Privacy Policy

Jiayue Jaya service policies

Version date: 2026-10-11

1. Scope and contact This policy covers the Jiayue Jaya website and mobile app serving Jia Yue Jaya Foundation (Yayasan Jia Yue Jaya). For privacy questions, access or correction requests, contact the foundation secretariat at [email protected]. Do not send passwords, verification codes or identity-document images by email. 2. Information and purposes We process the account email and password hash, profile details, contact methods, emergency contacts, passport and visa details and files you choose to submit. Company records, posts, forum replies, reports, event and training registrations, payment-status records and attendance support the corresponding features. Account IDs, IP addresses, device labels, session records and access and audit logs help authenticate users, prevent abuse and investigate security issues. Passwords are hashed; identity-document numbers and private document files stored on the server are encrypted at rest. 3. Visibility and access Directory and contact visibility follow your settings and the audience of each feature. Public posts, public company information and publicly uploaded images can be read by visitors. Private identity documents require authorised access; administrators with the relevant permissions may review them, and private document access is audited. Company members and authorised administrators can access company records according to their roles. Do not put private documents in public content. 4. Permissions and service providers The camera is used when you choose to take a photo or scan a registration QR code. The system photo or file picker supplies only the items you select. The app does not request your phone address book, precise location or microphone. Brevo processes email recipients and transactional or notification messages. Cloudflare processes requests and anti-abuse verification data. Google translation processes administrator-selected publication text when translation is requested. Hosting and delivery providers process the network requests needed to operate the service; processing may take place outside Indonesia. External links are subject to their providers' policies. We do not sell personal data or use it for advertising tracking. 5. Control and deletion You can edit your profile, control contact visibility and notification preferences, sign out other devices and change your password. Request deletion in My Profile → Delete account, or visit https://jiayuejaya.com/en/delete-account. After password confirmation, a 30-day cooling period begins; you may cancel before deletion. The deletion task removes your account, profile, personal identity documents, personal files, sessions, forum posts and replies, and registrations. Unreferenced uploaded files are removed through a retryable file-cleanup queue. Company records shared with the business are retained independently of your personal account; creator references are anonymised, and a company with no remaining administrator is suspended. Contact the secretariat to request correction or removal of personal information embedded in shared company records. 6. Retention and backups Data remains while needed to provide the active account and its features. Deletion removes the live personal records described above. Restricted recovery backups may retain historical copies until rotation: daily database backups use a 30-day retention setting and pre-change snapshots use 90 days, with cleanup on scheduled backup runs. Uploaded-file mirrors remove deleted files on their next successful synchronisation. Security logs and records necessary to address abuse, disputes or legal duties may be retained for those purposes. Restricted backups are not normal user-facing data. 7. Updates The version date identifies this policy. Material changes to data use will be reflected in the service's policy and, where required, a notice or consent request.