Privacy Policy

1. Scope and responsibility

PT Karsa Reka Cipta (“Rekacipta,” “we,” “our,” or “us”), Indonesia, is responsible for the personal information it controls under this policy. Personal information means information that identifies, or can reasonably be linked to, an individual.

This policy covers rekacipta.co.id and interactions with our three connected business areas, with RekaTools product handling described separately in Section 6:

• Siteplore: industrial monitoring and analytics, including RekaSense, PowerWatch, MachineGuard, dashboards, alerts, reports, and managed insights.
• Engineering: assessments, studies, design, reliability, electrical and instrumentation work, integration, commissioning, and industrial data analytics.
• Talent & Capability: specialist sourcing, professional development, training, and related enquiries.

The shared RekaTools Privacy Policy provides version-specific information for the listed RekaTools extensions. Other product notices and service agreements provide additional details for their particular services. Product-specific information describes the relevant technical data handling; it does not remove mandatory legal protections. Separate websites and platforms, including UpSkills and PetaKerja, have their own notices for activities conducted there. A link from our website does not automatically place another platform under this policy.

For customer-controlled personal information processed on a customer’s instructions, our role and obligations are set out in the relevant agreement. Mandatory legal protections continue to apply.

2. Information we handle

The information involved depends on the features you use and the services agreed with you. We do not require every visitor to provide every category below. These categories describe website, business and connected-service interactions; they do not mean that the offline RekaTools versions listed in Section 6 send their local entries to us.

Sources include you, your authorised organisation or representatives, connected devices and systems, and providers involved in the service. We may review relevant public professional information for a disclosed business or sourcing purpose. Please provide other people’s information only when you are authorised to do so and have given them appropriate notice.

Do not include passwords, private keys, unnecessary identity documents, or sensitive personal information in general enquiry forms or attachments.

3. Purposes and legal basis

We use relevant information to understand requirements, prepare proposals, deliver and support agreed services, administer accounts and billing, investigate faults, protect systems, improve service performance, and meet legal obligations.

Processing relies, as applicable, on consent, contractual steps or performance, legal obligations, or legitimate interests balanced against individual rights. We request separate consent where required, including for optional marketing. Visiting this website is not blanket consent.

If requested information is necessary for an enquiry, account, contract, or legal requirement, we explain that context. Without it, the relevant service may be unavailable.

4. Industrial and customer data

Siteplore and related engineering services may handle environmental measurements, electrical and energy readings, machine-condition signals, and other operational information. The categories, frequency, connectivity, hosting, access, and retention depend on the deployed solution.

Industrial measurements are not automatically personal information. They fall within personal-data protections when they identify, or can be linked to, an individual. Commercially confidential operational data is also subject to the relevant confidentiality and service terms.

• Customer instructions: access, integrations, reports, exports, and deletion arrangements follow the agreed service scope and authorised instructions.
• Customer responsibilities: customers determine which information they are entitled to supply and which users may access their service, and provide required notices to affected individuals.
• Public demonstrations: customer-confidential or identifiable personal information must not be placed in public demonstrations without appropriate authorisation and a lawful basis.
• Analytics: processing may generate trends, alerts, statistical results, or decision-support insights within the engagement. Any use of identifiable or confidential customer data outside agreed purposes, including external model training, requires separate authorisation and a lawful basis. This policy alone does not authorise uploading confidential plant documents, credentials or personal information to an external AI provider. Provider access, purposes and data-use restrictions must be established for the relevant engagement.

A service agreement or data processing agreement should define deployment-specific responsibilities. This privacy policy does not grant Rekacipta ownership of a customer’s operational data or permission for unrestricted reuse.

5. Talent and capability activities

If you submit a professional profile, CV, or training enquiry directly to Rekacipta, we use it for the sourcing, opportunity, learning, or support purpose explained to you.

Before sharing candidate information with a prospective client or employer, we explain the intended disclosure and obtain consent where required. Submitting an enquiry does not authorise unrestricted public publication of your profile. Any longer-term talent-pool participation or unrelated promotional use will be explained separately.

When you register or participate through UpSkills, PetaKerja, or another platform, consult that platform’s privacy notice for its account, profile, learning, and assessment practices.

6. RekaTools suite and other digital products

RekaTools is our family of engineering calculation tools. The products below share one RekaTools Privacy Policy, which identifies covered tools, versions, data categories, local controls and future updates.

For these versions, calculations run on the user’s device. Entries and saved records are not transmitted to Rekacipta or third parties. There are no accounts, payment collection, analytics, advertising, remote executable code or network requests from the calculation tools. They do not read browsing history or website content and request no Chrome manifest or host permissions.

Saving is explicit: Save locally in Instrument Toolkit or Save result in Electrical Calculator. Each extension can retain up to 20 local snapshots per browser profile, including a local record identifier and save timestamp. The extensions keep separate records and do not synchronize with each other, across devices or with a Rekacipta account.

Use Delete to remove an individual snapshot, Delete saved in Instrument Toolkit, or Delete all saved in Electrical Calculator to remove that extension’s saved records. CSV exports, PDFs, printouts and separately shared copies remain until you delete them separately. Browser printing uses your selected printer or PDF destination. Clearing browser data or uninstalling a tool may remove its saved records.

Rekacipta cannot remotely access, recover or delete these local records. Their security depends on your device and browser profile; the covered versions do not provide their own encryption or password lock. Avoid entering confidential or unnecessary personal information in tags, notes or labels.

The tools’ offline and no-tracking statements apply to the listed extension versions. They do not describe this website, Chrome Web Store or the separate processing of your browser, operating system, printing services or websites you choose to visit.

Opening an optional website/reference link or voluntarily sending information to support creates a separate interaction. This website policy covers information we receive through those interactions. It does not imply access to records that remain inside your extension.

Additional RekaTools releases and other digital products will be described according to their actual features and data handling. Products with accounts, cloud storage, payments, AI services, external APIs or website access require corresponding product disclosures, permissions and user choices. Planned products are not represented as having the offline practices of the versions listed above.

7. Sharing information

We do not sell personal information. Information may be disclosed, where relevant, to:

• Service providers: hosting, infrastructure, communications, support, security, and other vendors needed to operate the relevant service.
• Delivery partners: authorised specialists or contractors who need information to carry out an agreed assignment.
• Your organisation: authorised administrators or contacts managing a business account or service, within their assigned responsibilities.
• Professional and financial parties: advisers, accountants, banks, or payment providers where needed for a transaction, audit, or legal obligation.
• Authorities: where required by law or a valid request, or as lawfully necessary to protect rights and investigate misuse.
• Business successors: in a restructuring, transfer, or acquisition, with applicable safeguards and notices.

We limit disclosures to the relevant purpose and require appropriate confidentiality and data-protection arrangements where providers act on our behalf. Integrations you request may also involve an independently operated service with its own privacy notice. These sharing categories concern information we actually receive or process for a service. They do not imply that we receive or disclose local entries from the offline RekaTools releases described in Section 6.

8. Cookies, analytics, and external content

Depending on the features enabled, our website or connected services may use cookies or similar storage for sessions, security, preferences, or usage measurement. Server request logs can also be generated without cookies.

If optional analytics, advertising technologies or third-party embeds are offered, the relevant feature notice or consent interface will identify their purpose, provider and duration. Where consent is required, those technologies must remain inactive until you choose them, and consent must be withdrawable.

You can manage cookies through your browser and any consent controls made available on the service. Blocking essential storage can affect login or other features. Browser settings alone may not remove records already held by a provider.

Following links to external websites, dashboards, media, or messaging services involves separate processing by those operators. Review their notices before providing information. Website cookies and server logs are separate from the local storage used by the covered RekaTools extensions; the website does not acquire those extension records merely because you visit it.

9. Retention and deletion

We retain information for the relevant purpose and applicable obligations, rather than assigning one period to all records.

• Enquiries and correspondence: for the enquiry, any resulting engagement, and necessary follow-up or dispute handling.
• Accounts and service records: for service delivery and necessary closure, security, and contractual obligations.
• Operational telemetry and engineering files: according to the agreed plan, project requirements, or service agreement. Export and end-of-service arrangements should be defined there.
• Talent and learning records: for the disclosed activity or separately explained talent-pool arrangement.
• Tax and accounting records: books, records, and supporting documents subject to Indonesian tax retention requirements are retained for 10 years in Indonesia, as required by applicable law.

When information is no longer required, it is deleted or anonymised, subject to lawful retention. Restricted backups may expire through their normal cycle; legally required records or records needed for an active dispute may be retained longer than the ordinary service period. Product-local records, such as RekaTools worksheets and calculation snapshots, are managed using the relevant extension’s controls. The 10-year tax-record requirement is not a general retention period for website enquiries, operational telemetry or RekaTools snapshots.

10. Security and incidents

We apply safeguards appropriate to the service and risk. Depending on the deployment, these may include restricted access, authentication, protected connections, logging, backup arrangements, and confidentiality obligations. Specific controls are defined for the relevant environment; this policy does not claim a particular certification or guarantee absolute security.

Protect your devices and credentials, review authorised users, and report suspected misuse promptly. Do not send credentials or confidential plant records through general contact forms.

If a personal-data protection failure occurs, we will provide the notices required by applicable law, including written notification to affected data subjects and the relevant authority within the 3 × 24-hour requirement of Article 46 of the Indonesian Personal Data Protection Law where applicable. Required notices describe the data involved, when and how the failure occurred, and the handling and recovery measures; public notice will also be provided where legally required.

11. International processing

Hosting, support, or integrated services may involve processing outside Indonesia, depending on the deployment. Transfers follow applicable requirements: equivalent protection, adequate binding safeguards, or, where those conditions cannot be met, required consent. Website use alone does not authorise international transfers.

Contact us about the hosting or transfer arrangements for your service. Contractual data-location requirements should be agreed before deployment. This section does not imply that the offline RekaTools versions listed in Section 6 transfer their calculation entries overseas; those entries remain on the user’s device unless the user separately exports, prints or shares them.

12. Your rights and requests

Subject to applicable conditions, you may request information, access, correction, deletion, restriction, portability, or withdrawal of consent; object to solely automated decisions with significant effects; and pursue complaints or remedies. Withdrawal does not invalidate earlier lawful processing. Indonesian law applies; other laws apply where their scope is met.

Send a request to contact@rekacipta.co.id with the subject “Privacy Request”. Identify the relevant service, your relationship to it, and the request. We may verify identity or authority proportionately; do not attach identity documents unless requested through an appropriate channel.

We respond within applicable legal deadlines and explain any lawful limits. When we process information for a customer, requests may need to be handled by that customer, with our assistance. For RekaTools records that remain on your device, use the controls in the relevant extension. Deleting one tool’s records does not delete records in another tool or copies already exported. If you have separately sent records to Rekacipta support, identify that correspondence in your request so we can address information we actually hold.

13. Service and marketing communications

We may contact you about enquiries, proposals, projects, billing, service changes, support, or security. Optional newsletters or promotional messages require the appropriate legal basis and any necessary consent.

You can opt out of promotional communications using an available unsubscribe option or by emailing us. Necessary service or legal communications may continue for an active relationship.

14. Children’s information

Our business services are directed to adults and professional organisations. We do not intentionally solicit children’s personal information through general enquiries. Any service involving children requires appropriate notice and legally required parental or guardian consent. Contact us if you believe a child’s information has been provided inappropriately.

15. Updates to this policy

We may update this policy when our services, processing, or legal requirements change. The date at the top identifies the latest revision. Material changes will be communicated through an appropriate notice; new consent will be requested before changed processing where required. The shared RekaTools policy and relevant store disclosures will be updated when a covered tool, version or data practice changes.