LEGAL

Zilva Privacy Policy

Last updated: 11 September 2026

Zilva ("we", "us", or "our"), operated by PT Zilva Lawi Teknologi, provides a SaaS ERP platform (app.zilva.io) that can be accessed by clients independently. This Privacy Policy explains how we collect, use, and protect your information when you use our platform.

Note: the privacy policy for Bookkeeping services is provided separately by PT Lawi Konsultan Indonesia — see lawiconsulting.com/kebijakan-privasi.

1. Information We Collect

  • Account data: name, email, job title, and login credentials (passwords are stored encrypted, never in plain text)
  • Data you input or upload into the platform to run your business — including financial transactions, customer and supplier data, inventory data, and (if related modules are used) employee data for payroll purposes
  • Application usage data (basic activity logs) for security and technical support purposes

2. How We Use the Information

  • To provide and operate the SaaS ERP platform according to the features you use
  • To respond to your technical support inquiries
  • To send you information related to the services you request

3. Use of Artificial Intelligence (AI) in Data Processing

Some processing of your data within the platform is assisted by our internal AI systems (e.g., drafting journals, reconciliations, or working papers). The principles we apply:

  • The AI never independently decides on anything that financially impacts your accounts — any action that alters data (posting journals, etc.) goes through a draft stage that must be approved by a human first.
  • Your data is not used to retrain third-party AI models outside of our internal system.

4. Data Sharing

  • We do not sell or rent your personal data to third parties.
  • Data is only accessed by the internal Zilva team (and the internal AI systems mentioned above) for the purposes of the services you request.
  • Some of our technical infrastructure (data storage, AI computation) runs on third-party cloud service providers. These providers process data solely as part of providing our services, not for their own purposes.

5. Data Isolation Between Clients

Our SaaS ERP platform serves multiple clients (multi-tenant). Each client's data is technically separated and cannot be accessed by any other client.

6. Data Security

We implement reasonable security measures to protect your information from unauthorized access, including credential encryption and role-based access control for sensitive data.

7. Data Retention

We retain your data as long as your account/service is active, and for any additional period required for legal compliance (e.g., tax/bookkeeping document archiving obligations) after the service ends.

8. Your Rights

You have the right to:

  • Request access to, correction of, or deletion of your personal data that we hold.
  • Request an export (portability) of your entire business data in a reusable format, at any time — including if you decide to stop using our services.

Please contact us via the details below to exercise these rights.

9. Contact