Privacy Policy
Last Updated: September 19, 2026 • Compliant with UU No. 27/2022 (UU PDP) & ISO/IEC 27701
1. Introduction & Scope
Zenty InfoSec Hub ('we', 'us', or 'our'), operated under the CTAR.tech technology ecosystem, is committed to safeguarding personal and organizational data. This Privacy Policy governs your use of our Multi-Tenant Cybersecurity & GRC platform.
2. Information We Collect
We process information strictly required to deliver automated compliance services:
- Tenant Account Data: Organization name, domain, admin contact information, and billing metadata.
- Security Logs & Configurations: Audit logs, policy text, access matrices, and incident summaries provided by tenant personnel.
- Technical Telemetry: IP addresses, browser signatures, and timestamped authentication logs for threat detection.
3. Tenant Isolation & Encryption
Every tenant's data is isolated using logical row-level boundaries within our Neon serverless PostgreSQL architecture. Data in transit is secured using TLS 1.3, and data at rest is encrypted using AES-256.
4. Rights of Data Subjects (UU PDP)
In accordance with Indonesian Law No. 27/2022 on Personal Data Protection, users have the right to access, rectify, restrict, or request permanent deletion of their personal identifiable data at any time via the tenant management portal.