1. Introduction
Helipod ("we", "us", or "the company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Helipod platform and services.
By using our Services, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.
2. Data We Collect
We collect several types of information to provide and improve the Services for you:
Data you provide directly:
- Account information: name, email address, password (encrypted)
- Profile information: profile photo, company name, job title
- Payment information: credit/debit card data (processed by an encrypted payment gateway, not stored on our servers)
- Communications: messages you send to our support team
Data collected automatically:
- Access logs: IP address, browser type, pages visited, access time
- Usage data: features used, frequency of use, session duration
- Device data: operating system, screen size, language preference
- Cookies and similar tracking technologies
Data from third-party services:
- Information from OAuth providers (GitHub, Google) if you sign in with them
- Integration data from services you connect to Helipod
3. How We Use Your Data
We use the information we collect for various purposes:
Service Operations:
- Providing, maintaining, and improving the Services
- Processing transactions and sending payment confirmations
- Managing your account and providing technical support
- Sending important notifications about your account and the Services
Product Improvement:
- Analyzing usage patterns to improve features
- Detecting and preventing fraud and abuse
- Conducting research and developing new products
Communication:
- Sending product updates and newsletters (with your consent)
- Contacting you about questions or support
- Informing you of changes to our Terms or Policies
We will not sell your personal data to third parties for marketing purposes.
4. Sharing Data with Third Parties
We may share your information in the following situations:
Service Providers:
We work with third-party companies that help us operate the Services, including:
- Cloud infrastructure providers (servers and data storage)
- Payment processors (Xendit, Midtrans)
- Analytics services (anonymous and aggregated data only)
- Email and communication services
Legal Compliance:
- If required by law or court order
- To protect the rights, property, or safety of Helipod, users, or the public
- In connection with investigations of fraud or security issues
Business Changes: If Helipod is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will give notice before your data is transferred and becomes subject to a different privacy policy.
All third parties that receive your data are required to keep it confidential and use it only in accordance with our instructions.
6. Data Security
The security of your data is our top priority. We apply various technical and organizational measures to protect your information:
Technical measures:
- Encryption of data in transit using TLS 1.3
- Encryption of data at rest (AES-256)
- Two-factor authentication (2FA) available for all accounts
- Regular security audits and penetration testing
- 24/7 threat monitoring
- Data isolation between tenants
Organizational measures:
- Data access limited to employees who need it
- Regular security training for the entire team
- Documented incident response procedures
Although we use the best measures available, no method of data transmission over the internet or electronic storage is 100% secure. If you become aware of a security breach, please contact security@helipod.io immediately.
7. Data Retention & Deletion
We keep your data for as long as needed to provide the Services and meet legal obligations.
Retention periods:
- Active account data: For as long as your account is active
- Access logs: 90 days
- Payment data: 7 years (in accordance with Indonesian tax regulations)
- System backups: At most 30 days after deletion
- Support communication data: 2 years
Account deletion:
If you delete your account, we will:
- Delete your personal data within 30 days
- Anonymize data that cannot be deleted for legal reasons
- Send a deletion confirmation by email
You can request deletion of your data at any time through your account settings or by contacting privacy@helipod.io.
8. Your Rights
As a Helipod user, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you
- Right to Rectification: Update or correct inaccurate data through your account settings
- Right to Erasure: Request deletion of your personal data (with certain legal exceptions)
- Right to Portability: Receive your data in a machine-readable format (JSON/CSV)
- Right to Object: Object to the processing of your data for direct marketing purposes
- Right to Restriction: Request restriction of data processing in certain circumstances
To exercise these rights, send a request to privacy@helipod.io. We will respond within 30 business days. Some requests may require verification of your identity.
9. International Data Transfers
Helipod operates with infrastructure located in Indonesia and may use cloud services from international providers. Your data may be transferred to and processed in other countries that may have data protection regulations different from Indonesia's.
When we transfer data outside Indonesia, we ensure:
- Adequate data processing agreements with service providers
- Equivalent or higher security standards
- Compliance with relevant international data protection regulations
Helipod's primary infrastructure data is stored in data centers located in Indonesia to ensure compliance with local regulations.
10. Children's Privacy
Helipod's Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and learn that your child has provided us with personal information, please contact us at privacy@helipod.io. If we learn that we have collected data from someone under 18 without verification of parental consent, we will take steps to delete that information from our servers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes through:
- Email to the address registered to your account
- A notification in the Helipod dashboard
- An announcement banner on the website's home page
Changes take effect immediately upon posting unless stated otherwise. We encourage you to review this Privacy Policy periodically.
Continued use of the Services after changes take effect constitutes your acceptance of the updated policy.
12. Contact & Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:
Helipod Data Protection Officer:
- Email: support@helipod.io
- Legal email: support@helipod.io
- Security: support@helipod.io
- Website: helipod.id
- Address: Jakarta, Indonesia
We are committed to responding to your questions within 3–5 business days. For data deletion or access requests, we will respond within 30 business days in accordance with legal requirements.
