Privacy Policy

1. Information We Collect

We collect the following types of information:

1.1 Personal Information

Data Type	Purpose
Full name, address, date of birth	Account creation and KYC verification
KTP number and photo	Identity verification (required by OJK)
Email address and phone number	Account access and communications
Bank account details	Processing investments and distributions
NPWP (if provided)	Tax reporting compliance

1.2 Usage Information

• Device information (browser type, operating system)
• IP address and location data
• Pages visited and actions taken on our platform
• Investment history and preferences

2. How We Use Your Information

We use your personal information to:

• Provide our services: Process investments, distribute returns, and manage your account
• Verify your identity: Comply with KYC/AML regulations as required by OJK
• Communicate with you: Send transaction confirmations, project updates, and important notices
• Improve our platform: Analyze usage patterns to enhance user experience
• Ensure security: Detect and prevent fraud, unauthorized access, and other security threats
• Comply with legal obligations: Meet regulatory reporting requirements

3. Information Sharing

We do not sell your personal information. We may share your information with:

• Project issuers: Necessary information to process your investments
• Payment processors: To complete transactions securely
• Regulatory authorities: When required by law (OJK, tax authorities)
• Service providers: Third parties who help us operate our platform

All third parties are bound by confidentiality agreements.

4. Data Security

We implement comprehensive security measures to protect your data:

• Encryption: All data is encrypted using 256-bit SSL/TLS encryption
• Secure storage: Data is stored on secure servers with multiple backups
• Access controls: Strict access limitations based on role and necessity
• Regular audits: Security assessments and penetration testing
• Two-factor authentication: Available for all user accounts

5. Data Retention

We retain your personal information for as long as your account is active. After account closure, we may retain certain data for up to 10 years as required by Indonesian financial regulations.

6. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion (subject to legal retention requirements)
• Portability: Receive your data in a structured format
• Withdraw consent: Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@croudium.id

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your login and preferences
• Analyze how you use our platform
• Improve our services based on usage patterns

You can control cookie settings through your browser.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through a notice on our platform.