Privacy policy
Last updated 18 October 2026
This policy explains how PT Digitech Webs Media ("DIGIWEBS", "we") handles personal data collected through digiwebs.media, our partner platform at app.digiwebs.media (advertisers and publishers), our vendor portal at vendor.digiwebs.media, our insertion orders and the emails you send us. We process personal data in line with Indonesia's Personal Data Protection Law (UU No. 27 of 2022).
Who we are
PT Digitech Webs Media, Pakuwon Center Lt 23 Unit 2352, Jl. Embong Malang No. 1-5, Surabaya 60261, Indonesia. Contact: company@digiwebs.media.
What we collect
- Account details: name, company, country, work email, password (stored only as a one-way hash) and, if you turn it on, your two-step verification setup.
- Verification documents, only when money first moves (before a top-up, payout or vendor payment): for individuals an ID card or passport, a photo of you holding it, and a tax number; for companies business registration documents, tax ID, the signer's ID and a beneficial-owner declaration. If you are paid into someone else's account, a signed declaration and the account holder's ID.
- Payout and payment details: bank account, SWIFT code, virtual account or QRIS details, or a USDT wallet address used by our licensed provider. Card details are entered on the payment provider's page and never reach our servers.
- Commercial records: campaign briefs, verified earnings, invoices, insertion orders and payment status.
- Signature records for insertion orders: the name and title you type, the time of signing, your IP address and browser, and a fingerprint (hash) of the signed document.
- Emails you send to our company addresses, including attachments such as invoices.
- Security logs: login times, IP addresses and browser, used to detect sign-ins from new networks and to block abuse.
Why we use it
- To open and run your account, and to prepare, sign and perform insertion orders and partner agreements (contract).
- To verify who we do business with, prevent fraud, stolen-card use and money laundering, and keep accounting and tax records as Indonesian law requires (legal obligation).
- To protect our systems and partners, for example by telling you when your account is used from a new network or when payout details change (legitimate interest).
- To reply to your messages and send the emails your account needs, such as verification codes and payment updates.
We do not sell personal data and do not use it for advertising profiles.
Automated checks
To work quickly and consistently, our system reads uploaded documents and incoming emails automatically, using an AI service, to check that names, tax numbers and account details match and to route invoices to the right team. A person on our verification or finance team makes every decision that affects you: approving a verification, approving a payment or holding an account. You can ask for a human review of any decision.
Who receives it
Only the people at DIGIWEBS who handle your account, and service providers that run our infrastructure under confidentiality obligations: hosting and cloud storage, email delivery, document-reading AI, and licensed banks and payment providers. Some of these providers process data outside Indonesia (for example in the United States or Singapore); we use providers that apply protection at least equivalent to Indonesian law. We disclose data to authorities only when the law requires it.
How we protect it
Connections are encrypted. Verification documents are encrypted on our servers and opened only by our verification team. Backups are encrypted before they leave the server. Everyone at DIGIWEBS has an individual login, people who approve payments use two-step verification, and every approval, signature and document download is recorded in an audit trail.
How long we keep it
Invoices, payment records, signed insertion orders and the verification records behind them are kept for ten years, as Indonesian accounting and tax rules require. Verification documents of accounts that never moved money are deleted when no longer needed, at the latest twelve months after the account is closed. Security logs are kept for up to two years.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent, object to processing, or ask for a human review of an automated check, by writing to company@digiwebs.media. Some records must be kept even after a request, where the law requires it. If a breach affects your data, we will notify you within 3 × 24 hours of becoming aware of it.
Changes
We will post any change to this policy on this page with a new date.