Privacy Policy

Sxored collects Personal Data of Third Parties as authorized by the User, for the benefit of parties offering credit services such as banks, multifinance institutions, peer-to-peer lending platforms, and other financial institutions, in accordance with applicable laws and regulations. This service enables the User, as a provider of credit facilities, to verify, assess, and/or approve credit applications submitted by Third Parties.

The types of data collected from Users may include:

• Data voluntarily submitted by the User, including information provided when accessing and completing forms on the Site, such as full name, phone number, email address, password, and other identifying information;
• Data obtained through communication with Sxored, including customer service interactions;
• Responses to surveys distributed by Sxored or its officially appointed representatives;
• Data accessed through Site features requiring permission to access relevant information stored on the User’s device.

Data automatically recorded during the User’s interaction with the Site may include:

• Actual or approximate location data, such as IP address and Wi-Fi location;
• Timestamp data related to User activities, including account registration, login, and data uploads;
• Device information, including hardware model, operating system and version, software, IMEI number, unique device identifiers, serial number, motion data, and/or mobile network information;
• Server log data, including IP address, access date and time, Site features or pages viewed, system performance, browser type, and third-party services used prior to interacting with the Site.

Data obtained from external sources may include geo-location (GPS) data from business partners; personal data such as email address, phone number, name, gender, and date of birth from business partners, social media platforms, or websites/applications integrated with Sxored’s API; data from financial service providers, including credit rating agencies or Credit Information Management Institutions (LPIP); and marketing-related data such as email addresses from promotional service providers. Sxored may combine data obtained from these sources with other data in its possession.

Sxored may use the Personal Data collected from Users for the following purposes:

• To process any requests and/or activities performed by the User through the Site, including processing Third Party data and providing services to the User;
• To provide features that support, maintain, and improve Sxored’s products and services, including personalized account features and internal operations such as troubleshooting, data analysis, testing, research, and monitoring usage trends;
• To assist Users in communicating with customer service, including investigating and resolving issues, directing inquiries to appropriate personnel, and improving response quality;
• To contact Users via email, mail, phone, or other communication methods regarding data protection notifications, promotions, surveys, news, updates, and other relevant content;
• To monitor or investigate suspicious transactions or those suspected of fraud or legal violations, and to take necessary follow-up actions;
• To use or disclose Personal Data for law enforcement purposes or to fulfill legal obligations, including in the event of disputes or legal proceedings between the User and Sxored;
• To fulfill tax-related obligations under applicable laws and regulations in Indonesia;
• To facilitate corporate transactions such as mergers, asset sales, restructuring, financing, or acquisitions involving Sxored.

Sxored is committed to maintaining the confidentiality of User Personal Data under its control and guarantees that such data will not be disclosed, sold, transferred, distributed, or loaned to any third party without the User’s consent, except under the following circumstances:

• Disclosure to partners or other parties assisting Sxored in providing current or future services on the Site and processing User activities;
• Disclosure to business partners as authorized by the User for integrated services, promotions, or special offerings;
• Disclosure to third parties using Sxored’s public API for service fulfilment or other data usage purposes as described in the Use of Personal Data section;
• Communication between Sxored’s partners (including e-KYC, open banking, OTP providers, and other service facilitators) and the User for issue resolution or other matters;
• Disclosure to vendors, consultants, marketing partners, research firms, or similar service providers for third-party marketing, service improvement, and public relations;
• Communication initiated by the User through public media such as social media or Site features visible to the public;
• Disclosure to Sxored’s subsidiaries and affiliates for service delivery or data processing on behalf of Sxored;
• Disclosure to relevant parties for creditworthiness analysis;
• Disclosure to comply with legal obligations or legitimate requests from law enforcement or government authorities.

In connection with the disclosure of Personal Data as described above, Sxored may disclose such data to third-party service providers, agents, affiliates, or related companies located outside the territory of Indonesia. These parties shall only manage and/or utilize the User’s Personal Data in accordance with one or more purposes outlined in this Privacy Policy and in compliance with applicable laws and regulations.

Cookies are small files that are automatically stored on the User’s device and function to record preferences and configurations during the User’s visit to the Site.

These cookies are not intended to access other data stored on the User’s device, except for data that the User has explicitly consented to share.

While the User’s device may automatically accept cookies, the User may modify browser settings to refuse cookies. However, such refusal may affect the optimal functionality of Sxored’s services when accessing the Site.

Sxored may utilize third-party features to enhance Site services, including but not limited to personalization and content adjustment based on User interests or browsing history.

Mobile devices (iOS and Android) generally include settings that prevent the Site from accessing certain data without the User’s consent. By using the Site and granting access, the User is deemed to have consented to the collection and use of Personal Data stored on their device.

The User may opt out of receiving promotional communications such as newsletters, product reviews, and service updates by unsubscribing via email. However, Sxored may continue to send transactional or account-related notifications.

Subject to applicable laws and regulations, the User may contact Sxored to withdraw consent for the collection, storage, management, and use of their Personal Data. The User acknowledges that such withdrawal may result in the inability to access the Site, its services, or third-party services integrated with Sxored.

Sxored implements reasonable security measures to protect Personal Data stored within its systems from unauthorized access, use, modification, retrieval, and/or disclosure, including password protection and other safeguards.

Personal Data may be stored or processed outside the territory of the Republic of Indonesia by parties acting on behalf of Sxored, including third-party service providers, vendors, partners, contractors, or affiliates. Sxored shall ensure that such data remains protected in accordance with this Privacy Policy.

While Sxored employs its best efforts to secure User data, the User acknowledges that data transmission over the internet is inherently vulnerable. Therefore, any provision of information by the User is at their own risk.

Sxored shall anonymize Personal Data under its control when the data is no longer necessary for the purpose of its collection; and retention is no longer required for compliance with applicable laws and regulations.

The User acknowledges that certain Personal Data may be retained by third parties, including government agencies. In cases where Sxored shares data with such entities, the User agrees that data retention shall be subject to the respective policies of those institutions.

Sxored shall take reasonable steps to ensure that Personal Data is processed accurately and completely. The User is responsible for promptly notifying Sxored of any changes or inaccuracies in their Personal Data.

The User shall have the right to access and/or correct Personal Data under Sxored’s control by contacting customer service as specified in this Privacy Policy. Such requests shall be processed upon submission of valid proof of identity. Sxored reserves the right to deny any request for access or correction under the following circumstances:

• Where permitted or required by applicable law;
• Where the data contains references to other individuals;
• Where the request is deemed irrelevant, frivolous, or unduly burdensome.

Sxored may impose administrative fees for processing access or correction requests.

The User may withdraw previously granted consent for the processing of Personal Data by submitting a formal request through Sxored’s customer service. Sxored shall process such requests within a reasonable timeframe. The User acknowledges that withdrawal of consent may result in the termination of any contractual relationship with Sxored due to the inability to fulfil obligations.

If the User has concerns regarding Sxored’s handling of Personal Data or believes their privacy rights have been violated, the User may submit a complaint to Sxored’s customer service or designated contact listed in this Privacy Policy, including identification and a description of the complaint.

Sxored shall investigate the complaint and endeavor to respond within a reasonable period following receipt of the User’s submission.

Should the User have any questions, comments, complaints, or claims regarding this Privacy Policy, or wish to access and/or correct their Personal Data, the User may contact Sxored’s customer service via email at use@sxored.com.

Sxored does not retain original or raw documents uploaded by the User. Such documents are processed solely for service-related purposes, and Sxored only stores the extracted information and/or processed results derived from those documents.

The extracted information and processed results shall be retained for as long as the User’s account remains active, unless deleted earlier upon the User’s request. Sxored shall delete such information and processed results no later than thirty (30) calendar days following the occurrence of any of the following events:

• Termination of the relationship or cooperation between the User and Sxored;
• Deletion initiated by the User (soft-delete) via features available on the Site;
• Receipt of a written deletion request submitted by the User to Sxored.

All deletion activities shall be carried out in accordance with applicable laws and regulations.

Sxored reserves the right to modify, revise, or update this Privacy Policy at any time without prior notice. Users are encouraged to review this Privacy Policy periodically to stay informed of any changes.

By continuing to access and use the Site and/or other services provided by Sxored following any amendments to this Privacy Policy, the User shall be deemed to have read, understood, and agreed to such amendments.