Privacy Policy
This English version shall prevail. The Indonesian version is provided for compliance and reference only.
Updated at: 2025-08-22
PT Bridge Note Indonesia (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how your personal and financial information is collected, used, and disclosed by PT Bridge Note Indonesia.
This Privacy Policy applies to our website and its associated subdomains (collectively, our “Service”), alongside our application. By accessing or using our Service, you signify that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal and financial information as described in this Privacy Policy and our Terms of Service.
Definitions and Key Terms
- Cookie: A small piece of data generated by a website and stored by your browser, used for analytics, login information, and preferences.
- Company: Refers to PT Bridge Note Indonesia, incorporated in Indonesia, responsible for handling your data under this Privacy Policy.
- Country: Refers to Indonesia, where PT Bridge Note Indonesia is based.
- Customer: Any company, organization, or person registered to use the Service to manage financial, accounting, or tax-related operations.
- Device: Any internet-connected device used to access our Service.
- IP Address: An identifier for any device connected to the Internet, often linked to an approximate location.
- Personnel: Employees or contractors engaged by PT Bridge Note Indonesia.
- Personal Data: Any information obtained through the use of our Service that allows for the identification of a natural person, including financial and tax data.
- Financial Data: Financial information obtained through the use of our Service, such as invoices, receipts, tax numbers (e.g., NPWP), accounting records, and other compliance-related documents.
- Third-party Service: Refers to partners providing hosting, analytics, fraud detection, or government-mandated services.
- You: Any individual or entity registered to use the Service.
What Information Do We Collect?
We collect information when you:
- Register on our site or application.
- Use our accounting and tax features.
- Submit documents or forms.
- Contact our support team.
- Provide data voluntarily.
Categories include:
- Name / Username
- Contact information (phone, email, address)
- Financial and accounting records
- Tax identification (NPWP) and compliance data
- Technical usage data (IP address, device, logs)
How Do We Use the Information?
We may use information to:
- Provide accounting, financial, and tax services.
- Comply with Indonesian accounting, tax, and data protection laws (including Law No. 27 of 2022 – PDP Law).
- Improve our services and security.
- Verify identity, prevent fraud, and ensure compliance.
- Communicate regarding transactions, obligations, and support.
- Fulfill legal and regulatory reporting requirements.
Third-Party Information
- End-user data: May be collected as necessary for services provided to our customers.
- Customer data from third parties: Includes fraud detection, credit checks, and compliance verification.
- Social media information: If voluntarily provided, we may collect publicly available data.
Sharing of Information
We may share information under the following conditions:
- Government and Regulators: Directorate General of Taxes (DJP), Otoritas Jasa Keuangan (OJK), or other authorities as required by law.
- Auditors, accountants, legal advisors: For compliance and reporting.
- Service providers: Hosting, IT infrastructure, secure payment processors.
- Business transfers: In cases of merger, acquisition, or restructuring.
We do not sell personal data for advertising or marketing purposes.
Use of Email Addresses
By providing your email, you agree to receive service-related communications. Emails may include:
- Transactional information.
- Compliance reminders.
- Regulatory notices.
You may unsubscribe at any time. Emails are never sold or shared for unrelated advertising.
Data Retention
- Accounting and tax-related data: Retained for up to 10 years, as required by Indonesian law.
- Other data: Retained only as long as necessary for service provision, then deleted or anonymized.
Data Protection and Security
We implement physical, technical, and organizational measures, including:
- Secure Socket Layer (SSL) encryption.
- Encrypted storage of financial data.
- Restricted access protocols.
- Compliance with PDP Law and Indonesian regulatory standards.
No system can guarantee 100% protection; however, we apply reasonable and industry-standard safeguards.
International Transfers
If information is transferred internationally, it will be done in compliance with the PDP Law, and adequate safeguards will be applied.
Your Rights
Under Indonesian PDP Law, you have the right to:
- Access and obtain copies of your personal data.
- Request corrections to inaccurate data.
- Request deletion, subject to statutory obligations.
- Restrict or object to processing.
- Withdraw previously given consent.
- Submit complaints to the Indonesian Data Protection Authority.
Cookies and Tracking
We use cookies only for:
- Authentication and session management.
- Improving performance and user experience.
We do not use cookies for targeted advertising.
Links to Other Websites
This Privacy Policy applies only to our Service. We are not responsible for third-party websites linked within our platform. Users are subject to the policies of external sites when navigating outside our Service.
Changes to the Policy
We may update this Privacy Policy to comply with legal or service changes. Updates will be announced through our Service. Continued use constitutes acceptance.
GDPR (European Union)
We comply with GDPR where applicable for users in the European Economic Area. Rights under GDPR include:
- Data access and portability.
- Correction and deletion.
- Restrictions on processing.
Data is stored only with vetted, DPA-compliant vendors.
CalOPPA (California, USA)
For California users, rights include:
- Right to know categories of data collected.
- Right to equal service regardless of exercising privacy rights.
- Right to deletion of personal data.
We do not sell user data.
Governing Law
This Privacy Policy is governed by the laws of Indonesia, including:
- Law No. 27 of 2022 on Personal Data Protection (PDP Law)
- Applicable accounting and tax regulations require data retention for up to 10 years
By using our Service, you agree to the jurisdiction of Indonesian courts.
Contact Us
PT Bridge Note Indonesia
Website: https://service.bridgenote.asia