Legal
Privacy Policy
Last updated: 31/10/2026
This Privacy Policy explains what information Gigeh Solutions ("we", "us") collects through the website gigeh.com and the Gigeh CMMS application at platform.gigeh.com (together, the "Services"), how we use and protect it, and the choices you have. We follow Indonesia's Personal Data Protection Law (Law No. 27 of 2022, "UU PDP").
1. Who is responsible for your data
Gigeh Solutions operates the Services. For your account information (such as your name and email address) we decide how it is used.
The business data your company enters into Gigeh CMMS — equipment, work orders, readings, spare parts, photos and documents — belongs to your company. Your company decides what is entered and who can see it; we store and process it only to provide the Services to your company.
2. Information we collect
On the website (gigeh.com):
- We do not use cookies, analytics, advertising or tracking scripts.
- Your language choice (English or Indonesian) is saved in your own browser only and is never sent to us.
- If you email us, we receive your email address and the contents of your message.
- Our web server records standard technical logs (such as IP address, browser type and the page requested) for security.
In Gigeh CMMS (platform.gigeh.com):
- Account information: name, email address, user group, location access, and your password (stored only in encrypted, hashed form — we cannot read it).
- Business data your company enters: locations, equipment and models, maintenance schedules, work orders, checklists, readings, failure codes, spare parts and stock, and uploaded photos and documents.
- Activity and security records: login history and an audit trail of changes (who did what and when), together with IP address and browser information.
- Plan and billing information: your plan, usage against plan limits, and payment confirmations. Payments are made by bank transfer; we do not collect or store card details.
3. How we use information
- To provide, operate and maintain the Services, including the features your company uses.
- To send service emails, such as password setup, work order assignments, approvals, due-maintenance reminders and low-stock alerts, according to your company's notification settings.
- To keep the Services and your data secure, prevent misuse and investigate problems.
- To respond to your questions and support requests.
- To manage your plan, usage limits and payments.
- To meet our legal obligations.
We do not sell your data, and we do not use it for advertising.
4. Where your data is stored
All data in Gigeh CMMS — including uploaded photos and documents — is stored on our own servers, located in Indonesia, together with its backups.
Each customer's data is kept separate: one company can never see another company's data. Our staff do not access your company's business data, except when you ask us to for support or when the law requires it.
5. How we protect your data
- All connections to the Services use encrypted HTTPS.
- Passwords are stored only as secure hashes.
- Access inside Gigeh CMMS is controlled by user groups, permissions and location scope set by your company's administrator, and important actions are recorded in an audit trail.
- Uploaded files are only available through short-lived, authenticated links.
- We back up data daily so it can be restored after a technical failure.
No system is perfectly secure. If a data breach affects your personal data, we will notify you and the relevant authorities as required by the UU PDP.
6. Sharing with others
We share information only when necessary:
- With an email delivery provider, solely to send the Services' emails.
- With authorities when required by law or a valid legal request.
- With a successor organisation if Gigeh Solutions is merged or acquired, under the same protections described here.
7. How long we keep data, and permanent deletion
We keep your data for as long as your company uses the Services.
When data is deleted — by you, by your company's administrator, or by us at your request (for example, when an account is closed) — it is removed from the live system straight away. Copies may remain in our backups for up to 7 days, because we keep backups for 7 days on a rolling basis. After 7 days the deleted data is permanently erased from all our systems and cannot be recovered.
Server security logs are kept for a limited period and then deleted.
8. Your rights
Under the UU PDP you may:
- Ask what personal data we hold about you and get a copy of it.
- Correct personal data that is wrong or incomplete.
- Ask us to delete your personal data or close your account.
- Export your company's data (Gigeh CMMS provides Excel and PDF exports).
- Withdraw consent or object to processing, where the law allows.
Users of a company account can also ask their company's administrator, who can update or remove users directly. To make a request to us, email contact@gigeh.com. We may need to verify your identity first.
9. Changes to this policy
We may update this policy as the Services change. The date at the top shows the latest version. If we make significant changes, we will notify customers by email or in the application before they take effect.
10. Contact
Questions about this policy or your data: contact@gigeh.com.