Privacy Policy - Nevacloud

Applies to: All Nevacloud services & websites.

1. Introduction

Nevacloud (PT Delta Awan Angkasa) (“We”) is committed to respecting and protecting the Personal Data of every user of Our services in accordance with Law Number 27 of 2022 concerning Personal Data Protection and the laws and regulations applicable in the Republic of Indonesia.

This Privacy Policy is a form of our transparency in explaining how We collect, use, store, process, share, transfer, and protect Your Personal Data when You access the Nevacloud website and/or use all of Our services.

We process your personal data on valid legal bases in accordance with laws and regulations, including your explicit consent, the fulfillment of contractual obligations in providing services, the fulfillment of applicable legal obligations, and other legitimate interests while continuing to consider your rights.

By accessing the Nevacloud website, registering an account, checking the available consent box, and/or continuously using Our services, You give explicit consent and state that You have read, understood, and agreed to all provisions of this Privacy Policy without coercion from any party.

2. Definitions

• Personal Data: any data concerning an identified or identifiable individual, directly or indirectly, through electronic or non-electronic systems.
• Processing: any activity involving Personal Data, including obtaining, collecting, processing, storing, correcting, using, disclosing, transferring, and deleting/destroying it.
• Personal Data Protection: all efforts to protect Personal Data throughout Processing in order to guarantee the rights of Personal Data Subjects.
• Explicit Consent: Consent that You knowingly and expressly provide for a specific processing purpose
• Fulfillment of Contractual Obligations: Processing necessary to perform the service provision contract between You and Nevacloud.
• Fulfillment of Legal Obligations: Processing carried out to comply with Our obligations under applicable laws and regulations (such as identity verification and tax reporting).
• Legitimate Interest: Processing necessary for Our legitimate interests while continuing to prioritize protection of your rights (such as system security measures and fraud prevention).

3. This policy applies to all Nevacloud services, including:

• Nevacloud's official website;
• Client portal and service panel (MyNevacloud);
• Domain, SSL, and Object Storage services, and related services;
• Other interactions with the MyNevacloud system (for example: support tickets, live chat, email, telephone).

4. Information We Collect

• Log files

Like other websites in general, we collect and use data contained in log files. Information in log files includes your IP (Internet Protocol) address, ISP (Internet Service Provider), the browser you use, the time of your visit, and the pages you open while visiting Nevacloud.

• Cookies

Our website uses cookies to store various information, such as personal preferences when visiting the Nevacloud website and login information. Nevacloud also uses third-party tracking services to support our website. Some of these services may use cookies when tracking activity on our website. Nevacloud works with tracking services such as Google Tag Manager and Microsoft Clarity. Information sent may include the IP address, ISP, browser, operating system you use, and so forth.

• User Data

User data includes name, contact information, email address, demographic data such as postal code, preferences and interests, financial transactions, support ticket history, and other information related to customer surveys and/or offers.

The methods and sources of data collection are: (i) direct interaction, when You register an account, complete a form, purchase a service, submit a request/complaint, or contact customer support; (ii) automatic collection, when You access the website/services (through cookies, server logs, IP addresses, device data, and usage data); and (iii) third parties, such as partners/payment service providers, analytics providers, or third-party integrations related to service provision and operations, to the extent permitted by applicable regulations.

• Purposes of Data Use

We use information and/or Personal Data collected through our website and services for: (i) service provision and operations, including account registration, authentication, account management, transaction processing, and service improvement; (ii) analysis and development, namely understanding service use to improve performance and user experience, including improvements to website features and content; (iii) security and fraud prevention, including preventing unauthorized access, cyber threats, misuse, and conducting internal audits; (iv) administration and communication, including billing, invoice issuance, reporting, and delivery of service-related information; and (v) marketing and personalization, namely presenting advertising targeting based on relevance, providing relevant product offers and/or service surveys, and sending promotional information by email or WhatsApp Messenger, to the extent permitted by applicable laws and regulations and/or based on Your consent. If You use domain name registration services through us, certain data may be used and/or displayed in the WHOIS service in accordance with registrar/registry provisions and applicable regulations.

• Storage

Nevacloud will securely store the personal information of resellers and domain registrants and protect the data from unauthorized access. In addition, we will take appropriate security measures to prevent unauthorized access to, use of, or disclosure of personal information.

• Provision of Information to Third Parties

We will not provide a domain registrant's personal information to third parties without the registrant's written consent, unless required by law, and the only information that may be provided is where the domain was registered according to WHOIS data or the domain provider used.

• Changes

By accessing the Nevacloud website, You agree that this privacy policy may be changed in any respect and at any time by Nevacloud. Your continued use of the Services will be deemed agreement to those changes. If You do not wish to continue using our Services because of those changes, You may notify Nevacloud that You wish to stop using the Services.

5. Data Sharing, Third Parties, and Overseas Transfers

As part of providing Nevacloud services, We may share Your Personal Data with technology/infrastructure providers (for example: data centers, cloud, networks, security, and payment providers). In this context, Your Personal Data may be transferred, stored, and/or processed outside the territory of the Republic of Indonesia. Data recipients in other jurisdictions may be subject to different data protection provisions.

This transfer/processing may be necessary to manage accounts and provide services, including customer support, service/offer-related communications, risk control, fraud prevention, legal compliance, and payment processing. We take reasonable measures so that such sharing/transfers are carried out with adequate protection and in accordance with applicable regulations.

Nevacloud never sells Personal Data to other parties for marketing purposes.

6. Security and Personal Data Protection

Nevacloud (PT Delta Awan Angkasa) ( “We” ) applies strict technical and organizational security standards to protect your personal data from unauthorized access, alteration, disclosure, and unlawful destruction. Our security commitment is implemented through the following measures:

• Technical and Mitigation Measures: We use current encryption technology (such as SSL/TLS) for data transmission, implement multi-level authentication systems, limited internal access management (principle of least privilege), and layered infrastructure protection against cyber threats.
• Handling Personal Data Protection Failures: If a Personal Data protection failure or cybersecurity incident occurs, Nevacloud is committed to making best-effort recovery measures to mitigate the resulting impact. We will provide written notification to You as the Personal Data Subject and to the relevant Authorities no later than 3x24 hours (three times twenty-four hours) after the incident becomes known, in accordance with the provisions of the Personal Data Protection Law.

7. Rights of Personal Data Subjects

As part of Our compliance with the Personal Data Protection Law (PDP Law) and Our commitment to transparency, Nevacloud guarantees Your rights regarding Personal Data as follows:

• Right of Access and Correction: Complete, update, or correct errors in your data through the MyNevacloud dashboard.
• Right to Deletion and Destruction: Request deletion of your data from Our systems, provided that fulfillment of this right will be adjusted to the data retention obligations prescribed by laws and regulations.
• Right to Withdraw Consent: Withdraw previously granted permission to process data.
• Right to Portability: Obtain or transfer your data to another party in a commonly used format in accordance with secure technical standards.
• Exercise of Rights: Any request concerning the rights above may be submitted in writing to Our Data Protection Officer (DPO) by email: dpo@nevacloud.com. We will process Your request within a maximum of 3x24 hours after identity verification is completed.

8. Data Retention

Data is stored for as long as:

• the service relationship continues; and/or
• necessary for the processing purposes described in this policy; and/or
• required by law.

We store Your Personal Data for the duration of the service relationship to fulfill the processing purposes. After the service ends, We will retain it for a period of at least 5 (five) years to comply with regulations concerning Electronic Transactions, or longer if required by laws and regulations concerning taxation and other legal provisions applicable in Indonesia.

9. Limitation of Liability

Nevacloud is committed to providing the best data protection standards, but You understand and agree to the following limitations of Our liability:

• Third-Party Actions: Nevacloud is not responsible for failures to protect Personal Data caused by negligence or unlawful acts by third parties not directly affiliated with Us, including but not limited to: links to external websites, third-party services that You integrate through the control panel, or payment gateway providers.
• Account & Credential Security: You are fully responsible for maintaining the confidentiality of your username, password, and account access code (OTP). Nevacloud cannot be held liable for any form of data misuse or loss arising from Your negligence in maintaining the security of your device or account credentials.
• Data Accuracy: Nevacloud processes Personal Data based on the information You provide. We are not responsible for data inaccuracies or legal consequences arising from Your provision of incorrect, incomplete, or misleading data.
• Force Majeure: Nevacloud is released from liability for failure or delay in fulfilling data protection obligations caused by events beyond Our reasonable control, including but not limited to: natural disasters, war, riots, nationwide internet infrastructure failures, cyberattacks not anticipated by current security standards (zero-day attacks), or changes in government policy that directly affect services.
• Limit on Losses: To the extent permitted by applicable law, Nevacloud's cumulative liability for all claims arising from or related to the processing of Personal Data under this Privacy Policy is limited to the amount of service fees You paid to Us during the last 12 (twelve) months before the claim arose.

10. Changes to the Privacy Policy

We may update this policy from time to time to reflect changes in data practices, technology, or regulations. Changes will be announced through Nevacloud's official website. Use of the services after changes take effect is deemed agreement to the latest policy.

11. Contact Nevacloud

If You need assistance or have questions about this Privacy Policy, please contact: dpo@nevacloud.com