Privacy Policy & Personal Data Protection
Last updated: October 28, 2026 • Compliance with Personal Data Protection Law (UU No. 27 of 2022)
1. UU PDP No. 27/2022 Compliance Commitment
Tagiva is dedicated to safeguarding user privacy and personal data integrity in strict adherence to the Law of the Republic of Indonesia Number 27 of 2022 on Personal Data Protection (UU PDP). This Privacy Policy explains how we collect, process, store, and protect your information when accessing tagiva.com and associated invoicing tools.
2. Personal Data We Collect
- Account Information (Google OAuth): Full name, verified email address, profile picture, and unique Google ID provided during PKCE sign-in.
- Business Profile Information: Business name, business address, phone/WhatsApp number, and banking/transfer payment instructions entered voluntarily.
- Client & Transaction Details: Client names, client addresses, client email addresses, invoice line items, monetary amounts, and payment notes.
- Media Assets: Business logos uploaded for placement on invoices (validated via file magic-bytes).
3. Legal Basis & Processing Purposes
We process your personal and business data solely to:
- Deliver automated invoice generation, tax computation, and PDF export functionality.
- Generate secure, cryptographically random public tokens (/i/[token]) for client invoice review.
- Send invoice delivery emails and due-date notifications upon your request.
- Process subscription billing securely via licensed payment gateways.
4. Data Security & Cloud Storage
Your data is hosted in high-security cloud facilities with end-to-end encryption in transit (TLS 1.3) and at rest (AES-256). Database records are guarded by strict PostgreSQL Row Level Security (RLS) policies, ensuring invoice records can only ever be accessed or updated by their authenticated owner.
5. Data Subject Rights & Account Deletion Procedure (UU PDP)
Under UU PDP No. 27/2022, you possess enforceable rights to access, rectify, restrict processing, and demand permanent erasure (right to erasure) of all your personal data.
How to Submit a Permanent Account & Data Deletion Request:
Send an email request to support@tagiva.com from the Google email address registered to your Tagiva account with the subject line: Request for Personal Data Deletion - [Your Email].
72-Hour Resolution Guarantee (SLA): The Tagiva data protection team will verify your identity and permanently purge all account records, business profiles, client entries, invoices, and uploaded logo assets from our active database systems within 72 hours (3 business days), followed by an official written confirmation email.
6. Cookies & Tracking Policy
Tagiva utilizes strictly essential session cookies required for authentication and account protection. We do not deploy third-party advertising cookies, cross-domain behavioral trackers, or device fingerprinting.
7. Data Protection Officer Contact
If you have questions regarding this privacy policy or wish to exercise your data rights, please contact: