1. Commitment to Data Sovereignty and Privacy

CFO AI Indonesia ("we", "our", or "the Platform") respects the privacy and confidentiality of your company's corporate, accounting, and personal data. This Privacy Policy outlines our procedures regarding the collection, processing, encryption, and protection of data processed via https://cfo-ai.site and https://app.cfo-ai.site.

2. Zero Data-Sharing Guarantee for AI Models

Strict Zero-Sharing Guarantee: Your financial records, general ledger balances, invoices, vendor contacts, and employee payroll data are never sold, rented, monetized, or shared with third parties. Furthermore, customer financial records are NEVER used to train, retrain, or fine-tune public foundation AI models.

3. Data Collection and Processing Purposes

We process information exclusively for the provision of operational financial services, including:

• Ingestion and optical character recognition (OCR) of commercial invoices and receipts.
• Reconciliation of uploaded bank statement rows (BCA, Mandiri, Permata, BRI).
• Computation of statutory withholding and value-added tax estimates (PPh 21 TER, PPh 23, PPN 11%).
• Generation of the downloadable Accountant Readiness Package (ZIP).

4. Security Architecture and Tenant Isolation

All data in transit is encrypted using Transport Layer Security (TLS 1.3). Data at rest is encrypted using Advanced Encryption Standard (AES-256). Each commercial tenant operates with isolated relational schema partitions to prevent cross-customer data leakage.

5. Data Retention and Deletion Rights

In accordance with Indonesian Law No. 27/2022 (UU PDP), business owners retain the right to request full export or permanent cryptographic deletion of their company tenant data at any time upon cancellation of subscription.