1. Overview
This Privacy Policy explains how PT KRISMA ABADI PERKASA (hereinafter referred to as "we", "us", or "our") collects, uses, stores, shares and protects your personal information through the TikTok application and related services, and clarifies your privacy rights and information protection measures. This Policy applies to all users who use our TikTok-related services. Your use of our services constitutes your full acceptance of all terms of this Privacy Policy. If you do not agree with any clause of this Policy, please stop using our services immediately.
2. Data Controller & Contact Information
Data Controller: PT KRISMA ABADI PERKASA
Contact Email: krisma133@outlook.com
If you have any questions, complaints or demands for exercising rights regarding this Privacy Policy or the processing of your personal information, you may contact us via the above email at any time, and we will respond and handle your request within the statutory time limit.
3. Personal Information We Collect
We only collect user information necessary to provide, optimize and secure TikTok services, through active submission by you and automatic system collection. The specific types are as follows:
Actively Submitted Information: Account information (username, nickname), avatar and personal profile filled in during account registration and login; short video content, comments, private messages, likes, follows and other interactive information actively posted by you; problems, complaints and relevant supporting information actively feedback by you.
Automatically Collected Information: Device information (device model, system version, unique device identifier, network type); log information (login time, browsing records, operation records, content playback records); IP address and network access records; basic location information based on device permissions (collected only with your authorization for localized content recommendation).
Information Obtained from Third Parties: If you log in via a third-party account, we will obtain authorized public basic information from the third party without additionally collecting sensitive private information.
4. Purposes of Information Usage
We strictly adhere to the principles of "legality, legitimacy and necessity" to use your personal information only for the following purposes, and will not expand the scope of use without authorization:
Provide, maintain and update core TikTok services including short video browsing, posting, interaction and account management;
Optimize content recommendation and product functions to improve user experience;
Verify account identity, ensure account security, and prevent risks such as account theft, illegal operations and fraud;
Handle your consultations, complaints and feedback, and follow up on problem resolution;
Comply with laws, regulations and industry supervision requirements, and fulfill compliance obligations;
Carry out service data analysis, optimize product operation strategies, and prevent malicious use behaviors.
5. Information Sharing & Disclosure
We will not sell, rent or trade your personal information to irrelevant third parties. Your information may be shared or disclosed limitedly only under the following legal circumstances:
With your explicit authorization or active consent;
Entrust compliant third-party service providers to provide technical support, server operation and maintenance, data security protection and other services to ensure the normal operation of services, and require third parties to strictly abide by privacy protection clauses and refrain from abusing or disclosing user information;
Disclose relevant information in accordance with laws and regulations, judicial rulings and legal requirements of administrative supervision authorities;
In the event of business changes such as merger, acquisition and asset transfer, relevant user information will be transferred as business assets, and the successor shall still perform the privacy protection obligations stipulated in this Policy.
6. Information Storage & Security Protection
1. Storage Period: We only store your personal information within the necessary period required to achieve service purposes and fulfill compliance obligations. After account cancellation, we will clean up or anonymize your personal data within a reasonable time limit.
2. Security Protection: We adopt industry-standard encryption technology, data isolation, access permission control, security audit and other technical and management measures to fully protect your personal information and prevent information leakage, tampering, loss and abuse. Meanwhile, we have established a data security emergency mechanism to promptly notify users and take remedial measures in case of data security incidents.
3. Cross-border Transmission: If cross-border data transmission is required for service operation, we will strictly comply with relevant laws and regulations on cross-border data of various countries, ensure that the recipient has equivalent data security protection capabilities, and guarantee the security of user cross-border data.
7. User Privacy Rights
Under the framework of applicable laws and regulations, you have the following rights to your personal information:
Right to Know and Access: You may inquire and view the content of your personal information stored and used by us at any time;
Right to Rectification: You may apply for correction and supplementation if your personal information is incorrect or incomplete;
Right to Erasure: You may apply for deletion of personal information when the information processing is unnecessary, illegal, or you withdraw your consent;
Right to Withdraw Consent: You may withdraw your authorization and consent for information collection and use at any time. After withdrawal, we will terminate relevant processing behaviors, without affecting the legitimate processing behaviors previously conducted based on valid consent;
Right to Account Cancellation: You may independently apply for account cancellation, and we will clean up your personal data in accordance with rules after cancellation;
Right to Complaint and Report: If you believe our information processing behaviors infringe your privacy rights and interests, you may file a complaint via the reserved email or report to local regulatory authorities.
8. Minor Privacy Protection
We attach great importance to the privacy protection of minors. If you are a minor, please use this service with the accompaniment, consent and guidance of your guardian. We will not actively collect sensitive personal information of minors, and will take the initiative to delete minor information immediately if collected accidentally. Guardians may contact us at any time to handle the situation if they find minors have submitted personal information in violation of regulations.
9. Policy Updates & Revisions
We may revise this Privacy Policy from time to time according to product iteration, business adjustment and update of laws and regulations. After revision, the updated Policy will be notified to you via in-app announcements, pop-up windows and other methods. The revised Policy shall take effect from the date of publicity, and your continued use of the service shall be deemed as your acceptance of the revised Policy. If you do not accept the updated Policy, you shall stop using our services immediately.
10. Disclaimer
We shall not bear legal liability for personal information leakage or losses caused by the following circumstances: 1. Risks caused by users' voluntary disclosure of personal information or active authorization for third parties to obtain information; 2. Information leakage caused by force majeure factors beyond our control such as network attacks, hacker intrusions and system failures; 3. Information problems caused by illegal operations of third-party platforms and third-party service providers; 4. Information risks caused by users' use of services in violation of platform rules and laws and regulations.
11. Applicable Law & Dispute Resolution
The formulation, effectiveness, performance and dispute resolution of this Privacy Policy shall be governed by the laws of Indonesia and relevant general international data protection rules. Any dispute arising from this Policy between both parties shall first be resolved through friendly negotiation; if the negotiation fails, either party may file a lawsuit with the judicial authority having jurisdiction over our location.
EFFECTIVE DATE
This Privacy Policy shall take effect officially on the date of release.
Data Controller: PT KRISMA ABADI PERKASA
Contact Email: krisma133@outlook.com