Data Processing Agreement
Last updated: May 25, 2026
1. Scope & Purpose
This Data Processing Agreement (DPA) applies when PT Kinetikum Indo Solusi processes personal data on behalf of the Customer ("Data Controller") through the Liqaa platform. PT Kinetikum Indo Solusi acts as Data Processor. Personal data processed includes: end-user names, email addresses, conversation content, IP addresses, and browser metadata collected through the chat widget.
2. Processing Obligations
PT Kinetikum Indo Solusi shall: process personal data only on documented instructions from the Data Controller, ensure personnel handling data are bound by confidentiality obligations, implement appropriate technical and organizational security measures, not engage sub-processors without prior written authorization, assist the Data Controller in responding to data subject requests, and delete or return all personal data upon contract termination.
3. Security Measures
Technical measures include: encryption at rest (AES-256) and in transit (TLS 1.3), network firewalls and intrusion detection, regular vulnerability assessments, access logging and monitoring, and multi-factor authentication for system access. Organizational measures include: security awareness training, incident response procedures, data classification policies, and regular compliance audits.
4. Data Breach Notification
In the event of a personal data breach, PT Kinetikum Indo Solusi shall: notify the Data Controller within 72 hours of becoming aware, provide details of the breach (nature, categories of data, approximate number of records, likely consequences), describe measures taken to address and mitigate the breach, and cooperate with the Data Controller in notifying affected data subjects and relevant authorities as required by UU PDP.
5. International Data Transfers
Primary data processing occurs within Indonesia. If data transfer outside Indonesia is required (e.g., for backup or CDN services), PT Kinetikum Indo Solusi ensures: the receiving country provides adequate data protection, appropriate safeguards are in place (standard contractual clauses), and prior written consent from the Data Controller is obtained. Currently, all Liqaa data is stored on servers located in Indonesia.
Data Protection Officer: dpo@kinexa.id | Legal: legal@kinexa.id