Template for legal-counsel review. This is a starter document, not final legal advice — have it reviewed and localised by a qualified lawyer before you rely on it.

Privacy Policy

Last updated: 16 July 2026

This Privacy Policy explains how Iptoria collects, uses, shares, and protects personal data when you use our IP-licensing marketplace and related services (the “Platform”). We process personal data in line with Indonesia’s Personal Data Protection Law (UU No. 27 of 2022, “UU PDP”) and other applicable laws.

1. Who is responsible

Iptoria is the data controller for personal data processed through the Platform. If you have any questions or want to exercise your rights, contact our privacy team at privacy@iptoria.qmodo.co.

2. Data we collect

Account data: name, email, password (hashed), role, and language preference.
Verification (KYC) data: identity or business documents, tax identifiers, and payout account details for Licensors.
Listing & transaction data: IP you list, licences you buy or sell, deal terms, messages, and collaboration requests.
Payment data: processed by Xendit and other payment providers. We receive transaction status and limited details (e.g. masked instrument, amount); we do not store full card numbers.
Technical & usage data: IP address, device and browser information, cookies, and log data about how you use the Platform.

3. How we use your data

to create and manage your account and provide the Platform;
to process licences, payments, payouts, refunds, and taxes;
to verify identity, prevent fraud, enforce our Terms, and comply with legal obligations;
to communicate with you about transactions, support, and (where permitted) product updates;
to improve, secure, and analyse the Platform.

4. Sharing your data

We share personal data only as needed to run the Platform: with the other party to a licence (limited to what a transaction requires), with service providers such as Xendit (payments), hosting and infrastructure providers, and analytics or communication tools, and with authorities where required by law. We do not sell your personal data.

5. International transfers

Some providers may process data outside Indonesia. Where that happens, we take steps to ensure an adequate level of protection consistent with UU PDP and applicable law.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the Platform, then for the period required to meet legal, tax, accounting, and dispute-resolution obligations, after which it is deleted or anonymised.

7. Cookies

We use cookies and similar technologies to keep you signed in, remember preferences (such as language), secure the Platform, and understand usage. You can control cookies through your browser settings; disabling some may affect functionality.

8. Security

We use technical and organisational measures — such as encryption in transit, hashed passwords, and access controls — to protect personal data. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where required by law.

9. Your rights

Subject to applicable law, you may access, correct, update, or delete your personal data, object to or restrict certain processing, withdraw consent, and request a copy of your data. To exercise these rights, contact privacy@iptoria.qmodo.co. We will respond within the time required by law.

10. Changes & contact

We may update this Policy from time to time; material changes will be notified through the Platform. Questions? Contact privacy@iptoria.qmodo.co.