Privacy Policy
Last updated: 19 September 2026
This Privacy Policy explains how PT Triva Digital Solution ("Trivacloud", "we") collects, uses and protects personal data when you use our website, client area and services. We process personal data in accordance with applicable law, including Indonesia's Personal Data Protection Law (Law No. 27 of 2022).
1. Data we collect
- Account data: name, email address, and optional details such as company name, address and phone number.
- Billing data: invoices, payment status and transaction references. Card and wallet details are handled directly by our payment providers; we do not store card numbers.
- Service data: server details (IP addresses, hostnames, operating system), support tickets and communications with us.
- Technical data: IP addresses, browser type, login times and security logs used to protect accounts and detect abuse.
- Data on your servers: we do not access the content of your servers, except when necessary to provide support you request, to investigate abuse, or when required by law.
2. How we use your data
- To create and manage your account and provide the Services.
- To process payments, issue invoices and prevent fraud.
- To send service emails, such as order confirmations, invoices, server details, security alerts and support replies.
- To keep our network secure and handle abuse reports.
- To comply with legal, tax and accounting obligations.
We do not sell your personal data. We do not send marketing emails without your consent.
3. Service providers
We share data only with providers that help us operate the Services, and only as needed:
| Provider | Purpose | Location |
|---|---|---|
| OVHcloud | Server infrastructure and backups | Canada |
| Cloudflare | DNS, network security and email routing | Global |
| Brevo | Sending service emails | European Union |
| Midtrans | Payments in Indonesian Rupiah | Indonesia |
| PayPal | International payments | Global |
| Google reCAPTCHA | Protection against automated abuse | Global |
| Google Ads | Measuring which adverts lead to an order | Global |
Because some providers operate outside Indonesia, your data may be transferred to other countries. We choose providers that apply appropriate security measures.
4. Cookies and local storage
We use essential cookies to keep you signed in, protect forms (CSRF) and remember your language, currency and theme preferences. Google reCAPTCHA may set its own cookies on login and registration pages.
We also run the Google Ads tag on our public pages. It tells us which advert brought a visitor and whether that visit ended in a paid order, so we stop paying for adverts that bring nobody. When an invoice is paid we send Google the invoice number, the amount and the currency — never your name, address or payment details. We do not sell data, and we do not use it to follow you around other websites for our own advertising beyond Google's own measurement. Your browser settings and Google's ad settings let you limit this.
5. Data retention
- Account and service data are kept while your account is active.
- Invoices and payment records are kept for as long as required by tax and accounting laws.
- Email and security logs are kept for up to 90 days.
- Data on a terminated server is permanently deleted as described in our Terms of Service. Infrastructure backups containing it expire automatically within about 4 weeks.
6. Security
We protect data with encryption in transit (HTTPS), encrypted storage of sensitive credentials, access controls, two-factor authentication for staff and regular backups. No system is completely secure, so please use a strong password and keep your SSH keys private.
7. Your rights
You may request access to, correction of, or deletion of your personal data, or withdraw consent where processing is based on consent. Some data must be kept to meet legal obligations. You can update most details in the client area; for other requests, contact us.
8. Children
Our Services are not intended for children under 18 without the consent of a parent or legal guardian.
9. Changes
We may update this Privacy Policy. The latest version is always published on this page with its "Last updated" date.
10. Contact
PT Triva Digital Solution (Trivacloud) · support@trivacloud.com