Privacy Policy

01 / Overview

Z-Code ("we", "our", or "us") is a software development company based in Indonesia. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our services, including our web applications (such as Zen at zen.zcode.id), websites, and related platforms.

By using our services, you agree to the collection and use of information in accordance with this policy.

02 / Information We Collect

We collect information you provide directly or that is generated through your use of our services:

Account Information: Name, email address, and profile picture obtained via Google Sign-In (OAuth 2.0).
Profile Data: Organization name, role, and preferences you configure within our applications.
Content Data: Projects, tickets, comments, and other content you create or submit through our platforms.
Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
Technical Data: IP address, browser type, device type, and operating system for security and troubleshooting purposes.

03 / How We Use Your Information

We use the information we collect to:

Create and manage your account and authenticate your identity.
Provide, operate, and improve our services and features.
Send transactional emails such as invitations, notifications, and account alerts.
Respond to inquiries, support requests, and feedback.
Monitor and analyze usage patterns to enhance user experience.
Detect, prevent, and address technical issues and security threats.
Comply with legal obligations applicable to our operations in Indonesia.

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

04 / Google Sign-In & OAuth

Our applications use Google OAuth 2.0 for authentication. When you sign in with Google, we receive the following information from Google:

Your name and email address as registered with your Google Account.
Your Google profile picture URL.
A unique identifier to link your Google account to our system.

We do not receive your Google password or access to your Google Drive, Gmail, or other Google services beyond the basic profile information listed above. Your use of Google Sign-In is also governed by Google's Privacy Policy.

05 / Data Storage & Security

Your data is stored on secured servers. We implement industry-standard security measures including:

HTTPS/TLS encryption for all data in transit.
Secure token-based authentication (JWT) for API access.
Access controls limiting data access to authorized personnel only.
Regular security reviews of our infrastructure and codebase.

While we strive to use commercially acceptable means to protect your data, no method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the event of a data breach.

06 / Data Sharing & Disclosure

We do not share your personal data with third parties except in the following circumstances:

Service Providers: Trusted vendors who assist in operating our platform (e.g., cloud hosting, email delivery) under strict confidentiality obligations.
Legal Requirements: When required by applicable Indonesian law, court order, or governmental authority.
Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity.
With Your Consent: When you have explicitly authorized us to share your information.

07 / Cookies & Local Storage

Our services use browser local storage and session cookies to:

Maintain your authentication session.
Remember your interface preferences (e.g., dark/light theme).
Improve performance by caching user state.

We do not use third-party advertising cookies. You may clear your browser's local storage at any time, which will log you out of our services.

08 / Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your account and associated personal data.
Portability: Request your data in a structured, machine-readable format.
Opt-out: Unsubscribe from non-essential communications at any time.

To exercise these rights, contact us at hello@zcode.id. We will respond within 14 business days.

09 / Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you close your account, we will delete or anonymize your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).

10 / Children's Privacy

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete the information.

11 / Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending an email notification. Your continued use of our services after changes take effect constitutes acceptance of the revised policy.

12 / Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: hello@zcode.id
Website: zcode.id
WhatsApp: +62 812-1954-9890