Privacy policy

PT Cahaves Technology International, of Bandung, Indonesia (“Cahaves”, “we”), is responsible for the personal data this policy describes. It covers this website, cahaves.com, and the requests and emails you send us through it.

Cahaves Cloud and Hisabin have privacy policies of their own, which cover what each holds when you use it: Cahaves Cloud's, external link and Hisabin's, external link. Cahaves Cloud's also covers its documentation, wherever you read it.

The site is built ahead of time and served as finished pages. It has no accounts and runs no advertising. Its fonts, images and scripts come from cahaves.com itself, apart from Google Analytics, described under Counting visits.

Every request to the site passes through Cloudflare, which serves it. Like any web server, Cloudflare receives your IP address and what your browser sends with a request, such as the page asked for and the name of your browser, and uses them to deliver the page and to protect the site from abuse. Cloudflare may set a cookie of its own when it checks that a visitor is a person rather than a program. It handles all of this under its own privacy policy, external link.

The links to LinkedIn, Instagram and our products' sites lead to sites with policies of their own. Nothing from them loads until you follow a link.

We use Google Analytics to count visits, and to see which pages are read and how people find the site, so we know what is useful. On cahaves.com each page loads Google's script, which sets two cookies in your browser: _ga, and one whose name starts _ga_. They tell one visit from the next and last up to two years after your last visit.

Through it, Google receives the pages you open, the site that sent you here, your approximate location, your device, browser and screen size, and how long you stay. It does not receive what you type into the consultation form. We see the results as totals and trends, not as a record of you. Google keeps the details of each visit for up to 14 months and handles them under its own privacy policy, external link.

To leave yourself out, block these cookies in your browser or install Google's opt-out add-on, external link. The site works the same either way.

The consultation form sends what you type from your browser to Ops, the system Cahaves staff work in, at ops.cahaves.com. It sends:

• your name and your email address;

• your business or project, and your WhatsApp number, if you give them;

• what the request is about, and where your budget stands, if you say;

• your message;

• the page you sent it from, and a random code that stops the same request being stored twice.

Ops stores the request with the time it arrived. Staff read it there and mark it as read, replied or archived, and Ops records who did. Only Cahaves staff can sign in to Ops.

Ops also uses your email address to limit how often the form can be used: it refuses a fourth request from the same address within an hour.

An email you send to hello@cahaves.com, and our reply, are kept in Cahaves' mailboxes, which Zoho hosts.

• To answer your request or your email, and to talk with you about the work you asked about.

• To keep the form from being misused.

• To count visits and see how the site is read, through Google Analytics.

• To meet our obligations under the law.

Where a law asks for a legal basis: answering you rests on your asking us to, as a step before any contract between us; limiting the form, and counting visits, rest on our legitimate interest in a site that works and is useful; and records the law makes us keep rest on that obligation.

We do not sell personal data, use it for advertising, or build profiles of you.

These companies do part of the work, and receive only what their part needs:

We disclose personal data to an authority only when the law requires it, and we tell you when we are allowed to.

Ops and its database run on a server in DigitalOcean's Singapore region. The nightly copies of that database are kept in Cloudflare R2, and Cloudflare decides where. Cloudflare, Zoho and Google process data in other countries, including the United States. When personal data leaves Indonesia, it goes only to these providers and only for their part of the work.

• The site and Ops are served over HTTPS.

• The site holds no password, key or database connection: it is built ahead of time and served as finished pages.

• Ops checks every field of a request again before it stores it, and only Cahaves staff can sign in to it.

Indonesia's Personal Data Protection Law (Law No. 27 of 2022), and for people in the European Union or the United Kingdom the GDPR, give you rights over your personal data. You can ask us to:

• tell you what we hold about you and give you a copy;

• correct it;

• delete it, or stop or limit using it;

• withdraw a consent you gave;

• give it to you in a form another service can read.

Email hello@cahaves.com, external link, from the address you used if you can. We answer within the time the law sets. You can also complain to the data protection authority where you live.

This site and its form are meant for adults and for businesses. We do not knowingly hold personal data about children, and we delete it when we learn we do.

The date at the top of this page says when this policy last changed. Each new version is published here with its own date, and we keep the versions it replaces.

PT Cahaves Technology International, Bandung, Indonesia. For anything about your data, email hello@cahaves.com, external link.