Privacy Policy

This Privacy Policy (the “Policy”) governs the manner in which the Darwix AI Indonesia platform (the “Platform”) collects, uses, maintains and discloses information of its users. The Policy also describes the practices that We apply to such user information, users’ privacy rights and choices regarding their information. Where applicable, this Policy is designed to align with Undang-Undang Nomor 27 Tahun 2022 tentang Pelindungan Data Pribadi (“UU PDP”) and related Indonesian data-protection guidance.

1. PERSONAL INFORMATION

“Personal Information” shall mean information which identifies a user or data subject, including first and last name, identification number, email address, age, gender, location, photograph and/or phone number provided at the time of registration, demo request, or any time thereafter on the Platform.

“Sensitive Personal Information” and special categories of data shall include passwords, financial data, health data, and other categories defined under UU PDP and other applicable Indonesian Data Protection Laws.

2. INFORMATION WE COLLECT

We may collect both personal and non-personal identifiable information in a variety of ways:

Personal Identifiable Information: Name, email address, company, role, phone number, and contact details voluntarily submitted by you (including demo and enquiry forms).
Non-Personal Identifiable Information: Browser name, language preference, operating system, and Internet service providers.
Cookies: Our Platform may use “cookies” to enhance user experience. You can choose to set your web browser to refuse cookies.
Service / deployment data: Where we deliver voice, agentic or field-intelligence services to multifinance clients, customer conversation and related operational data may be processed under the client’s instructions and applicable agreements, with in-country residency options (including AWS ap-southeast-3 Jakarta) where contracted.

3. HOW WE USE COLLECTED INFORMATION

We may collect and use your Personal Information for the following purposes:

To provide access to our Platform and fulfil service requests.
To improve our Platform and maintain safety, security and audit readiness.
To communicate with you or market our services/products (with your consent where required).
To meet legal, regulatory and contractual obligations relevant to Indonesian multifinance operations (including OJK conduct expectations where our technology is used by licensed institutions).

4. YOUR RIGHTS

Subject to UU PDP and other applicable law, you have certain rights regarding your Personal Information, including:

Right to Access: Confirmation and access to your data.
Right to Correction: Rectify inaccurate or incomplete data.
Right to Erasure: Request the deletion of your Personal Information.
Right to be Forgotten / restrict processing: Restrict continuing disclosure or processing under certain circumstances under UU PDP.
Right to withdraw consent: Where processing is based on consent, you may withdraw it (without affecting prior lawful processing).

5. DATA PROTECTION

We take all measures reasonably necessary to protect against unauthorized access, use, or destruction of Personal Information. Access is limited to employees and contractors who need to know that information to process it on our behalf. We apply role-based access, encryption, isolation controls and audit logging consistent with our enterprise security programme (including ISO 27001 and SOC 2 aligned controls where applicable).

6. THIRD PARTY WEBSITES

You may find links to third-party websites on our Platform. We do not control the content or links that appear on these sites and are not responsible for their practices.

7. GRIEVANCES

If you have any questions about this Policy or wish to exercise your rights under UU PDP, please contact us at:thecurators@cur8.in

Darwix is a technology provider to OJK-licensed multifinance companies — not itself an OJK-licensed financial institution.