KUMPUL Access Privacy Policy

• Authentication Methods: Google Sign-In
• Data Collected: Only the User's name and email address are collected
• No Storage of Sensitive Data: No passwords or third-party personal data are stored in the system

To provide the best personalized experience for the User, We collect Personal Information through the registration system and may retain all information entered or received.

The types of Personal Information We collect through services include the following:

• Personal Data: Name, email address, phone number, and other contact information.
• Business Data including information related to business operations, including operational, managerial, and financial data collected through the SCRIN assessment.
• Service usage data including information regarding how Users interact with Our services.
• Other types of personal data as identified under Law No. 27 of 2022 on Personal Data Protection, and/or any documents, images, or other content containing Personal Information provided to Us as part of our services and/or submitted by the User.

The personal information and data We obtain in connection with the User's registration will be used solely for purposes including, but not limited to, the following:

• Providing access and connections including but not limited to facilitating access to services such as funding, marketing, and business networking.
• Service improvement including but not limited to analyzing and developing the Platform to deliver a better User experience.
• Internal reporting and evaluation including but not limited to internal operational management and performance assessment.

The Personal Information and data We collect will be used in connection with Our services as follows:

1. Access+

   Access+ is a component of KUMPUL Access that is available exclusively to users who have completed the SCRIN assessment. The data provided will be used to deliver strategic support through various funding, marketing, and business operations channels.

2. SCRIN

   SCRIN is an assessment tool used to measure the business readiness of MSMEs and startups. The data collected through this assessment is used to evaluate business readiness, including but not limited to analyses conducted to generate relevant assessment results and to support business development.

3. ConnectPad

   ConnectPad is a service designed to connect users with mentors, investors, corporate partners, and startup alumni. The data of users who wish to be connected will not be directly shared between the connected parties. We will only provide the necessary information to facilitate the connection in a secure manner, without disclosing any personal information. In addition, the collected data will be used for the following purposes:

   • Connection management, including but not limited to matching and linking Users.
   • The use of data for Our connections, including but not limited to data provided by mentors, investors, corporate partners, and startup alumni, will be used solely for connection purposes within Our ecosystem. Users seeking to be connected will not have access to the personal data or other information of the parties they are connected with. All connections will be processed internally by Us, acting as an intermediary to ensure data confidentiality.

Except for the purposes of data collection as disclosed above, We guarantee that We will not sell, transfer, distribute, and/or disclose Users' personal information and data to any other person and/or unauthorized third party.

The parties that may receive the information as referred to above, provided that they comply with this Privacy Policy, include but are not limited to:

1. Business partners engaged by Us to assist in the application, investigation, and verification process of the User's personal data; and
2. Other parties acting on Our behalf who are required to perform certain tasks that necessarily involve access to the protected information.

• We ensure that Users' personal data will only be accessed by authorized parties. We implement appropriate safeguards to protect Users' data from unauthorized access, disclosure, or alteration.
• You acknowledge that there are inherent risks in transmitting information over the internet. We cannot guarantee that data transmission will be 100% secure and free from third-party interference capable of compromising Our security systems.
• By submitting User Personal Information on the Platform, You consent to the transfer, storage, and processing of your data as carried out on the Platform.
• We will take all reasonably necessary steps to ensure that such Personal Information is handled securely and in accordance with this Privacy Policy and applicable laws and regulations.
• However, We cannot guarantee the security of any data transmitted to the Platform; any such transmission is at the User's own risk. Once We have received your Personal Information, We will use strict procedures and security features to prevent unauthorized access.
• For Users who register on the Platform, We also store the personal information you provide in the User profile. All Users may view and edit their personal information at any time (except for the email address, which cannot be changed by the User). Deletion of personal information may only be carried out by Us.

Users have certain rights regarding the use of their personal data. You may update or close your account on the Platform, and may also contact Us to exercise your individual rights regarding your personal data, which include:

• Access and correction of data, including but not limited to the right to view, correct, or update the information We hold about the User.
• Data deletion includes the right to request the deletion of the User's personal data at any time by contacting Us through the User's registered email address.
• Withdrawal of consent includes, but is not limited to, the right to withdraw consent for data processing at any time without affecting the lawfulness of any processing carried out prior to such withdrawal.
• The right to object to any unauthorized use of data that is not in accordance with applicable laws and regulations.

The terms and conditions of this Privacy Policy shall be governed by the laws of the Republic of Indonesia.

Users acknowledge and agree that We may make changes to this Privacy Policy as necessary from time to time and/or as required by applicable laws. In addition, We may also make changes to the services on the Platform or to Our business operations.

In the event of any material changes to this Policy, We will notify Users through a notice on the Platform, via email, or through any other mechanism required by law. By continuing to use the services after any such changes to the Privacy Policy have been posted, Users are deemed to have agreed to be bound by the revised Privacy Policy.

Users are advised to periodically review this Privacy Policy to stay informed of any updates. For any inquiries regarding this Privacy Policy, please contact us at: event@kumpul.id.