Privacy Policy

1. Who we are

Enflow is operated by PT Enigma Construction Group ("we", "us"), the data controller for the personal data described here.

• Privacy contact: privacy@enflow.id
• Service: enflow.id

2. Who this policy covers

Enflow is a business tool. Two different relationships run through it, and under data protection law they are not the same.

• Account holders — the person who signs up and the workspace they create. We are the controller for that data.
• Workspace members and site records — people your organization invites, and the names that appear inside your daily logs, purchase orders, and issue reports. Your organization decides what goes in; we process it on your organization's instructions.

If you were added to a workspace by an employer or a main contractor and want your records changed or removed, ask that organization first. We will help them, and we act ourselves where the law requires it.

3. What we collect

Account data, needed to give you a login:

• Name and email address.
• Password, stored only as a cryptographic hash — we never see it.
• If you sign in with Google: your Google account email, name, and profile picture.

Profile data, all of it optional, entered by you in account settings:

• Phone number, date of birth, gender, address, city, province, postal code.
• Profile photo.

Workspace content, created by you and your team as you use the product:

• Projects, bills of quantities, schedules, budgets, and cost records.
• Drawings and 3D models you upload (PDF, DWG, DXF, IFC, and similar), and anything you measure or mark on them.
• Daily logs, site photographs, issues, tasks, quality records, and their comments and attachments.
• Supplier, vendor, and material records, including contact details your team enters for other companies.
• Team membership, roles, and permissions.

Technical data, collected automatically:

• IP address, browser and device type, and timestamps of requests.
• Error diagnostics when something breaks, including the page you were on.
• Audit entries recording who changed which record and when — a deliberate feature of a construction record, not incidental logging.

Billing data:

• Your plan, billing interval, subscription status, invoice references, and renewal dates.
• Card and bank details are entered directly with our payment processor and are never stored on our servers.

We do not collect location from your device, we do not use advertising trackers, and we do not sell personal data.

4. What we use it for

• Running the service — showing your projects, saving your work, syncing changes across devices, and keeping the offline copy on your device in step with the server.
• Access control — deciding who in a workspace may see or change a record.
• Notifications — invitations, approval requests, reminders about site work, and billing notices, over email, in-app, and any channel your workspace enables.
• Billing — charging the plan you chose and renewing or ending it.
• Support — answering your questions and reproducing faults you report.
• Reliability and security — diagnosing crashes, investigating abuse, and keeping backups.
• Improving the product — understanding which features are used, from aggregate figures rather than by reading your project content.

5. Legal basis

Under UU No. 27/2022 on Personal Data Protection, and under the GDPR where it applies, we rely on:

• Performance of a contract — everything needed to deliver the service you signed up for.
• Legitimate interests — security, fraud prevention, and product improvement, balanced against your rights.
• Consent — optional profile fields and optional notification channels. You may withdraw consent at any time by clearing the field or turning the channel off.
• Legal obligation — tax and accounting records for payments.

6. The AI assistant

When you use the AI assistant, the text of your request and the project records needed to answer it are sent to our AI provider, OpenAI, and processed on servers in the United States.

• Internal record identifiers are stripped before the request leaves our servers.
• Your content is not used to train the provider's models.
• The conversation is stored in your workspace so you can read it back, and you can delete it.
• If you would rather this never happens, do not use the assistant — the rest of Enflow works without it.

7. Who we share it with

We share personal data with the service providers below, each bound by contract to process it only on our instructions. We do not sell personal data and we do not share it for advertising.

We also disclose data when the law requires it, to enforce our terms, or as part of a merger or acquisition — in which case we will tell you before your data moves.

8. Data leaving Indonesia

Our application servers run in Singapore. Some processors listed above operate in the United States. This means your personal data is transferred outside Indonesia.

As required by UU PDP Article 56, we transfer only to recipients whose contractual commitments provide a level of protection comparable to Indonesian law, using standard data protection clauses where the destination country has no adequacy finding.

9. Cookies and on-device storage

We use no advertising or analytics cookies. What we store on your device is:

• Session cookies that keep you logged in.
• Local storage for your theme and language choice.
• An offline cache (IndexedDB and a service worker) holding your recent project data and queued changes, so the app keeps working on a site with no signal. Clearing your browser data or signing out removes it.

10. How long we keep it

• Workspace content — for as long as the workspace is active, and for 30 days after it is closed, after which it is deleted from live systems.
• Backups — rolling backups are overwritten within 90 days.
• Account data — until you delete your account, then removed within 30 days.
• Billing and tax records — 10 years, as Indonesian tax law requires. These records are not deleted on request.
• Error diagnostics — 90 days.

11. How we protect it

• All traffic is encrypted in transit (TLS), and data is encrypted at rest by our hosting providers.
• Row-level security in the database enforces that a workspace can only read its own rows.
• Uploaded files sit in private storage and are served through short-lived, signed links.
• Access to production systems is limited to staff who need it.
• No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority within 72 hours, as UU PDP Article 46 requires.

12. Your rights

You may ask us to:

• Tell you what data we hold about you and why.
• Correct data that is wrong or incomplete.
• Delete your data, subject to the records we must keep by law.
• Give you a copy in a portable format.
• Stop or limit a particular use, or withdraw a consent you gave.
• Explain any decision that affects you.

Write to privacy@enflow.id. We answer within 30 days. If you are not satisfied, you may complain to the Indonesian personal data protection authority.

13. Deleting your account

You can delete your account yourself, from inside the app: Account → Delete account. You will be shown exactly what goes and what stays, and asked to retype your email. It takes effect immediately — the login stops working and your personal details are cleared.

What is deleted: your login, email, phone, address, date of birth, and photo, your access to every workspace, and the offline copy on your device.

What is not: the project records you created — purchase orders, daily logs, drawings, quantities. Those belong to the organization that commissioned the work, not to you, and they stay with the workspace. Your name stays on the records you created or approved, marked as a former member, because the organization needs to be able to show who approved what. A workspace can choose to remove former members' names instead; if any workspace you belong to does, your name is removed from every workspace. Invoices stay for as long as tax law requires (section 10).

The owners and admins of each workspace you belong to are told that you deleted your account, so they can reassign your open work. They cannot stop the deletion.

One case we stop: if you are the only owner of a workspace other people still work in, transfer ownership to a colleague first. Otherwise that workspace would be left with nobody able to invite, approve, or pay for it.

If you cannot reach the app, or you want the whole workspace deleted rather than just your account, email privacy@enflow.id from the address you registered with. We confirm within 5 working days and complete the deletion within 30 days.

14. Children

Enflow is a workplace tool, not intended for children. We do not knowingly collect data from anyone under 17. If you believe a child has given us data, contact us and we will remove it.

15. Changes to this policy

If we change this policy in a way that materially affects you, we will tell you by email or in the app at least 14 days before it takes effect. The date at the top of this page always shows the current version.

16. Contact

Questions about this policy, or about the data we hold:

• Privacy: privacy@enflow.id
• Sales and commercial: sales@enflow.id
• PT Enigma Construction Group