This page explains how to use your rights over your personal data under the GDPR, the UK GDPR, Indonesia's UU PDP and similar laws. Jason Pieter Kusumajaya, Jl Taman Ubud Asri I No. 15, Tangerang, Banten 15810, Indonesia, is the controller.
1. Your rights
- Access: ask what personal data we hold about you and get a copy.
- Correction: ask us to fix data that is wrong or incomplete.
- Deletion: ask us to delete your data.
- Portability: receive your data in a common, machine-readable format.
- Restriction and objection: ask us to limit how we use your data, or object to a use based on legitimate interests.
- Withdrawing consent: withdraw consent you gave, for example for analytics cookies. This does not affect what was done before.
- No automated decisions: we do not make decisions about you by automated means with legal or similarly significant effects.
2. What we hold, and where
Most of what PrivBoard knows about you stays on your phone: your settings, your subscription status and any background photo. You can remove all of it by clearing the app's data or uninstalling the app. We do not hold what you type.
What we can hold about you outside your phone is small:
- Subscription records tied to an anonymous app user ID, kept by RevenueCat for us, and purchase records kept by Apple or Google. Ask the store about its own records.
- Emails you sent to us.
- Website server logs and, if you accepted analytics cookies, website statistics.
3. How to make a request
- Open the app, go to Settings and copy your Support ID.
- Email privacy@privboard.360framed.com from any address, say which right you want to use, and paste the Support ID. The Support ID is how we find your subscription record, because the app has no accounts.
- We may ask you to confirm that the request is yours before we act on it. We will not ask for more than we need.
We answer within 30 days, and sooner where the law requires. A request is free unless it is clearly unfounded or excessive, in which case the law may let us charge a reasonable fee or refuse. We will tell you why if we refuse.
4. If you are not satisfied
You may complain to a data protection authority. In Indonesia, that is the personal data protection authority designated under UU PDP. In the European Economic Area, it is the supervisory authority where you live, work or where the issue happened. In the United Kingdom, it is the Information Commissioner's Office. You may also write to us first at privacy@privboard.360framed.com and we will try to resolve it.
5. California and other US states
You may ask to know what personal information we collected, to delete it, and to correct it. We do not sell personal information or share it for cross-context behavioral advertising, and we will not treat you worse for using these rights. An authorized agent may make a request for you with your written permission.
6. Contact
Jason Pieter Kusumajaya, trading as PrivBoard, Jl Taman Ubud Asri I No. 15, Tangerang, Banten 15810, Indonesia. Email: privacy@privboard.360framed.com.