Effective date: 2026-10-24
Privacy and contract contact: halo@dekasign.com. WhatsApp: +62 89613218666.
1. Roles and scope
This page accompanies Privacy and the DPA. Subprocessors help DekaSign process customer data for particular services. Others, including payment providers or customer-contracted services, may have independent duties and roles. Not every party receives all organizational data.
Request the provider identity, location and terms relevant to your service through the contact above. Active provider details must be confirmed before a use requiring specific approval or data locations; this category overview is not a complete contractual register.
2. Service and data categories
| Service category | Purpose | Relevant data |
|---|---|---|
| Hosting and storage | Operate services and store documents and work data | Accounts, organizations, forms, documents and necessary activity information. |
| Security and service delivery | Protect access and deliver permitted contents | Request information, IP addresses and data necessary to serve access. |
| Transactional email | Verification, invitations and notices | Recipient addresses, message contents and necessary delivery information. |
| Selected WhatsApp service | Send codes or notifications through available channels | Recipient numbers and relevant message contents. |
| Google sign-in when selected | Account authentication | Identity information required for login, rather than all account contents or Drive. |
| iPaymu for IDR; PayPal for USD | Payment processing | Buyer identity/contact, invoice references, amounts, currency and transaction status. |
| Customer-selected integrations | Connect processes to authorized destination services | Data the customer selects and authorizes for transmission. |
Category use depends on selected features. Payment information entered on a provider's page follows its notices. Using one service does not automatically send every document to all providers.
Google Drive is not connected in the current service. If the feature becomes available, it will require separate Google permission for its purpose and selected files, rather than automatic access to the entire Drive. Data use and revocation choices are explained in Privacy.
3. Locations and transfers
Processing may involve more than one country. A specific location is a commitment only if agreed in writing; processing exclusively in one jurisdiction is not guaranteed. International transfer safeguards follow applicable law and are not replaced by general consent without required assessment.
4. Approval, changes and objections
DekaSign obtains subprocessor approval and provides notices as required by law and the applicable DPA. Safeguards appropriate to the processing task are passed to providers. Additions or replacements requiring approval are handled before the relevant processing; customer silence is not automatic consent.
Reasoned objections may be raised to discuss alternatives, restrictions or termination of the affected service under the agreement. Contact us for the service-specific register, location questions, processing information or DPA review. Do not include passwords, OTPs or complete sensitive documents in an initial message.