Konference respects your privacy. This policy explains what data we collect, how we use it, and your rights under Indonesian Law No. 27 of 2022 on Personal Data Protection ("UU PDP").
1. Who we are
Konference is a conference management platform operated from Indonesia. For data-related requests, contact us at [email protected].
2. Data we collect
2.1 Account information
- Name, email, institutional affiliation, role (author, reviewer, admin)
- Authentication credentials (stored hashed)
2.2 Conference content
- Papers, abstracts, and supplementary materials you upload
- Reviewer feedback, ratings, and decisions
- Communications sent through the platform
2.3 Payment information
We do not store full payment card numbers. Payments are processed by our payment partner, who acts as a separate data controller/processor. We retain only transaction metadata — amount, date, method, status, and your identifier.
2.4 Technical data
- IP address, browser, device type
- Platform usage logs
- Cookies and similar technologies for session and preferences
3. How we use your data
- Operate the conference management service you signed up for
- Process payments and registrations
- Send transactional emails (submission confirmation, review results, LOAs, payment receipts)
- Improve platform features and performance
- Comply with legal and tax obligations
- Detect fraud, abuse, and security incidents
4. Legal basis (UU PDP)
We process your personal data based on the following lawful bases under UU PDP Article 20(2):
- Contract — to deliver the service you (or your organizer) contracted us for
- Legal obligation — to comply with tax, audit, and regulatory requirements
- Legitimate interest — platform security, fraud prevention
- Consent — for optional communications (marketing, product updates)
5. Who we share data with
We share only what is necessary, with the following categories of recipients:
- Payment processors — to execute transactions
- Email delivery providers — to send automated emails
- Cloud infrastructure providers — to host the platform
- Conference organizers — for content you submit (papers, reviews), organizers act as separate data controllers
We do not sell your personal data.
6. Data retention
- Active account data — while your account is active
- Conference records — up to 3 years after the event, unless your organizer agreement specifies a shorter period
- Payment records — up to 10 years, as required by Indonesian tax regulations
- Marketing data — until you unsubscribe
7. Your rights
Under UU PDP you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or outdated data
- Request deletion, subject to legal retention requirements
- Restrict or object to certain processing
- Data portability (receive your data in a structured format)
- Withdraw consent where processing is based on consent
- Lodge a complaint with the Indonesian data protection authority
To exercise any of these rights, email [email protected]. We respond within 30 days.
8. Security
We protect your data using:
- TLS encryption for all data in transit
- Encryption at rest for sensitive fields
- Access controls limited to authorized personnel
- Regular review of security practices
No system is 100% secure. If a breach occurs, we notify affected users and the authority as required by UU PDP Article 46.
9. International transfers
Our primary infrastructure is in Indonesia. Some sub-processors (e.g., email providers) may operate servers outside Indonesia. In those cases, we ensure adequate safeguards under UU PDP.
10. Children
Konference is intended for academic users 18 and older. Student authors under 18 must have guardian consent. We do not knowingly collect data from children without such consent.
11. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email or platform notice at least 14 days before they take effect.
12. Contact
- Email: [email protected]
- WhatsApp: +62 851-5534-3722