Privacy Policy

1. Who is responsible

Gevian Global Technology, Jakarta, Indonesia, acts as the data controller for personal data processed through this website. You can reach us at hello@gevian.id for any question about this policy.

2. What this website collects

This site has no accounts, no advertising network, and no third-party embeds. In practice, that limits the data to three things.

The demo request form

If you submit the demo form, we receive what you enter: your name, your work email address, your company, and your description of the processes you want to improve. A phone or WhatsApp number, your team size, and the module you are interested in are optional — the form works without them. We also record the date and time, and the IP address the submission came from, so that abuse of the form can be investigated.

The form posts to our own server. It is not handled by a third-party form service, so your details are not passed to another company in order to reach us. Submissions are stored on that server and forwarded to our own mailbox by email.

Server logs

Our web server records each request in standard access logs. Those entries contain your IP address, the date and time, the page requested, the HTTP status returned, the referring page if your browser sends one, and your browser's user-agent string. These logs exist so we can keep the site running, diagnose errors, and detect abuse.

Correspondence you send us

If you email hello@gevian.id or contact us through a messaging channel listed on this site, we receive whatever you choose to include — typically your name, your email address or phone number, your organization, and what you write about your requirements.

3. Cookies and tracking

This website sets no cookies and runs no analytics or tracking scripts. There is nothing to consent to and nothing to opt out of. Should we add analytics later, this policy will be updated before that change goes live.

4. Why we process this data

• To deliver and secure the website, and to investigate faults and abuse — based on our legitimate interest in operating our own service.
• To answer your enquiry and, where relevant, to prepare and discuss a proposal — based on the consent you give when submitting the form, and on taking steps at your request prior to entering an agreement.
• To meet record-keeping obligations where Indonesian law requires it.

We do not use form submissions for marketing mailings, we do not build profiles from them, and we do not sell or rent them. Consent to be contacted about your request is not consent to a newsletter.

5. How long we keep it

Form submissions are kept for up to 24 months from the date they are sent, so that a conversation picked up months later still has its context, and are deleted after that. You may ask us to delete yours sooner at any time.

Server logs are retained for up to 90 days and then deleted or overwritten as part of normal log rotation. Business correspondence is kept for as long as the commercial relationship or enquiry remains relevant, and afterwards only where a legal or accounting obligation requires it.

6. Who else sees it

We do not sell personal data and we do not share it for advertising. Data is accessible to our own personnel who need it, and to the infrastructure and email providers that host this website and our mailboxes, acting on our instructions. This website is served from a virtual machine hosted in Singapore, so hosting-related data leaves Indonesia; we take reasonable steps to ensure it stays protected to a comparable standard.

7. Your rights

Under Indonesian Law No. 27 of 2022 on Personal Data Protection you may ask us to confirm what data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, obtain a copy, and withdraw consent where our processing rests on consent. Withdrawing consent does not affect processing that already took place.

Send any of these requests to hello@gevian.id. We will respond within the period required by applicable law. If you believe we have not handled your data lawfully, you may lodge a complaint with the competent Indonesian supervisory authority.

8. Security

The site is served over HTTPS only, with strict transport security and a content security policy applied. Access to the server is limited to named accounts using key-based authentication. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

9. Children

This website addresses organizations, not children, and we do not knowingly collect data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.

10. Changes to this policy

If this policy changes, the revised version will be published on this page with a new date at the top. Material changes affecting how we use data already collected will be communicated directly where we hold contact details for you.