Privacy Policy

At PT. Premium Fast Network, we are committed to protecting your privacy and handling your personal information with care and transparency. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our Kubernetes-as-a-Service platform.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, company details, and billing information when you register for an account
• Profile Information: Additional details you choose to add to your profile, including job title, team role, and preferences
• Payment Information: Credit card details, billing addresses, and payment history (processed securely through third-party payment processors)
• Communications: Messages, feedback, support requests, and other communications you send to us
• Content and Data: Applications, configurations, files, and other content you upload, store, or process through our services

1.2 Information We Collect Automatically

• Usage Data: How you interact with our services, including features used, time spent, and navigation patterns
• Device Information: IP addresses, browser types, operating systems, device identifiers, and technical specifications
• Log Data: Server logs, error reports, API calls, and system performance metrics
• Location Data: General geographic location based on IP address for service delivery and compliance
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies

1.3 Information from Third Parties

• Integration Data: Information from connected services like Git repositories, CI/CD pipelines, and monitoring tools
• Authentication Providers: Basic profile information when you use OAuth providers (GitHub, Google, etc.)
• Business Partners: Information from resellers, affiliates, or integration partners with your consent

2. How We Use Your Information

2.1 Service Provision and Management

• Creating and maintaining your account and user profiles
• Providing access to our Kubernetes platform and associated services
• Processing deployments, managing infrastructure, and ensuring service availability
• Billing, payment processing, and account management
• Providing technical support and customer service

2.2 Service Improvement and Development

• Analyzing usage patterns to improve platform performance and user experience
• Developing new features and services based on user needs
• Conducting research and analytics for product development
• Testing and optimizing our infrastructure and applications

2.3 Communication and Marketing

• Sending service-related notifications, updates, and security alerts
• Providing educational content, newsletters, and product announcements (with consent)
• Conducting surveys and gathering feedback
• Personalizing your experience and content recommendations

2.4 Security and Compliance

• Monitoring for security threats, fraud prevention, and abuse detection
• Ensuring compliance with legal obligations and regulatory requirements
• Conducting security audits and incident response
• Enforcing our Terms of Service and Acceptable Use Policy

3. Information Sharing and Disclosure

3.1 We Do Not Sell Personal Information

We do not sell, rent, or trade your personal information to third parties for monetary consideration.

3.2 Service Providers and Partners

We may share information with trusted third-party service providers who assist us in delivering our services:

• Infrastructure Providers: Cloud hosting, CDN, and infrastructure services
• Payment Processors: Secure payment processing and billing services
• Analytics and Monitoring: Service performance, security monitoring, and analytics
• Communication Tools: Email delivery, customer support, and communication platforms
• Security Services: Threat detection, fraud prevention, and security analysis

3.3 Legal Requirements and Protection

We may disclose information when required by law or to protect our rights and users:

• Compliance with legal processes, court orders, or government requests
• Protection of our rights, property, or safety, or that of our users
• Investigation of fraud, security incidents, or policy violations
• Enforcement of our Terms of Service and other agreements

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership.

4. Data Storage and Security

4.1 Data Storage Locations

Your data is primarily stored in secure data centers located in Indonesia and Singapore, with additional backup locations as needed for service reliability. We may process data in other jurisdictions where our service providers operate.

4.2 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: Data encrypted at rest using AES-256 and in transit using TLS 1.3
• Access Controls: Multi-factor authentication, role-based access, and regular access reviews
• Network Security: Firewalls, intrusion detection, and network segmentation
• Monitoring: 24/7 security monitoring, log analysis, and incident response
• Compliance: SOC 2 Type II certification and regular security audits
• Employee Training: Regular security training and background checks for staff

4.3 Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Account Data: Retained while your account is active and for 30 days after termination
• Service Data: Application data retained according to your backup settings and retention preferences
• Log Data: System logs retained for up to 12 months for security and debugging purposes
• Billing Records: Financial records retained for 7 years as required by law
• Communications: Support communications retained for 2 years for service improvement

5. Your Rights and Choices

5.1 Access and Portability

• Request access to personal information we hold about you
• Export your data in standard formats for portability
• Receive copies of your service configurations and application data

5.2 Correction and Updates

• Update your account information and preferences through our platform
• Correct inaccurate or incomplete personal information
• Modify communication preferences and notification settings

5.3 Deletion and Restriction

• Request deletion of your personal information (subject to legal retention requirements)
• Restrict processing of your information in certain circumstances
• Close your account and request data deletion

5.4 Communication Preferences

• Opt out of marketing communications while receiving service-related messages
• Customize notification settings for different types of communications
• Unsubscribe from newsletters and promotional content

6. Cookies and Tracking Technologies

6.1 Types of Cookies We Use

• Essential Cookies: Required for basic site functionality, authentication, and security
• Performance Cookies: Help us analyze site usage and improve service performance
• Functional Cookies: Enable enhanced features and personalization
• Analytics Cookies: Provide insights into user behavior and service optimization

6.2 Cookie Management

You can control cookies through your browser settings, but disabling certain cookies may affect site functionality. We provide cookie preference controls in your account settings.

7. International Data Transfers

When we transfer personal information internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions recognizing sufficient data protection levels
• Binding Corporate Rules for transfers within corporate groups
• Certification schemes and approved codes of conduct

8. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected such information, we will delete it promptly.

9. Third-Party Links and Services

Our platform may contain links to third-party websites or integrate with external services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing personal information.

10. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant supervisory authorities within 72 hours when required
• Inform affected users without undue delay when high risk is involved
• Provide clear information about the nature of the breach and recommended actions
• Offer support and assistance to affected users

11. Privacy by Design

We incorporate privacy considerations into our product development process:

• Data minimization - collecting only necessary information
• Purpose limitation - using data only for stated purposes
• Storage limitation - retaining data only as long as necessary
• Security by default - implementing strong security measures
• Transparency - providing clear information about data practices

12. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal requirements. Material changes will be communicated through:

• Email notifications to registered users
• Prominent notices on our platform
• Updates to the "Last updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

13. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

General Privacy Inquiries

• Email: privacy@pfnapp.com
• Phone: +62-81216667996
• Address: Jl. Bungurasih Tengah 70, Sidoarjo, Jawa Timur, Indonesia 61256

Data Protection Officer

• Email: dpo@pfnapp.com
• Role: Responsible for data protection compliance and privacy matters

Regulatory Authorities

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with relevant data protection authorities in your jurisdiction.