Privacy Policy
Last updated: [date]
Who we are
[Company legal name, e.g. PT …], registered at [registered address], operates the ERILO website (erilo.ai) and the ERILO service. We are the personal data controller: we decide what personal data is collected and how it is used. In this policy, “we”, “us” and “ERILO” refer to the company. For questions about your personal data, email sales@erilo.ai.
What we collect
When you use the contact form on the website, we collect:
- your name
- your company
- your work email
- your WhatsApp number
- the workflow you would like to start with (for example: finance and bookkeeping, inventory, procurement, project costing, management analysis, or something else)
We may also receive personal data you send us by email or otherwise. The website does not ask for sensitive personal data such as health or biometric data.
Why we use your data, and on what basis
We process personal data only where we have a legal basis under Article 18 of Law No. 27 of 2022 on Personal Data Protection (UU PDP).
- To respond to your inquiry — when you submit the contact form, we use your details to answer your inquiry and follow up about ERILO. Basis: to fulfil a contract, or to take pre-contractual steps at your request; where relevant, our legitimate interest in responding to a business inquiry.
- To understand how the website is used — we measure page views and usage in aggregate. Basis: our legitimate interest in understanding and improving the site.
- To deliver and display the website — the hosting and font-loading services below do this. Basis: to fulfil a contract with you as a visitor.
We do not sell personal data, and we do not use your data for any purpose other than those listed above.
How the form works
The contact form is handled by Web3Forms, a third-party form service. When you submit the form, your answers are delivered to our email address, sales@erilo.ai, as an email message via Web3Forms. Web3Forms may handle and store the submission in accordance with its own terms and privacy policy.
Website services
- Vercel Web Analytics — cookieless analytics. It measures usage in aggregate (for example, page views and time on page). It does not use cookies, does not track you across websites, and does not identify you as an individual.
- Google Fonts — the Inter font is loaded from Google Fonts. Google may receive standard request information (for example, IP address and browser type) when fonts are loaded.
- Vercel — the website is hosted on Vercel. Vercel processes standard technical information (for example, IP address, device and pages requested) to host the site.
Data outside Indonesia. Some of these services are operated by foreign companies, and your data may be processed outside Indonesia (for example, in the United States). We use providers that offer appropriate safeguards, such as contract terms and technical measures, and we will confirm the legal basis for each cross-border transfer under UU PDP before launch.
How long we keep your data
- Contact form submissions: while we respond to you and follow up, and until [retention period, e.g. 12 months], after which we delete them.
- Analytics data: kept in aggregate form for [retention period], then deleted or anonymized.
- Where Indonesian law requires us to keep data, we keep it for the period the law requires.
Security
We use appropriate technical and organizational measures to protect personal data, including:
- encryption of traffic between your browser and the website (HTTPS);
- restricting access to personal data to staff who need it;
- reviewing our security measures as the service and our providers change.
ISO/IEC 27001:2022 certification work is in progress, and a full security specification is available on request. No method of transmission or storage is completely secure, so if you believe your data may have been compromised, please contact us at sales@erilo.ai.
Your rights under UU PDP
Under UU PDP, as a data subject you have the following rights:
- Access — to know, view and receive a copy of your personal data and how it is processed;
- Correction — to have personal data corrected where it is inaccurate, incomplete or out of date;
- Deletion — to ask for your personal data to be deleted, for example where the purpose of processing has been met, your consent is withdrawn, or the data is processed unlawfully;
- Withdraw consent — where consent was the legal basis, to withdraw it at any time, without affecting the lawfulness of processing before withdrawal;
- Objection — to object to processing based on our legitimate interest in certain circumstances;
- Portability — to receive your personal data in a usable form and move it to another data controller.
How to exercise your rights. Email sales@erilo.ai and tell us what you would like us to do. We will verify your identity — asking only for the information we need to do so — and respond within [response timeframe, e.g. 30 days]. If we cannot comply, we will explain why. You may also complain to the relevant supervisory authority.
Children
The website is for business (B2B) users and is not directed at children. We do not knowingly collect personal data from children under [16]. If we learn that we have collected a child’s personal data, we will delete it.
Customer business data
This policy covers personal data collected through the website. Business data that you share with us when you use the ERILO service (for example, invoices, bank lines and inventory records) is not covered by this policy. That data is governed by the customer agreement and data processing terms you sign with us, which define the roles, security measures and return or deletion of data at the end of the contract.
Changes to this policy
We may update this policy as our services or legal requirements change. If we make material changes, we will update this page, refresh the “Last updated” date at the top, and, where possible, let you know by email.
Contact
For any question about this policy or your personal data:
- Email: sales@erilo.ai
- Company: [Company legal name, e.g. PT …]
- Registered address: [registered address]