1. Introduction
This Privacy Policy explains how PT KREASI INOVATIF BANGSA, the owner and operator of the OMOMEN platform ("OMOMEN", "we", "us"), collects, uses, discloses, stores, and protects your personal data when you use the OMOMEN website, applications, and services (the "Service"). We process personal data in accordance with Law No. 27 of 2022 on Personal Data Protection (the "PDP Law") and other applicable laws and regulations. For the purposes of the PDP Law, PT KREASI INOVATIF BANGSA acts as the Personal Data Controller for Users' personal data.
2. Personal Data We Collect
- Account data — name, phone number, email address (optional), password (stored in encrypted/hashed form), profile photo if you upload one, and optional profile details you provide such as gender, date of birth, and city.
- Event and workspace data — event name, event date and location, workspace name, invitation content (text, photos, videos, music), and the settings you configure.
- Guest data — the guest lists you enter, including names, phone numbers, attendance status (RSVP), messages, and other data you collect from guests through your invitations.
- Transaction data — subscription and purchase history, payment method (we do not store full card numbers; payment processing is handled by licensed payment providers), and proof of payment.
- Technical and usage data — IP address, device and browser type, pages accessed, invitation visit statistics, activity logs, and data collected through cookies and similar technologies.
3. Legal Bases for Processing
We process your personal data on one or more of the following bases under the PDP Law:
- Performance of a contract — to provide the Service you use under the Terms of Service;
- Consent — for specific processing such as marketing communications; you may withdraw consent at any time;
- Legitimate interests — to maintain security, prevent misuse, and improve the Service, with due regard to your rights and interests;
- Legal obligations — to comply with obligations under applicable laws, including tax obligations and lawful requests from competent authorities.
4. How We Use Personal Data
We use your personal data to:
- Provide, operate, and maintain the Service, including creating and distributing digital invitations and managing RSVPs;
- Process registration, authentication, and account security;
- Process payments and manage subscriptions;
- Show you invitation statistics and analytics (for example, visit counts and attendance confirmations);
- Provide customer support and respond to your enquiries;
- Send Service-related notifications and — with your consent — promotional information;
- Improve and develop Service features;
- Detect, prevent, and address fraud, misuse, or security incidents;
- Comply with our legal obligations.
5. Guests' Personal Data
When you, as an event creator, enter or collect guests' personal data through the Service, you are responsible for ensuring you have a valid basis (including guest consent where required) to process that data. We process guest data on your instructions solely to operate the Service and do not use it for other purposes. Guests who wish to access, correct, or delete their data may contact the relevant event creator or contact us at hi@omomen.com.
6. Disclosure to Third Parties
We do not sell your personal data. We only share personal data with:
- Service providers (data processors) — cloud infrastructure and hosting providers, authentication providers, payment providers, and analytics providers, who process data on our instructions under agreements containing data-protection obligations;
- Guests and your intended recipients — invitation content and event information are shared with the parties you send invitations to, according to your settings;
- Competent authorities — where required by applicable laws or a lawful order;
- Parties to a corporate transaction — in the event of a merger, acquisition, or asset transfer, subject to confidentiality consistent with this Privacy Policy.
7. Cross-Border Data Transfers
Some of our service providers may store or process data outside the territory of the Republic of Indonesia. In such cases, we ensure the destination country provides an equivalent level of data protection or we implement adequate safeguards as required by the PDP Law.
8. Storage and Retention
We retain your personal data for as long as your account is active or as needed for the processing purposes described in this Policy. Once the processing purpose has been fulfilled, or upon a valid deletion request, we will delete or anonymise the personal data within a reasonable period, unless further retention is required by applicable laws.
9. Security
We implement reasonable technical and organisational measures to protect personal data from unauthorised access, disclosure, alteration, or destruction — including encryption in transit, access controls, and security monitoring. Nevertheless, no method of electronic transmission or storage is completely secure; if a personal data breach occurs that affects you, we will notify you and the competent authority in accordance with the PDP Law.
10. Your Rights as a Data Subject
Under the PDP Law, you have the right to:
- Obtain information about the processing of your personal data;
- Access and obtain a copy of your personal data;
- Update or correct inaccurate personal data;
- Request the deletion or destruction of your personal data;
- Withdraw consent you have previously given;
- Object to certain processing, including for marketing purposes;
- Request restriction of the processing of your personal data;
- Obtain and use your personal data in a commonly used format (data portability).
You may exercise these rights through your account settings or by contacting us at hi@omomen.com. We will respond to your request within the timeframe required by applicable regulations.
11. Cookies and Similar Technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used (analytics). You can configure your browser to refuse cookies, but some Service features may not function properly without certain cookies.
12. Children's Privacy
The Service is not intended for children under 18 years of age without the consent of a parent or legal guardian. We do not knowingly collect children's personal data. If you become aware that a child has provided personal data to us without valid consent, please contact us so the data can be deleted.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or other reasonable means of communication before they take effect. The "Last updated" date at the top of this page indicates the version in force.
14. Contact
For questions, requests, or complaints regarding personal data protection, please contact:
PT KREASI INOVATIF BANGSA (OMOMEN)
Email: hi@omomen.com
Phone: +62 818-532-235