This policy explains how PT Levenium Digital Indonesia (“we”, “us”) handles personal data in Monara. It follows Indonesia’s Personal Data Protection Law, Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi), and its implementing regulations.
Who is responsible for your data
PT Levenium Digital Indonesia, Jalan K.H. Syahdan No. 26, RT 009/RW 012, Kel. Palmerah, Kec. Pal Merah, Kota Administrasi Jakarta Barat, DKI Jakarta 11480, runs Monara. Who decides what happens to your data depends on how you use the service:
- Customers and their staff. For the account you sign in with and for the billing details of your organization, we are the data controller.
- People who take part in an event. When you register for an event, buy a ticket, visit a booth or fill in a form, the organizer running that event is the data controller. It decides what it collects and why. We are its data processor: we hold and process that data on the organizer’s instructions. Questions about it are best sent to the organizer first; we will help them answer.
What we collect
- Account details: name, email, phone number, job title, company, profile photo, and your password, stored only as a one-way hash. If you sign in with Google, we receive your name, email and photo from it.
- Billing details: the company name and address an invoice goes to, the finance contact, the plan, invoices, payments and receipts.
- Event participation: registrations, answers to registration and form questions, tickets, orders, hotel reservations, check-ins and badge prints, meetings booked, and leads an exhibitor scans with your permission.
- Payments: the amount, items, status and the payment method used. Card numbers and bank credentials are entered on the payment provider’s own page and never reach us.
- Messages: chats, support conversations, messages sent through our contact form, emails sent through the service, and what you ask the AI assistant.
- Files: photos, documents and logos you upload.
- Usage and device data: pages viewed, actions taken, IP address, browser and device type, approximate location from the IP address, and the time of each visit.
How we use it
- To run the service: sign you in, run events, issue tickets, send confirmations and e-tickets, and check people in.
- To bill customers: issue invoices, record payments and send receipts.
- To keep the service safe: detect fraud, abuse and attacks, and record who changed what.
- To support you, and to tell you about changes to the service or to these policies.
- To improve the service, using usage data that is aggregated wherever we can.
- To meet legal duties, such as tax records and lawful requests from the authorities.
We process data because it is needed to provide a service you asked for, because the law requires it, because of our legitimate interest in running a safe service, or because you agreed. Where we rely on your agreement, you can withdraw it at any time.
We do not sell personal data, and we do not use it for advertising.
Who we share it with
- Event organizers receive the data you give their events. Exhibitors receive your details when you let them scan your badge or book a meeting with them.
- Service providers that run parts of the service for us, under contracts that limit them to that work: cloud hosting and storage, content delivery and bot protection, email delivery, payment processing, AI features, and Google for sign-in and the analytics and spreadsheet exports a customer turns on.
- Authorities, when the law requires it, and professional advisers bound by confidentiality.
Some of these providers store or process data outside Indonesia. When they do, we make sure the protection is at least what Indonesian law requires.
How long we keep it
We keep account data while your account is open. Event data stays as long as the organizer keeps the event, so they can run it, answer questions and meet their own record-keeping duties. Invoices and payment records are kept as long as tax law requires. Security logs are kept for a limited time and then deleted. When data is no longer needed, we delete it or make it anonymous.
How we protect it
Data travels over encrypted connections. Passwords are hashed, staff access is limited to what each role needs, and every account can turn on passkeys. No system is perfectly secure. If a breach puts your data at risk, we notify you and the authorities within the time the law sets.
Your rights
Under Law No. 27 of 2022 you can ask us to:
- Tell you what data we hold about you, why, and give you a copy.
- Correct data that is wrong or incomplete.
- Delete your data, or stop or limit processing it.
- Withdraw an agreement you gave earlier.
- Hand your data over in a common format.
- Object to a decision made about you by automated processing alone.
You can change most of your details yourself in your account settings. For anything else, email hello@levenium.com. We answer within the time the law sets, and may ask you to prove who you are first. For data an organizer controls, we pass your request on to that organizer. Some data has to stay for legal reasons, such as invoices and payment records, and we tell you if that applies.
Cookies and storage in your browser
We use cookies that keep you signed in and protect forms from forgery. The browser also stores your preferences, such as colour mode and language, and the data the check-in scanner needs to keep working offline. Event websites may count visits for the organizer. We do not use advertising cookies.
Children
The back office is for adults. Events can admit children, but a parent or guardian should register anyone under 18. If you believe a child’s data reached us without that permission, email us and we will remove it.
Changes to this policy
When this policy changes, we update the date at the top. If a change affects how your data is used, we also tell you by email or in the app before it takes effect.
Contact
Questions about this policy or your data: hello@levenium.com, or write to PT Levenium Digital Indonesia, Jalan K.H. Syahdan No. 26, RT 009/RW 012, Kel. Palmerah, Kec. Pal Merah, Kota Administrasi Jakarta Barat, DKI Jakarta 11480.