1. Introduction & Overview
At PT Helios Informatika Nusantara (a member of CTI Group) and its affiliates, ensuring the privacy and security of your personal data is of utmost importance to us. As you navigate through our websites (https://kouventa.ai and https://www.helios.id), we strive to create a safe, transparent, and trustworthy environment for all users.
This Privacy Policy establishes the terms governing our handling of personal information across our website, products, and WhatsApp Business customer engagement platforms. By accessing our services, you acknowledge that you have reviewed, understood, and consented to the practices described herein.
2. Personal Data We Collect
When utilizing or engaging with our platform and services, we may collect and process several categories of information:
- Identity & Contact Information: Name, professional email address, telephone/WhatsApp number, company name, job position, and department submitted through demo requests or contact forms.
- Communication & Inquiry Details: Contents of messages, questions, and inquiries exchanged with our sales, technical specialists, or automated assistant.
- Technical Information: Browser type, operating system, device identifiers, IP address, and referring URLs collected automatically when interacting with our digital interfaces.
- Usage & Interaction Data: Pages visited, features explored, click patterns, and status of notification deliveries.
3. Collection Methods
We collect personal information through the following touchpoints:
- Direct Interactions: When you voluntarily submit personal details to schedule a product demo, download whitepapers, or chat with our team via WhatsApp.
- Automated Technologies: Local cookies and session identifiers designed to provide optimal navigation experience, assess site performance, and protect against bot abuse.
- Enterprise Service Connectors: Direct integration with authorized platforms such as the Meta WhatsApp Business Cloud API.
4. Purpose of Processing
We process your personal information for the following legitimate business purposes:
- Responding to Inquiries: Providing tailored consultations, product pricing, and live software demonstrations.
- Service Enhancement: Analyzing interaction patterns to continuously refine our conversational AI models and user workflows.
- Security & Threat Prevention: Ensuring network resilience, mitigating unauthorized access, and verifying communication integrity.
- Product Announcements & Updates: Sharing relevant industry insights and product release notes, with simple opt-out mechanisms available in every communication.
5. Data Sharing & Disclosure
We disclose information only to vetted third-party service providers acting on our behalf under strict data protection and non-disclosure obligations:
- Cloud & Hosting Infrastructure: Tier-3/4 enterprise data centers maintaining robust physical and logical isolation.
- Meta Platforms, Inc.: As the underlying provider of the WhatsApp Business API infrastructure.
- CTI Group Affiliates: Group companies collaborating to provide comprehensive digital solutions.
- Statutory & Legal Requirements: When compelled by applicable laws, court orders, or official regulatory directives.
6. Cross-Border Transfers
In operating enterprise cloud architectures, data may be transferred to or processed on systems located outside your home jurisdiction. We implement recognized transfer safeguards, including Standard Contractual Clauses, to ensure an equivalent level of security and privacy protection.
7. Security & Protection
We maintain stringent administrative, physical, and technical safeguards in alignment with ISO/IEC 27001 certification standards and regulatory compliance requirements:
- End-to-End Encryption: Messages transmitted through WhatsApp are end-to-end encrypted by WhatsApp's Signal protocol.
- In-Transit & At-Rest Encryption: Standard TLS 1.3 for network transmissions and AES-256 for persistent database storage.
- Role-Based Access Control: Strict least-privilege policies and mandatory multi-factor authentication (MFA).
- Continuous Vulnerability Auditing: Regular penetration testing and code audits to safeguard against evolving threats.
8. Storage & Retention
We retain personal information only for as long as necessary to fulfill the operational purposes for which it was gathered, or to comply with statutory accounting, auditing, and Indonesian data retention requirements. Upon expiry of the retention duration, records are irreversibly anonymized or destroyed.
9. Policy Modifications
PT Helios Informatika Nusantara reserves the right to revise this Privacy Policy periodically. Significant changes will be prominently announced on this page with an updated revision date.
10. Your Privacy Rights
Depending on your jurisdiction, you possess specific legal rights regarding your personal data:
- The right to request access to the personal data we maintain about you.
- The right to rectify inaccurate or incomplete records.
- The right to request deletion (erasure) of your personal data where grounds permit.
- The right to withdraw marketing consent at any time without adverse effect.
11. Social & Third-Party Services
Our website may include links to external social media platforms (LinkedIn, YouTube, Instagram). Any information collected by those third parties is governed exclusively by their respective privacy statements.
12. Contacting Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please get in touch with our team:
PT Helios Informatika Nusantara (CTI Group)
Centennial Tower, 12th Floor
Jl. Jend. Gatot Subroto Kav. 24-25, Jakarta 12930, Indonesia
Phone: +62 21 8062 2220
WhatsApp: +62 8118 4968 89
Email: kouventa@helios.id