Privacy Policy

1. Introduction

KumaWorks ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit and use our website and services (collectively, the "Services").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services. By accessing and using KumaWorks, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy.

2. Information We Collect

3. How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, maintaining, and improving our Services
• Processing payroll, benefits, and compensation
• Managing employee records and HR functions
• Communicating with you about updates, changes, and important notices
• Conducting research, analytics, and performance monitoring
• Personalizing and improving your experience
• Ensuring security and preventing fraud
• Complying with legal obligations and regulatory requirements
• Responding to inquiries, requests, and customer support
• Marketing and promotional purposes (with your consent where required)
• Conducting business analysis and planning
• Enforcing our Terms of Service and other agreements

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to perform our services and fulfill contractual obligations
• Legal Obligation: Compliance with applicable laws, regulations, and regulatory requirements
• Legitimate Interests: Our legitimate business interests in providing and improving our Services
• Consent: Your explicit consent for specific processing activities
• Public Interest: Protecting public interest and safety

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our platform and delivering Services
• Business Partners: Organizations with whom we have business relationships
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In case of merger, acquisition, bankruptcy, or asset sale
• Your Consent: With your explicit permission for specific purposes
• Public Safety: When necessary to protect the rights, privacy, safety, or property of users and the public

We do not sell, trade, or otherwise transfer your personally identifiable information to unaffiliated third parties without your consent, except as described in this Privacy Policy.

6. Data Security

We implement comprehensive technical, administrative, and physical security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Multi-factor authentication for account access
• Regular security assessments and penetration testing
• Access controls and role-based permissions
• Secure data disposal procedures
• Employee training on data protection practices

While we strive to protect your information, no security system is impenetrable. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your login credentials.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes outlined in this Privacy Policy. The retention period depends on:

• The nature of the information and processing purposes
• Our legal and contractual obligations
• Your employment status and relationship with us
• Tax and accounting requirements
• Applicable statutes of limitation

Once data is no longer necessary, we securely delete or anonymize it. However, we may retain certain information as required by law or for legitimate business purposes.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your information (subject to legal obligations)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a structured, portable format
• Right to Object: Object to processing for marketing or other purposes
• Right to Withdraw Consent: Withdraw consent for specific processing activities

To exercise any of these rights, please contact us at the address provided in Section 10. We will respond to your request within 30 days or as required by applicable law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain session information and user preferences
• Analyze usage patterns and improve our Services
• Deliver targeted content and personalization
• Remember login information (if you choose)
• Enhance security and prevent fraud

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or alert you when cookies are being sent. However, blocking cookies may affect the functionality of our Services.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 10 business days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

11. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have different data protection laws than your home country. By using our Services, you consent to the transfer of your information to countries outside your country of residence, which may provide different levels of data protection.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will promptly delete such information and terminate the child's account if applicable.

13. Policy Changes

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of our Services after such modifications constitutes your acceptance of the updated Privacy Policy.

14. Compliance

This Privacy Policy complies with applicable privacy laws including, but not limited to:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Indonesia Personal Data Protection Law
• Other applicable national and regional privacy laws