Privacy Policy

  

Privacy Policy – communitas

Last updated: 13 July 2026

1. Introduction

This Privacy Policy explains how communitas (“App”) operated by XaverTech (“we”, “us”, or “our”) collects, uses, and protects personal data of users who access or use the App.
By using communitas, you agree to the collection and use of information in accordance with this Privacy Policy

2. Controller and Contact Information

XaverTech is the controller of your personal data in connection with the communitas App.
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at: bambang.eko.santoso@gmail.com.

3. Data We Collect

When you use communitas and create an account, we may collect the following categories of information:

• Account information: email address, username, and other profile details you choose to provide.

• Authentication and security information: passwords or authentication tokens (stored securely and not in plain text).

• Usage information: logs related to how you use the App (such as features accessed, timestamps, and basic technical logs) for security, debugging, and analytics.

• Device and technical data: IP address, browser type, device information, and operating system details that are automatically collected when you access the App.

We do not intentionally collect sensitive personal data (such as government identifiers, financial information, health data) unless explicitly described in the App’s functionality and agreed by you.

4. How We Use Your Data

We use the personal data collected for the following purposes:

• To create and manage your user account and allow you to log in and use the App.

• To provide, operate, and maintain app features, including storage and retrieval of your content via Supabase.

• To secure the App, prevent fraud, abuse, and unauthorized access.

• To diagnose and fix technical issues and improve performance.

• To analyze aggregate usage to understand how users interact with communitas and improve the user experience.

• To communicate with you about updates to the App, changes to this Privacy Policy, or important security notices.

5. Legal Basis and Local Compliance

We process your personal data based on your consent (for account creation), performance of a contract (to provide the App), and our legitimate interests (security, improvement).
We aim to follow applicable personal data protection principles, including those introduced under Indonesia’s Personal Data Protection (PDP) framework, such as lawfulness, purpose limitation, data minimization, accuracy, security, and accountability.

6. Use of Supabase and Third‑Party Services

Communitas uses Supabase as its backend infrastructure for database, authentication, and related cloud services.
Supabase acts as a data processor that stores and processes your personal data on our behalf in accordance with their Data Processing Addendum and security practices.

In using Supabase, your data may be stored on servers located outside Indonesia, subject to appropriate technical and organizational security measures.
We do not sell your personal data to third parties; third‑party providers only process data as necessary to provide their services to us and are bound by contractual obligations to protect your data.

If communitas integrates additional third‑party services in the future (for example: analytics, push notifications, payment providers), we will update this Privacy Policy and clearly indicate which data is shared and for what purposes.

7. Data Sharing and Disclosure

We may share your data with the following categories of recipients, but only as necessary:

• Service providers: Supabase and other technical vendors that help us host, store, secure, or analyze data related to the App.

• Legal and regulatory authorities: when required to comply with applicable law, regulation, legal process, or governmental request.

• Business transfers: if XaverTech undergoes a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to continued protection and notice to you.

We do not share your personal data with other users of the App unless you choose to make such information publicly visible via App features.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.
Generally, account data is stored while your account is active; when you delete your account or request deletion, we will remove or anonymize your personal data within a reasonable period, subject to backups and legal obligations.

Technical logs and aggregated usage data may be retained longer for security, analytics, and audit purposes, but this data will not be used to identify you directly where possible.

9. Your Rights

Subject to applicable laws, you have the following rights with respect to your personal data:

• Access: You can request information about the personal data we hold about you.

• Correction: You can request that inaccurate or incomplete data be corrected.

• Deletion: You can request deletion of your personal data, especially when it is no longer necessary for the purposes for which it was collected.

• Restriction: You can request that we restrict processing of your data in certain circumstances.

• Objection: You can object to certain types of processing, such as direct marketing, if applicable.

• Data portability: Where technically feasible, you can request a copy of certain personal data in a structured, commonly used format.

To exercise any of these rights, please contact us at bambang.eko.santoso@gmail.com and clearly indicate your request; we may need to verify your identity before acting on it.

10. Data Deletion Request

You may request deletion of your personal data at any time by contacting us at bambang.eko.santoso@gmail.com.  Please include your account email and a clear description of the data you want deleted. We will review your request and, subject to legal or security obligations, delete or anonymize your personal data within a reasonable period.

11. Security

We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
These measures include secure storage through Supabase, access control, encryption where appropriate, and regular monitoring for potential security issues.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your login credentials and for all activities under your account.

12. Children’s Privacy

Communitas is not intentionally directed at children under 13, and we do not knowingly collect personal data from children under this age without verifiable parental consent.
If you believe that a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete such information.

If your app is intended for children or falls under age‑restricted content categories, you may need to provide additional disclosures and comply with specific policies; we can update this section if communitas targets children.

13. International Data Transfers

Because Supabase and other technical providers may host data on servers outside Indonesia, your personal data may be transferred to and processed in other countries that may have different data protection laws.
We endeavor to ensure that such transfers comply with applicable legal requirements and that your data remains protected through appropriate safeguards and contractual commitments.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App’s functionality, or applicable laws and regulations.siplawfirm+1
When we make material changes, we will update the “Last updated” date at the top of this document and, where appropriate, provide notice within the App or via other communication channels.

You are encouraged to review this Privacy Policy periodically to stay informed about how we protect your information