subdomain configurations
2.4 Technical Information
- IP address and browser information
- Device identifiers
- Usage patterns and preferences
- Cookies and similar technologies
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process transactions and send billing information
- Send administrative information and updates
- Respond to inquiries and provide customer support
- Monitor and analyze usage patterns to improve our services
- Detect, prevent, and address technical issues
- Comply with legal obligations
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share your information:
- With your consent
- To comply with legal obligations or respond to lawful requests
- With service providers who assist in operating our platform
- To protect our rights, privacy, safety, or property
- In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication mechanisms
- Employee training on data protection
6. Data Retention and Control
You have full control over your data. You can delete your QR codes and associated files at any time. Deleted QR codes are moved to a trash folder where they remain for 30 days before permanent deletion. All encrypted files are deleted when you delete the associated QR code.
6.1 Identity Verification Data Retention
Retention Period: 5 years after successful verification
Identity verification documents (ID cards, passports, facial photographs) are retained for 5 years after your account has been successfully verified. This retention period is required for:
- Compliance with Indonesian financial regulations and anti-money laundering (AML) requirements
- Fraud prevention and security investigations
- Legal dispute resolution if necessary
- Re-verification purposes if account changes occur
After the 5-year retention period, verification documents are permanently and securely deleted from our systems. You may request early deletion of verification data, subject to legal and regulatory requirements.
7. Your Rights
You have the right to:
- Access your personal information
- Correct inaccurate or incomplete information
- Request deletion of your information
- Object to processing of your information
- Export your data in a portable format
- Withdraw consent at any time
7.1 Account Deletion
You can permanently delete your account and all associated data at any time:
When you delete your account, all your QR codes, scan history, profile data, documents, and personal information will be permanently removed from our servers. This action is irreversible.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Remember your preferences and settings
- Authenticate users and prevent fraud
- Analyze site traffic and usage
- Personalize content and features
You can control cookies through your browser settings, but disabling them may affect functionality.
9. Data Ownership and Encryption
You retain full ownership of all data and files you upload. All uploaded files are encrypted using AES-256-GCM encryption. We cannot access or decrypt your files - only you have control over your data through your encryption keys.
10. Children's Privacy
Our services are not intended for children under 18. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.
11. Third-Party Services
Our platform may contain links to third-party services. We are not responsible for the privacy practices of these services. Please review their privacy policies before providing any information.
12. Updates to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Information
If you have questions about this Privacy Policy or our data practices, please contact us:
14. Consent
By using GoValid or NexHub, you consent to our Privacy Policy and agree to its terms.