DRAFT — to be reviewed
This policy is a draft that has not yet been reviewed by legal counsel.
Privacy
Privacy policy
Last updated 1 October 2026
Who we are
SMVentures (“we”) runs smventures.id and decides how the personal data described here is used. We follow Indonesia’s Personal Data Protection Law (Law No. 27 of 2022, “UU PDP”).
What the contact form collects
When you send the contact form, we receive:
- your name;
- your email address, so we can reply;
- your organisation, if you fill it in;
- what your message is about (pitching an idea, a partnership, investing, or something else);
- your message.
To stop floods of messages, the server counts messages per internet (IP) address. That count is kept only in the server’s working memory, is not written to storage or logs, and disappears when the server restarts. If sending fails, our error log records only that it failed, never your message or details.
Why we use it
We use what you send only to read your message, answer you, and follow up on what you asked. We do not sell it, and we do not add you to a mailing list.
Who processes it for us
- Resend delivers the form to our email inbox, with your address as the reply-to.
- Vercel hosts the site and runs the form.
- Google provides Google Analytics (see below).
These providers may process data outside Indonesia, for example in the United States.
How long we keep it
- Your message stays in our email inbox for as long as we need it to handle your request and any follow-up, and is then deleted.
- The per-address count lasts only while the server keeps it in memory.
- Our providers keep their own delivery and request records for a limited time under their terms.
Google Analytics
We use Google Analytics to see how the site is used: which pages are viewed, roughly where visitors are, which device and browser they use, and how they arrived. Google Analytics sets cookies in your browser, and Google processes this data, possibly outside Indonesia. You can block these cookies in your browser settings, or install Google’s opt-out add-on.
Your rights
Under UU PDP you have the right, among others, to:
- be told how your personal data is processed;
- see your personal data and get a copy of it;
- have inaccurate or incomplete data corrected;
- have your data deleted, unless the law requires us to keep it;
- withdraw your consent at any time;
- ask us to delay or restrict processing;
- receive your data in a commonly used format;
- object, and claim compensation for a breach in how your data was processed.
How to reach us about your data
Send us a message through the contact form, choose “Something else”, and say what you would like us to do. We may ask you to confirm who you are before acting on a request.
The investor portal
The investor portal at investor.smventures.id has its own privacy policy, which covers shareholder data.
Changes
When this policy changes, we update this page and the date at the top.