Legal
Privacy Policy
How we collect, use, and protect your personal information.
Last updated: February 24, 2026
IndoPass (“we”, “us”, or “Platform”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when using our services.
1. Information We Collect
Information you provide:
- Full name, email address, phone number
- Passport, identity documents (for application processing)
- Payment information processed via secure third-party gateways
- Profile photo and supporting documents per application type
Automatically collected:
- IP address and geographic location
- Device type, browser, and operating system
- Pages visited, session duration, and interaction data
- Cookies and similar tracking technologies
2. How We Use Your Information
- Process visa and immigration service applications on your behalf
- Communicate updates, status changes, and required actions
- Verify your identity and prevent fraudulent activity
- Provide customer support and resolve disputes
- Improve platform performance and user experience
- Comply with applicable Indonesian laws and regulations
- Send service-related emails and, with your consent, promotional content
3. Information Sharing
We may share your information with:
- Government authorities — as required for visa and permit processing.
- Payment processors — for secure transaction handling.
- Cloud & infrastructure providers — for platform operations.
- Legal authorities — if required by law or court order.
We do not sell your personal data to third parties.
4. Data Security
- SSL/TLS encryption for all data in transit
- Passwords hashed with bcrypt
- Access to personal data restricted on a need-to-know basis
- Regular security audits and vulnerability assessments
5. Your Rights
- Access: Request a copy of your personal data.
- Correction: Update inaccurate information via your account settings.
- Deletion: Request account and data deletion (subject to legal retention obligations).
- Opt-out: Unsubscribe from marketing emails at any time.
To exercise these rights, email us at privacy@indopass.com
6. Data Retention
We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, data is removed within 90 days unless retention is required for legal or regulatory purposes.
7. Policy Updates
We may update this Privacy Policy periodically. Material changes will be communicated via email or Platform notification. Continued use of IndoPass after changes take effect constitutes acceptance.
8. Contact
Email: privacy@indopass.com
Phone: +62 812-3456-7890
Address: Jl. Sudirman No. 1, Jakarta 12190, Indonesia