Privacy Policy

1. Consent to use

By accessing our website or using the Platform, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the website or the Platform.

Where you use the Platform on behalf of an organisation (for example, your employer), that organisation is the controller of the content in its workspace, and Dokufi processes that content on its behalf under the applicable service agreement.

2. What is personal information

Personal information is any information that can be used to identify you personally, either on its own or combined with other information — such as your name, email address, phone number, job title, employer and account identifiers.

3. Information we collect

We collect information in the following ways:

• Information you provide voluntarily — for example when you book a demo, create an account, contact support or subscribe to updates.
• Account and workspace data — profile details, workspace membership, roles and permissions.
• Customer content — pages, documents, comments, files and other content you or your organisation store in the Platform.
• Usage and device data — log data, IP address, browser type, pages visited and actions taken, collected automatically to operate and secure the service.
• Cookies and similar technologies — used for authentication, preferences (such as language) and analytics.

4. How we use personal information

We use personal information to:

• Provide, maintain and secure the website and the Platform.
• Authenticate users, enforce permissions and maintain audit trails.
• Respond to enquiries, demo requests and support tickets.
• Analyse usage to improve performance, features and user experience.
• Send service notices and, where permitted, product updates (you may opt out at any time).
• Comply with legal obligations and enforce our terms.

We do not sell personal information. Customer content is never used to train AI models, and AI features only process content the requesting user has permission to access.

5. Disclosure of information

We may share personal information with:

• Service providers (sub-processors) who help us operate the Platform, such as hosting, email and analytics providers, under confidentiality and data protection obligations.
• Law enforcement, regulators, government agencies or courts where required by applicable law.
• Professional advisers such as lawyers and auditors, under a duty of confidentiality.
• A successor entity in the event of a merger, acquisition or reorganisation, subject to this policy.

6. Data storage, security and retention

Workspace data is hosted in secure data centres, encrypted at rest (AES-256) and in transit (TLS 1.2+). Access is restricted by role, protected by multi-factor authentication and recorded in audit logs. Our information security management system is certified to ISO/IEC 27001:2022.

We retain personal information only for as long as necessary for the purposes described in this policy, or as required by law or our agreement with your organisation. When data is no longer required, it is securely deleted or anonymised.

7. Your rights

Subject to applicable law, including Indonesia's Personal Data Protection Law (UU PDP), you may have the right to:

• Access a summary of the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Withdraw consent or object to certain processing, including marketing.
• Request a copy of your data in a portable format.

If your data is held in a workspace managed by your organisation, we may refer your request to the workspace administrator.

8. Submitting a request

To exercise your rights, email us using the contact details below with your name, the email address associated with your account and a description of your request. We may need to verify your identity before acting, and we will respond within the timeframe required by applicable law.

9. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “last updated” date. Continued use of the website or Platform after changes take effect constitutes acceptance of the revised policy.

10. Contact us

If you have questions about this Privacy Policy or how we handle personal information, please contact us: