1. Scope & Indonesian PDP Regulatory Framework
UU No. 27 Tahun 2022This Enterprise Privacy Policy ('Policy') describes how DeForsight ('we', 'us', or 'our') collects, processes, stores, protects, and transfers personal data when you visit our website, register or access a workspace, interact with our satellite monitoring APIs, or communicate with our team.
DeForsight operates and maintains this Policy in strict compliance with the laws of the Republic of Indonesia, specifically Law No. 27 of 2022 on Personal Data Protection (Undang-Undang Pelindungan Data Pribadi / UU PDP) and Law No. 11 of 2008 as amended by Law No. 1 of 2024 on Electronic Information and Transactions (UU ITE), while adhering to international enterprise privacy principles.
This Policy forms an integral part of the DeForsight Enterprise Terms of Service. By accessing or using the platform, you acknowledge the processing practices detailed herein.
2. Data Controller & Data Processor Governance
Governance HierarchyUnder Indonesian data protection law (Article 1 UU PDP), legal responsibilities differ based on who determines the purpose and means of data processing:
Customer as Data Controller (Pengendali Data Pribadi): For all personal data and operational records inputted into a tenant workspace—including employee accounts, authorized analyst credentials, supplier company representatives, contact emails, concession geometries, and uploaded forestry legality licenses—the Customer Organization acts as the Data Controller. The Customer is responsible for ensuring that it has obtained lawful consent or possesses a valid legal basis to process and upload such data to DeForsight.
DeForsight as Data Processor (Prosesor Data Pribadi): DeForsight processes workspace data strictly on behalf of and pursuant to the documented instructions of the Customer (as set forth in the Terms of Service and applicable written service orders). DeForsight implements appropriate technical and organizational measures to safeguard this data.
DeForsight as Independent Data Controller: DeForsight acts as an independent Data Controller solely regarding account registration credentials, billing and commercial correspondence, direct technical support communications, and website security logs.
3. Categories of Personal & Operational Data Collected
Data InventoryWe collect only the minimum necessary data required to deliver high-precision forestry intelligence and maintain platform integrity. The categories of data processed include:
- User Account & Identity Data: Full name, business email address, corporate entity name, job role, salted bcrypt password hashes, account verification status, and interface language preference (en or id).
- Concession & Workspace Operational Data: Concession boundaries, Area of Interest (AOI) shapefiles and GeoJSON polygons, RKT annual harvest logging blocks, supplier entity profiles, analyst notes, QC driver classifications, and uploaded forestry legality documents (such as SK PBPH, SK RKU, SK RKT, and S-VLK certificates).
- Security & System Audit Telemetry: Client IP addresses, browser user-agent strings, session identifiers (stored in the user_session table), rate-limit events, and immutable AuditLog entries recording administrative actions (including platform staff support access).
- Commercial & Procurement Records: Subscription plan tiers, monthly prediction quota usage counters, concurrent pipeline execution metrics, billing contacts, payment receipts, and enterprise upgrade request correspondence.
- Anti-Abuse Verification Data: Cryptographic challenge response tokens verified via Cloudflare Turnstile to prevent automated bot attacks and credential stuffing.
4. Lawful Bases & Purposes of Processing
Article 20 UU PDPIn accordance with Article 20 of Law No. 27 of 2022 (UU PDP), DeForsight processes personal and operational data exclusively upon recognized lawful bases:
Performance of Contract (Article 20(2)(b) UU PDP): Processing is necessary to execute user authentication, deliver satellite disturbance predictions, compute cloud-free Sentinel-2 chips, synchronize fire hotspot feeds, enforce role permissions, and generate compliance reports requested by the Customer.
Legitimate Commercial & Security Interests (Article 20(2)(f) UU PDP): Processing is necessary to maintain multi-tenant boundary isolation, enforce resource quotas, investigate cybersecurity incidents, prevent credential stuffing, and ensure platform stability.
Legal & Regulatory Compliance (Article 20(2)(a) UU PDP): Processing is required to comply with statutory accounting, tax reporting (PPN), and lawful disclosure obligations under Indonesian law.
Explicit Consent (Article 20(2)(e) UU PDP): Where required by law, processing is based on your explicit consent (e.g., subscribing to optional product updates or voluntary feedback).
5. Enterprise Security & Multi-Tenant Technical Safeguards
Defense-in-DepthDeForsight applies defense-in-depth technical, physical, and administrative safeguards designed to protect personal and confidential data against accidental or unauthorized access, destruction, loss, or alteration:
- Multi-Tenant Isolation: Every database query accessing customer data is programmatically bound by organization tenant scoping (TenantScopedMixin), preventing any cross-tenant data leakage.
- Opaque Session Token Architecture: We utilize high-entropy, opaque database-backed session tokens rather than stateless JWTs, enabling immediate server-side revocation upon session termination or suspected breach.
- HMAC-Signed Media URLs: Satellite imagery chips and GeoTIFF downloads rendered in client interfaces require time-limited HMAC-signed URLs (MEDIA_SIGNING_SECRET), ensuring that unauthenticated third parties cannot enumerate or scrape sensitive concession imagery.
- Cryptographic Password Protection: Passwords are irreversibly hashed using bcrypt with dynamic salt rounds before persistence.
- Immutable Support Impersonation Audit: When platform staff access a tenant workspace to resolve a technical issue, both the tenant identity and the staff actor's real identity (admin_actor_email) are permanently written to the AuditLog table for tenant auditability.
- Data Breach Notification Protocol: Pursuant to Article 46 of UU PDP, in the event of a verified personal data breach, DeForsight will notify affected Customers and the Indonesian PDP authority within seventy-two (72) hours of confirmation.
- Network Edge Security & Encryption: All data in transit is encrypted using modern Transport Layer Security (TLS 1.3). Cloudflare Turnstile protects authentication endpoints against automated brute-force attacks.
6. Sub-processors & External Service Providers
Transparent InfrastructureDeForsight engages trusted third-party sub-processors to deliver core hosting, machine learning, and communication services. Each sub-processor is subject to stringent data protection obligations consistent with this Policy and applicable privacy legislation.
The authorized sub-processors currently utilized by DeForsight are set forth below:
| Provider | Purpose & Service | Location |
|---|---|---|
| Google Cloud Platform (GCP) | Cloud infrastructure hosting, PostgreSQL/PostGIS database storage, and Google Cloud Storage (GCS) for Sentinel-2 satellite chips. | Indonesia (Jakarta) / Singapore / United States |
| Google Earth Engine (GEE) | Processing and rasterization of RADD alert patches and Sentinel-2 surface reflectance tiles. | United States / Global |
| Groq Inc. | Execution of vision language inference (Llama 4 Scout) for manual cluster 'AI Insight' interpretation. Data is processed ephemerally and is NOT retained to train public AI models. | United States |
| Resend Inc. | Transactional email delivery for email address verification, password reset tokens, and security alerts. | United States |
| Cloudflare, Inc. | Turnstile bot mitigation, edge DDoS protection, and SSL/TLS network acceleration. | Global Edge Network |
| NASA FIRMS & KLHK SiPongi+ | Public environmental telemetry ingestion (thermal hotspot sensors); no customer personal data is transmitted to these agencies. | United States & Indonesia |
7. Cross-Border / International Data Transfers
Article 56 UU PDPCertain sub-processors utilized by DeForsight (such as Google Cloud, Groq, and Resend) operate infrastructure located outside the Republic of Indonesia. Where personal data is transferred internationally, DeForsight ensures compliance with Article 56 of Law No. 27 of 2022 (UU PDP).
Specifically, DeForsight ensures that: (a) the destination country maintains an equivalent or higher standard of personal data protection; or (b) binding contractual data processing agreements containing standard contractual safeguards and audit rights are executed with the recipient entity.
8. Data Retention, Portability & Deletion Schedules
Data LifecycleWe retain personal and workspace data only for as long as necessary to fulfill the purposes for which it was collected, provide the service, comply with legal and tax obligations, resolve disputes, and enforce our agreements.
Active Subscriptions: Operational workspace data, concession boundaries, and user profiles remain stored and available throughout the term of an active subscription.
Post-Termination 30-Day Export Grace Period: Following account closure or subscription expiration, Customer maintains read-only access for thirty (30) calendar days to export its spatial geometries, QC records, and compliance reports.
Permanent Sanitization: Following the 30-day export grace period, DeForsight programmatically purges customer workspace records from primary production databases. De-identified logs and disaster recovery backups are purged within standard ninety (90) day backup rotation cycles.
9. Data Subject Rights Under Indonesian Law (UU PDP)
Articles 5-13 UU PDPPursuant to Articles 5 through 13 of Law No. 27 of 2022 on Personal Data Protection, individual data subjects residing in Indonesia or interacting with DeForsight enjoy the following statutory rights:
- Right to Information: The right to obtain clarity regarding the identity of the data controller, legal basis, and specific purposes of processing.
- Right to Access & Portability: The right to access and receive a machine-readable copy of your personal data stored within DeForsight.
- Right to Rectification: The right to correct, complete, or update inaccurate or outdated personal data.
- Right to Erasure & Destruction: The right to request the deletion or destruction of your personal data, subject to statutory retention requirements.
- Right to Withdraw Consent: The right to withdraw consent previously granted for optional processing activities.
- Right to Restriction & Objection: The right to delay or restrict processing in the event of disputed data accuracy or alleged unlawful processing.
10. Browser Storage, Cookies & Anti-Tracking Policy
Zero Ad TrackingDeForsight uses browser storage strictly for essential platform functionality, security, and user preferences. We utilize localStorage for:
deforsight:auth (stores the authenticated session credential required to authorize API requests);
deforsight:locale (maintains your preferred UI display language, en or id); and
deforsight:theme (stores light/dark visual theme preferences).
ZERO THIRD-PARTY AD TRACKING GUARANTEE: DeForsight does NOT use third-party advertising cookies, behavioral tracking pixels, or third-party data broker analytics. We do not track your browsing activity across third-party websites.
11. Protection of Minors & Sensitive Forestry Assets
B2B ScopeDeForsight is exclusively an enterprise Business-to-Business (B2B) platform. We do not solicit, market to, or knowingly collect personal data from individuals under eighteen (18) years of age.
Customer is strictly prohibited from uploading personal data belonging to minors into any workspace.
Commercial Sensitivity of Concession Geometries: DeForsight recognizes that concession boundaries, timber volume assessments, and supplier corporate identities represent commercially sensitive business assets. DeForsight treats all such assets with rigorous enterprise confidentiality as set forth in Section 3 of the Terms of Service.
12. Policy Modifications & Official Privacy Contact
Legal InquiriesWe may update this Privacy Policy from time to time to reflect enhancements to our platform, changes in our data processing activities, or amendments to statutory regulations. Material modifications will be communicated via in-app dashboard notification or direct email at least fifteen (15) days before becoming effective.
For inquiries regarding this Policy, requests to exercise data subject rights under UU No. 27 Tahun 2022, or enterprise compliance audits, contact our designated privacy team:
Data Protection & Legal Governance Office · DeForsight Platform Operations
Email: [email protected]
Official Jurisdiction: Jakarta, Republic of Indonesia
Official Legal & Data Protection Office (DPO)
For questions regarding these terms, data subject requests pursuant to Indonesian PDP Law No. 27/2022, or custom enterprise master service agreements, contact our legal counsel directly.