Privacy Policy

This Privacy Policy explains how the Dashboard Monitoring Keuangan for Kabupaten Kuantan Singingi (the "System") collects, uses, stores, and protects information. The System is developed and maintained by Ascarya Digital Solutions. By using the System, you acknowledge that you have read and agree to this Privacy Policy.

1. Information We Collect

We may collect information in the following categories:

• Account Information: username, full name, email address, role and access level as provisioned by the system administrator.
• Operational Financial Data: budget allocations, expenditure records, transaction details, realization reports, and other financial data imported or entered into the System. Access to these data is restricted to authorized users only.
• Usage and Activity Data: login timestamps, user actions, audit logs, and other activity metadata that support monitoring, troubleshooting and auditing.
• Technical Data: IP address, device type, browser information, and other system telemetry used for security and performance analysis.

2. How We Use Information

Collected information is used for the following purposes:

• Provide, operate and maintain the System;
• Authenticate users and enforce role-based access controls;
• Support monitoring, reporting and analysis of regional financial performance;
• Conduct security monitoring, incident investigation, and audits;
• Improve and update the System, including troubleshooting and system maintenance;
• Comply with legal, regulatory or governmental audit requirements.

3. Legal Basis and Sharing

We do not sell user data. Data will not be shared with third parties outside the Government of Kabupaten Kuantan Singingi except in the following circumstances:

• When required by law or a lawful order from competent authorities;
• For official audits, evaluations or oversight by authorized government agencies;
• To third-party service providers or contractors engaged by Ascarya Digital Solutions to perform maintenance or support tasks, provided such parties are contractually required to protect data and use it only for the agreed purposes.

4. Data Security

Ascarya Digital Solutions implements reasonable technical and organizational measures to protect the confidentiality, integrity and availability of data, including:

• Encryption in transit (TLS) and encryption at rest where appropriate;
• Role-based access control and least-privilege principles;
• Multi-factor or multi-level authentication for privileged access;
• Regular security assessments and patching procedures;
• Logging and auditing of security-relevant events.

While we strive to protect data, no system can be guaranteed 100% secure. Users must safeguard their account credentials and notify the system administrator immediately if they suspect any compromise.

5. Data Retention and Deletion

Data retention is governed by the applicable data retention policy of the Government of Kabupaten Kuantan Singingi and by operational needs. Financial and audit records may be retained for the periods required by law or regulation. Inactive user accounts may be archived or deleted following local government procedures.

Users may request data correction, access, or deletion in accordance with the applicable administrative process by contacting the system administrator or the contact listed below.

6. User Rights

Subject to applicable law and local government policies, users may have the right to:

• Access their personal account information;
• Request correction of inaccurate data;
• Request deletion of personal account information where permitted by law and policy;
• Request a copy of certain system audit or activity logs relating to their account, where such disclosure does not violate security or legal requirements.

7. Transfers and International Processing

If data are processed or stored by service providers located outside the Republic of Indonesia, Ascarya Digital Solutions will apply appropriate contractual and technical safeguards to ensure that such transfers comply with applicable law and protect the data in a manner consistent with this Privacy Policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the System, legal requirements, or operational practices. Material changes will be communicated through the System or other official channels. The "Last updated" date at the top of this document indicates when this policy was most recently revised.

9. Contact Information

For questions, requests or concerns regarding this Privacy Policy or personal data handling, please contact:

10. Effective Use

By accessing or using the Dashboard Monitoring Keuangan, you confirm that you have read and understood this Privacy Policy and agree to its terms.